| Step 1 |
Choose
.
|
| Step 2 |
Next to the device where you want to add the hybrid interface,
click the edit icon ( ).
In a multidomain deployment, if you are not in a leaf domain, the system prompts you to switch.
|
| Step 3 |
From the
Add drop-down menu, choose
Add Logical Interface.
|
| Step 4 |
Click
Hybrid to display the hybrid interface options.
|
| Step 5 |
In the
Name field, enter a name for the interface.
|
| Step 6 |
From the
Virtual Router drop-down list, choose an existing
virtual router, choose
None, or choose
New to add a new virtual router.
| Note
|
If you add a new virtual router, you must configure it on the
Device Management page after you finish setting up the hybrid interface. See
Adding Virtual Routers.
|
|
| Step 7 |
From the
Virtual Switch drop-down list, choose an existing
virtual switch, choose
None, or choose
New to add a new virtual switch.
| Note
|
If you add a new virtual switch, you must configure it on the
Device Management page after you finish setting up the hybrid interface. See
Adding Virtual Switches.
|
|
| Step 8 |
Check the
Enabled check box to allow the hybrid interface to
handle traffic.
| Note
|
If you clear the check box, the interface becomes disabled and
administratively taken down.
|
|
| Step 9 |
In the
MTU field, enter a maximum transmission unit (MTU),
which designates the largest size packet allowed.
The range of MTU values can
vary depending on the model of the managed device and the interface type.
| Caution
|
Changing the highest MTU value among all non-management interfaces on the device restarts the Snort process when you deploy
configuration changes, temporarily interrupting traffic inspection. Inspection is interrupted on all non-management interfaces,
not just the interface you modified. Whether this interruption drops traffic or passes it without further inspection depends
on the model of the managed device and the interface type. See Snort® Restart Traffic Behavior for more information.
|
|
| Step 10 |
Next to
ICMP, check the
Enable Responses check box to allow the interface to
respond to ICMP traffic such as pings and traceroute.
|
| Step 11 |
Next to
IPv6 NDP, check the
Enable Router Advertisement check box to enable the
interface to broadcast router advertisements. You can only enable this option
if you added IPv6 addresses.
|
| Step 12 |
To add an IP address, click
Add.
|
| Step 13 |
In the
Address field, enter the IP address and subnet mask.
Note the following:
-
You cannot add network and broadcast addresses, or the static
MAC addresses 00:00:00:00:00:00 and FF:FF:FF:FF:FF:FF.
-
You cannot add identical IP addresses, regardless of subnet
mask, to interfaces in virtual routers.
|
| Step 14 |
Optionally if you have IPv6 addresses, next to the
IPv6 field, check the
Address Autoconfiguration check box to set the IP
address of the interface automatically.
|
| Step 15 |
For
Type, choose either Normal or SFRP.
|
| Step 16 |
If you chose
SFRP for
Type, set options as described in
SFRP.
|
| Step 17 |
Click
OK.
|
| Step 18 |
Click
Save.
|
).
Feedback