To configure the inline tool ports and inline tools:
1.
Go to > Physical > Orchestrated Flows > Inline Flows > Configuration Canvas to create a new Flexible Inline Canvas.
2.
In the displayed canvas, select the device where you want to configure the inline tool.
3.
Click the ‘+’ icon next to the Inline Tool to create a new entry.
4.
In the Properties pane, enter a name and description in the Alias and Description fields.
5.
From the Type drop-down list, select one of the following options:
o
External - To configure a third-party tool.
o
GigaVUE Node - To configure a GigaVUE node as a tool.
6.
Click Port Editor, and in the Quick Port Editor, scroll to the inline tool ports you want to configure. Select Enable to activate the ports, and click OK.
7.
From the Port A and Port B drop-down lists, select the inline tool ports based on the direction the inline tool expects traffic from the network.
8.
Verify that the Enabled check box is selected.
9.
From the Failover action drop-down list, choose one of the following options:
o
Tool Bypass - Redirects traffic to the next inline tool or inline network port when a failover occurs.
o
Network Bypass - Puts inline networks in bypass mode (traffic flows from side A to side B and vice versa).
o
Tool Drop - Drops traffic and redirects it to a dummy VLAN with no members.
Note: If the failover action is set to 'drop' for an inline tool in the Flex iSSL solution, GigaSMART drops all traffic at the vport.
o
Network Drop - Drops all traffic entering from side A and side B.
o
Network Port Forced Down - Brings down inline network ports.
10.
Select the Recovery Mode to either manual or automatic.
11.
To define additional tags on the tool side, select the Enable check box for the Inline tool Sharing mode.
Note: If you disable Inline Tool Sharing Mode, you can use the inline tool only in one flexible inline map.
12.
From the Flex Traffic Path drop-down list, select one of the following:
o
Drop- Drops traffic at the inline tool.
Note: If the failover action is set to 'drop' for an inline tool in the Flex iSSL solution, GigaSMART drops all traffic at the vport.
o
Bypass - Redirects all traffic from the inline network to the opposite-side inline network port, bypassing all inline tools and tool groups. Traffic is not decrypted during this process.
o
Bypass with Monitoring - Sends traffic to the inline tool and absorbs it, while forwarding a copy to the next inline tool in the sequence. Also absorbs return traffic from side B.
o
To Inline Tool - Directs all traffic through the configured sequence of inline tools and tool groups based on their current status, and decrypts it.
13.
If required, select the Enable check box for Regular Heartbeat, and choose a suitable profile from the Regular Heartbeat Profile drop-down list.
14.
Enter the IP addresses for side A and side B in the HB IP Address A and HB IP Address B fields, as defined in the heartbeat profile.
15.
If required, select the Enable check box for Negative Heartbeat, and choose a suitable profile from the Negative Heartbeat Profile drop-down list.
> Physical > Orchestrated Flows > Inline Flows > Configuration Canvas to create a new Flexible Inline Canvas.
