Configure ISG for In-line Proxy Deployment
Article ID: 258204
Updated On:
Products
Issue/Introduction
You want to configure your ISG proxy application for a transparent in-line deployment.
Environment
In order to enable bridging ensure the following:
- ISG appliance is running 2.4.3.1 or later
- ProxySG application is running SGOS 6.7.5.18 or later, or SGOS 7.3.8.2 or later.
- Bypass capable NICs
Overview:
When the ISG appliance boots up, it automatically detects bridges and sets the mode to disabled by default. After you set the bridge to either fail-open or fail-closed mode, you assign the bridge to a ProxySG application and the ISG host automatically populates the bridge in the application.
Resolution
Bridging can only be configured from the ISG CLI. Use the following commands to configure and manage bridges:
1. Stop the application (virtual proxy)
(config)#applications
(config-applications)#stop <application-name>
2. Configure Bridging mode
(config)#bridge
(config-bridge)#edit passthru-<int1> mode fail-open|closed
(config-bridge)#edit passthru-<int2> mode fail-open|closed
3. Configure Network Definition*
(config)#network-definition
(config-network-definition)#create <definition-name>
(config-network-definition)#edit <definition-name> add mode reserved bridges passthru-<int1>
(config-network-definition)#edit <definition-name> add mode reserved bridges passthru-<int2>
(config-network-definition)#edit <definition-name> add mode shared interfaces 0:0
4. Assign network definition to application
(config)#applications
(config-applications)#edit <application-name> network-definition <definition-name>
(config-applications)#start <application-name>
*Network Definitions:
Interfaces—Can be shared or reserved. Shared interfaces can be included in more than one network definition and be used by multiple running applications. Reserved interfaces can only be included in one network definition and only be used by one application at a time.
Additional Information
The ISG appliance does not support link-failure propagation or creating a bridge from an arbitrary set of interfaces.
Feedback
