You can configure GigaSMART engine resources on GigaVUE‑HC1 to reduce the Inline SSL resource utilization by 50% and use the rest of the resource to configure the other GigaSMART applications. The Inline SSL application runs in the following two modes:
|
■
|
Standalone mode Enabled—The Inline SSL feature takes the entire GigaSMART engine resource. By default standalone mode is enabled for Inline SSL. |
|
■
|
Standalone mode Disabled—The GigaSMART engine resource allocated for Inline SSL feature is reduced to 50% and the residual GigaSMART engine resource can be configured for other GigaSMART applications. |
On GigaVUE‑HC1, you can configure the following GigaSMART applications along with the Inline SSL feature:
|
o
|
De-duplication (SMT-HC1-DD1) |
|
o
|
NetFlow Generation (SMT-HC1-NF1) |
|
o
|
BSE Combo (SMT-HC1-BSE) - Masking, Slicing, and Trailer |
|
o
|
Header-stripping (SMT-HC1-HS1) |
|
o
|
Flow Sampling (SMT-HC1-FVU) |
|
o
|
Tunneling, ERSPAN (SMT-HC1-TUN) |
Limitations
- It is not recommended to configure Inline SSL feature with other GigaSMART applications, except the applications listed above.
- The Passive SSL decryption is not recommended to be configured with Inline SSL feature and combination of NetFlow and SSL decryption do not work with the Inline SSL.
- For inline SSL decryption, Internet connectivity to GigaSMART and clustering is not supported on the same interface, for example, eth2.
Enable Standalone mode for Inline SSL decryption
To enable Standalone mode for Inline SSL decryption on GigaVUE‑HC1:
|
1.
|
From the GigaVUE‑HC1 device view, select GigaSMART > GigaSMART Groups > GigaSMART Groups. |
|
2.
|
Click New to create a new GigaSMART group or click Edit to modify an existing GigaSMART group. |
|
3.
|
Go to Inline SSL under GigaSMART Parameters, and select Standalone. |