Create Virtual Port

To create a virtual port, use the following procedure:

  1. From the device view, select GigaSMART > Virtual Ports.
  2. Click New.
  3. On the Virtual Ports page, do the following:
a. In the Alias field, enter a name for the virtual port. For example, gsTraffic.
b. From the GigaSMART Group drop-down list, select the GigaSMART group to associate with the virtual port. For example, gsgrp1.
c. Select the GTP Overlap check box to enable multiple GTP flow sampling maps to receive traffic from the same virtual port.
d. In the Inline Failover Action drop-down list, select one of the following options:
o   Tool Bypass — When the inline tool fails, all traffic coming to the respective inline tool is directed via the bypass path.
o   Network Bypass — When the inline tool fails, the traffic is directed to multiple inline tools associated with an inline network or inline network group using rule-based inline maps.
o   Tool Drop — When the inline tool fails, all traffic coming to the respective inline tool is dropped.
o   Network Drop—When the inline tool fails, all traffic coming to the respective inline tool is dropped.
o   Network Port Forced Down—When the inline tool  fails, the inline network ports of the respective inline network are forced as "down".
e. Click OK.
  1. Create a GigaSMART operation with an Adaptive Packet Filtering (APF) component.
a. From the device view, select GigaSMART > GigaSMART Operations (GSOP) > GigaSMART Operation.
b. Click New.
c. In the Alias field, enter g1 for the GigaSMART Operation.
d. From the GigaSMART Groups list, select a GigaSMART group.
e. From the GigaSMART Operations (GSOP) list, select Adaptive Packet Filtering.
  1. Create a first-level map name map1 to direct traffic to the virtual port gsTraffic.
a. Go to the Maps page and click New. The New Map page opens.
b. Enter map1 in the Alias field.
c. For Type, select First Level and for Subtype select By Rule map
d. For Source, select a network port. For example, a network port with the alias N1.
e. For Destination, select the virtual port (gsTraffic).
f. Click Add a Rule, and create rule with the following conditions:
•   Pass
•   VLAN 20
•   IPv4 Protocol UDP
•   Port Destination 2152
g. Click Save.
  1. Create second-level maps named map2 and map3 to direct traffic from the virtual port to the GigaSMART operation.

Configure the map map2 with the Source as virtual port gsTraffic, the Destination as port T1, and select g1 for GigaSMART Operation (GSOP). For map2, add the following two rules.

Rule 1:

o   Pass
o   IPv4 Destination 65.128.7.21 Cidr 32
o   IPv4 Protocol TCP
o   Port Destination 80

Rule 2:

o   Pass
o   IPv4 Destination 98.43.132.70 Cidr 32
o   IPv4 Protocol TCP
o   Port Destination 80

Configure the map map3 with the Source as virtual port gsTraffic, the destination Destination as port T2, and g1 for GigaSMART Operation (GSOP) For map3, add the following two rules.

Rule 1:

o   Pass
o   IPv4 Destination 65.128.7.21 Cidr 32
o   IPv4 Protocol TCP
o   Port Destination 443

Rule 2:

o   Pass
o   IPv4 Destination 98.43.132.70 Cidr 32
o   IPv4 Protocol TCP
o   Port Destination 443

If there are other GigaSMART applications defined in the GigaSMART operation, filtering will be done on the packets before sending the GigaSMART applications.

  1. Create a shared collector map name mapC1 to direct traffic not matching the second-level maps to the tool port with the alias T3. The collector for the first-level map named map1 uses the standard collector available in prior releases.
a. Go the Maps page and click New. The New Page page opens.
b. In the Alias field, enter mapC1.
c. For Type, select Regular.
d. For Subtype, select Collector.
e. For Source, select the virtual port gsTraffic.
f. For Destination, select the tool port with the alias T3, and the click Save.