The ether1 interface on the Network Security instance is the only interface that is created by default. If you are using the manual deployment method, you must create the optional submission interface (ether2) and the monitoring interfaces (pether3, pether4, and so on), and then attach them to the instance. Source and destination checking must be disabled on monitoring interfaces to ensure that all network traffic reaches the instance.
The following table shows the mapping between AWS devices and Network Security interfaces.
AWS Device | Network Security Interface | Purpose |
|---|---|---|
eth0 | ether1 | Management interface, Submission interface to IVX cluster (Cloud MVX, IVX Smart Grid) |
eth1 | ether2 | (Optional) Dedicated submission interface to IVX cluster (Cloud MVX, IVX Smart Grid) |
eth2 | pether3 | Monitoring interface |
eth3 | pether4 | Monitoring interface |
Creating Network Interfaces
This section describes how to create a network interface for your Network Security instance if you are using the manual deployment method.
Open the Amazon EC2 console.
In the left pane, select Network & Security > Network Interfaces.
Click Create Network Interface.
Enter information that uniquely identifies the interface in the Description field.
Select the subnet for the interface in the Subnet drop-down list.
Important
Each interface must be in a separate subnet.
Select Custom to manually configure a static IPv4 address.
Enter the custom static IPv4 address in the IPv4 address field.
Complete the Elastic Fabric Adapter and Security groups fields as directed by your AWS administrator.
Click Create.
Repeat this procedure for each network interface.
Continue to Attaching network interfaces.
Attaching Network Interfaces
This section describes how to attach a network interface to your instance if you are using the manual deployment method.
Open the EC2 console.
Select Instances > Instances in the left pane.
Right-click the instance and then select Networking > Attach Network Interface. The Attach Network Interface dialog box opens.
Select the interface with the lowest number in the Network Interface drop-down list (for example, ether2) and then click Attach.
Repeat the previous step for each network interface.
Important
Attach the interfaces in numeric order. For example, attach pether3 before pether4.
Disable source and destination checks on each monitor interface.
Select the interface.
Right-click and select Change Source/Dest. Check. The Source/Dest. Check dialog box opens.
Select Disabled and then click Save.
Stop the instance:
Select Instances in the navigation pane.
Select the instance, right-click, and then select Instance State > Stop.
Restart the instance:
Select the instance, right-click, and then select Instance State > Start.
Important
Do not perform this step if you plan to perform the following optional procedure (Configuring the activation code and initial admin password).