1

Select a designated physical interface for Mirror and Decrypt on the VSX Gateway, or each VSX cluster member.

Important - On VSX cluster members, you must select an interface with the same name (for example, eth1-01 on each VSX cluster member).

2

Do not configure an IP address on this designated physical interface.

3

Configure the required Maximum Transmission Unit (MTU) on this designated physical interface.

MTU has to be the default 1500, or at least the maximal MTU value from other interfaces on the VSX Gateway, or VSX cluster member.

For instructions about configuring an MTU on a physical interface, see R80.30SP Gaia Administration Guide - Chapter Network Management - Section Network Interfaces - Section Physical Interfaces.

4

Important: In VSX cluster, you must configure this designated physical interface in the $FWDIR/conf/discntd.if file on each VSX cluster member:

1. Connect to the command line on an SGM.
2. Log in to the Expert mode.
3. Go to the context of the Virtual System 0:

   # vsenv 0

   Output shows:

   Context is set to Virtual Device <Name of VSX Gateway> (ID 0).

4. Create the $FWDIR/conf/discntd.if file:

   # g_all touch $FWDIR/conf/discntd.if

5. Edit the $FWDIR/conf/discntd.if file in the Vi editor:

   # vi $FWDIR/conf/discntd.if

6. Write the name of the designated physical interface. After the interface name, you must press Enter.

   Note - Comments are not allowed in this file.

7. Save the changes in the file and exit the Vi editor.
8. Copy this file to all other SGMs:

   # asg_cp2blades $FWDIR/conf/discntd.if

9. Fetch the local Security Policy on all SGMs:

   # g_all fw fetchlocal

Note - To apply the configuration from the file and make it persistent, install an Access Control Policy on the VSX cluster object. You install the Access Control Policy later, after the required configuration steps in the SmartConsole.