Configuring General Interface Settings - McAfee M-1250 - Network Security Platform Configuration Manual

McAfee® Network Security Platform 5.1
Full-duplex Tap and In-line modes require two physical ports, and each mode uses these
two ports to form a single logical interface. Therefore, all configuration and policy decisions
are made at a logical interface level.
After a new Sensor is installed, a policy is inherited from the admin domain and enforced
on all Sensor interfaces. Sub-interfaces are user created within this resource, and can be
edited here or from the
Tip:
more information, see Creating an admin domain,
Guide
The interface node is found by navigating to
where
•
•
•
Note:
node from the Resource Tree.
Figure 211: Interface Node

Configuring general interface settings

The
of an interface.
•
•
•
Sub-interface-x
Interfaces can be allocated to child domains for specialized management. For
.
Interface-x
is a specific interface node instance.
Configuring general Interface settings (on page 214): Customize interface properties
and create/edit sub-interfaces.
Scanning policies at the interface level (on page 221): Change policy; apply, enforce,
and view DoS policy. Also you can manage alert filters at interface and sub-interface
levels.
Adding ACLs on the interface (on page 233): Manage ACL rules created at the IPS
Sensor interface level.
All procedures in this section imply that the user has selected an interface
IPS Interface IPS Settings/Sensor_Name / Interface-x
tab (
Viewing interface details (on page 215): View the current interface configuration.
Managing an interface: Changing the traffic type and naming the interface (on page
215): Enable segmentation of the interface by changing the traffic type to CIDR or
VLAN.
Creating sub-interfaces (on page 219): Create a sub-interface for policy application
and traffic management.
resource node.
Administrative Domain Configuration
IPS Settings/Sensor_Name / Interface-x > IPS Interface
) actions apply to the general settings
214
The IPS Sensor_Name node