Can you connect two GX appliances to one segment of a Security Network Controller?
Currently, the user interface on the Security Network Controller explains how to set up one appliance on each 10 Gb segment. However, you can connect two appliances to one 10 Gb segment by dividing available connections between two IPS appliances. Consider this approach to achieve higher throughput rates than can be accomplished with only one appliance on a 10 Gb segment.
These instructions provide an overview for setting up two appliances on one 10 Gb segment. For general configuration information and guidelines, refer to the Security Network Controller User Guide.
- Log in to the web interface of the Security Network Controller.
- Select Segment Configuration.
- For 10Gb Segment A, select the 8 Segment IPS Device (All Segments used) option.
- Choose how many links must be lost before the NSC goes into bypass.
Important: The Security Network Controller totals the number of lost links from appliances on a single segment. For example, two lost links on one appliance and one lost link on the other appliance equals three lost links. If the bypass setting is three, Segment A would go into bypass in this situation.
The connection guidelines for the 8 segment configuration tell you to connect 8 segments from a single IPS appliance to the Security Network Controller. Instead, split the connections between the two IPS appliances. That is, connect 4 segments from each IPS appliance to the 1Gb segments on the Security Network Controller.
- Connect IPS ports 1A - 2B to Security Network Controller ports 1 - 2
- Connect IPS ports 3C - 4D to Security Network Controller ports 3 - 4
- Connect IPS ports 1A - 2B to Security Network Controller ports 5 - 6
- Connect IPS ports 3C - 4D to Security Network Controller ports 7 - 8
If the above information does not resolve your issue, please contact IBM Security Systems Customer Support.