Product Documentation

How to Configure Virtual Interface Groups for the Branch Site

Aug 09, 2017

After adding the new site, the next step is to create and configure the Virtual Interface Groups for the site.

To add a Virtual Interface Group to the new site, do the following:

  1. In the Sites navigation tree, click + next to the name of the site you just added.

          This opens the configuration branches for the new site.

localized image

     2.  Click + to the left of the Interface Groups branch.

          This displays the Interface Groups table for the site.

localized image

     3.  Click + to the right of Interface Groups.

          This adds a new blank group entry to the table and opens it for editing.

localized image

     4.  Select the Ethernet Interfaces to include.

          Under Ethernet Interfaces, click a box to include/exclude that interface. You can select any number of interfaces to include in the group. A goldenrod highlight indicates an included interface.

localized image

     5.  Select the Bypass Mode and Security level from the drop-down menus.

          The Bypass Mode specifies the behavior of bridge-paired interfaces in the Virtual Interface Group, in the event of an appliance or service failure or restart. The options are: Fail-to-Wire or Fail-to-Block.

     6.  Select the Security Level from the drop-down menu.

          This specifies the security level for the network segment of the Virtual Interface Group. The options are: Trusted or Untrusted. Trusted segments are generally protected by a firewall (default is Trusted).

     7.  Click + at the left edge of the new blank entry.

          This reveals the Virtual Interfaces and Bridge Pairs fields.

localized image

Tip

You can resize the tree pane to reveal any truncated contents. To do so, roll your cursor over the resize bar at the right edge of the tree area. When the cursor changes to a bi-directional arrow, click and drag the bar to the right or left to grow or shrink the pane width.

     8.  Click + to the right of Virtual Interfaces.

          This opens the Name and VLAN ID fields for editing.

localized image

     9.  Enter the Name and VLAN ID for this Virtual Interface Group.

     10.  Click + to the right of Bridge Pairs.

          This adds a new Bridge Pairs entry and opens it for editing.

localized image

     11.  Select the interfaces to be paired from the drop-down menus.

          To add more pairs, click + next to the Bridge Pairs field again.

     12.  Click Apply.

          This applies your settings and adds the new Virtual Interface Group to the table.

localized image

Note

At this stage, you will see a yellow delta Audit Alert icon, to the right of the new Virtual Interface Group entry. This is because you have not yet configured any Virtual IP Addresses (VIPs) for the site. For now, you can ignore this alert, as it will be resolved automatically when you have properly configured the VIPs for the site.

13.  To add more Virtual Interface groups, click + to the right of the Interface Groups branch, and proceed as above.