Go to > Physical > Orchestrated Flows > Inline Flows > Configuration Canvas to create a new Flexible Inline Canvas.
2.
In the displayed canvas, select the device where you want to configure the inline tool group.
3.
Click the ‘+’ icon next to the Inline Tool Group to create a new entry.
4.
In the Properties pane, enter a name and description in the Alias and Description fields.
5.
From the Inline Tools drop-down list, select the required inline tools.
6.
From the Weighting drop-down list, choose one of the following options:
o
Equal—Distributes traffic equally across all inline tools in the inline tool group. This is the default option.
o
Relative—Distributes traffic to the inline tools in the inline tool group based on a relative weight or ratio assigned to the respective inline tools. The valid range is 1–256.
o
Percentage—Distributes traffic to the inline tools in the inline tool group based on assigned percentages. The valid range is 1–100.
Note: If you select Relative or Percentage, enter the hash weights for the inline tools in the table below the Weighting drop-down list. Ensure that you assign a hash weight for each inline tool in the inline tool group. However, asymmetrical hashing is not supported for these options.
7.
From the Inline Spare Tool drop-down list, select the inline tool that will receive traffic if the primary inline tool fails. To add a removed tool back to the spare list, delete it from the group and update it under the Inline Tool Group option in the canvas.
Note: You cannot select an inline spare tool if you choose a Weighting option.
8.
Select the Enabled check box to make the inline tool group available for deployment.
9.
Select the Release Spare if Possible check box to allow the spare tool to return to standby when the primary tool recovers.
10.
From the Failover Action drop-down list, Choose one of the following options:
o
Tool Bypass - Redirects traffic to the next inline tool or inline tool group when a failover occurs.
o
Network Bypass - Puts inline networks in bypass mode (traffic flows from side A to side B and vice versa).
o
Tool Drop - Drops traffic for the affected inline tool or inline tool group.
o
Network Drop - Drops all traffic entering from side A and side B.
o
Network Port Forced Down - Brings down inline network ports.
11.
From the Failover Mode drop-down list, select Spread to redistribute the traffic coming from the inline network (or inline network group) to the active inline tools (excluding the failed inline tool or tools).
Note: This field is not applicable when there is only one inline tool in the tool list.
12.
From the Minimum Healthy Group Size drop-down list, select the minimum number of inline tools (including the spare) required for the inline tool group to remain active.
13.
From the Hash drop-down list, choose one of the following options to distribute packets across the inline tools in the group:
o
Advanced—Uses symmetrical hashing, derived from the combination of packet fields based on the selected advanced-hash algorithm criteria
•
The most common criteria are the combination of source IP and destination IP addresses.
•
This produces a hash value that ensures all traffic from the same session is sent to the same inline tool in the group
o
SideA as sourceIP & SideB as destinationIP—Uses asymmetrical hashing, derived from the source IP address on side A and the destination IP address on side B of the inline network.
•
This produces a hash value that ensures all traffic from the same source address on side A is sent to the same inline tool in the inline tool group, regardless of destination or session.
o
SideB as sourceIP & SideA as destinationIP—Uses asymmetrical hashing, derived from the destination IP address on side A and the source IP address on side B of the inline network.
•
This produces a hash value that ensures all traffic from the same source address on side B is sent to the same inline tool in the inline tool group, regardless of destination or session.
Note: This field is not applicable if you select the Relative or Percentage options in the Weighting drop-down list.
14.
From the Flex Traffic Path drop-down list, select one of the following options:
o
Drop- Drops traffic at the inline tool group.
o
Bypass - Traffic bypasses the inline tool group. Use this option for performing maintenance on an inline tool group.
o
Monitoring - Sends traffic to the inline tool group and absorbs it, while forwarding a copy to the next inline tool group in the sequence. Also absorbs return traffic from side B.
o
To Inline Tool - Forwards traffic to the inline tool group.
> Physical > Orchestrated Flows > Inline Flows > Configuration Canvas to create a new Flexible Inline Canvas.
