Example 1—Unprotected Flexible Inline, One Collector Map

Example 1 has one inline network, five inline tools, and a collector map that acts as a passall, sending all traffic through all tools.

The inline network alias is n0102, based on ports x1 and x2.

For example, the inline tools can be Web Application Firewall (WAF), Intrusion Prevention System (IPS), Advanced Persistent Threat (APT).

The inline tool aliases are t0708 to t1516, based on ports x7 to x16.

Use the following steps to configure Example 1:

Step

Description

Command
1.    

Configure inline network ports, port type (inline-network), and administratively enable inline network ports.

(config) # port 1/3/x1..x2 type inline-network
(config) # port 1/3/x1..x2 params admin enable
2.  

Configure inline network.

(config) # inline-network alias n0102 pair net-a 1/3/x1 and net-b 1/3/x2
3.  

Configure inline tool ports, port type (inline-tool), and administratively enable inline tool ports.

(config) # port 1/3/x7..x16 type inline-tool
(config) # port 1/3/x7..x16 params admin enable
4.  

Configure inline tools, specify that the inline tool is going to be shared by different sources, and enable them.

Note:  The tag is optional. The default is auto, which automatically assigns tags.

(config) # inline-tool alias t0708 pair tool-a 1/3/x7 and tool-b 1/3/x8
(config) # inline-tool alias t0708 shared true
(config) # inline-tool alias t0708 enable

(config) # inline-tool alias t0910 pair tool-a 1/3/x9 and tool-b 1/3/x10
(config) # inline-tool alias t0910 shared true
(config) # inline-tool alias t0910 enable

(config) # inline-tool alias t1112 pair tool-a 1/3/x11 and tool-b 1/3/x12
(config) # inline-tool alias t1112 shared true
(config) # inline-tool alias t1112 enable

(config) # inline-tool alias t1314 pair tool-a 1/3/x13 and tool-b 1/3/x14
(config) # inline-tool alias t1314 shared true
(config) # inline-tool alias t1314 enable

(config) # inline-tool alias t1516 pair tool-a 1/3/x15 and tool-b 1/3/x16
(config) # inline-tool alias t1516 shared true
(config) # inline-tool alias t1516 enable
5.  

Configure collector map from inline network to inline tools in both directions, add user-defined tag, and enable map.

(config) # map alias FLEX1
(config map alias FLEX1) # type flexInline collector
(config map alias FLEX1) # from n0102
(config map alias FLEX1) # a-to-b t0708,t0910,t1112,t1314,t1516
(config map alias FLEX1) # b-to-a reverse
(config map alias FLEX1) # tag 100
(config map alias FLEX1) # enable
(config map alias FLEX1) # exit
(config) #
6.  

Configure the path of the traffic to inline tools.

(config) # inline-network alias n0102 traffic-path to-inline-tool