Руководство Пользователя для Cisco Cisco Web Security Appliance S170
26-7
Cisco IronPort AsyncOS 7.5.7 for Web User Guide
Chapter 26 Configuring Network Settings
Virtual Local Area Networks (VLANs)
Step 2
Click the Add Route button corresponding to the interface for which you are creating the route. The Add
Route page is displayed.
Route page is displayed.
Step 3
Enter a Name, Destination Network, and Gateway.
Step 4
Submit and commit your changes.
Virtual Local Area Networks (VLANs)
VLANs are virtual local area networks bound to physical data ports. You can configure one or more
VLANs to increase the number of networks the IronPort appliance can connect to beyond the number of
physical interfaces included. For example, a Web Security appliance has two data interfaces available
for VLANs: P1 and Management. VLANs allow more networks to be defined on separate “ports” on
existing interfaces.
VLANs to increase the number of networks the IronPort appliance can connect to beyond the number of
physical interfaces included. For example, a Web Security appliance has two data interfaces available
for VLANs: P1 and Management. VLANs allow more networks to be defined on separate “ports” on
existing interfaces.
provides an example of configuring several VLANs on the P1 interface.
Figure 26-4
Using VLANs to Increase the Number of Networks Available on the Appliance
VLANs can be used to segment networks for security purposes, to ease administration, or increase
bandwidth. For example, create multiple VLANs on the P1 interface and then apply different policies to
each. VLANs appear as dynamic “Data Ports” labeled in the format of: “VLAN DDDD” where the
“DDDD” is the ID and is an integer up to 4 digits long (VLAN 2, or VLAN 4094 for example). AsyncOS
supports up to 30 VLANs. Duplicate VLAN IDs are not allowed on an IronPort appliance.
bandwidth. For example, create multiple VLANs on the P1 interface and then apply different policies to
each. VLANs appear as dynamic “Data Ports” labeled in the format of: “VLAN DDDD” where the
“DDDD” is the ID and is an integer up to 4 digits long (VLAN 2, or VLAN 4094 for example). AsyncOS
supports up to 30 VLANs. Duplicate VLAN IDs are not allowed on an IronPort appliance.
NOC
DMZ
VLAN
“Router”
VLAN1
VLAN3
VLAN2
Cisco IronPort appliance configured for
VLAN1, VLAN2, and VLAN3
VLAN1, VLAN2, and VLAN3