Configuring TAP mode using the CLI

Use the CLI commands in this topic to set the following options to configure the appliance for Test Access Point (TAP) mode.

Setting	Description
Operational Mode	Select TAP mode to configure for TAP or SPAN deployments. tap—Monitors malicious traffic.
Policy Type	The following policy types are supported: mixed—Applies both local and global policies, and the local policy overrides the global policy (recommended). global—Applies Trellix-defined global policy to the specified interface. local—Applies user-defined local policy to the specified interface. none—Does not apply any policy. No policy is used.

For details about TAP deployment, refer to the User Guide for your appliance model.

Prerequisites

To configure TAP mode:

Enable the CLI configuration mode:

hostname > enable

hostname # configure terminal

Configure pair A (interfaces A1 and A2) in TAP mode:

hostname (config) # policymgr interface A op-mode tap policy-type mixed

hostname (config) # policymgr interface A re-configure

Check your configuration:

hostname (config) # show policymgr interfaces

Policy enabled: yes

Interface A
  Active   : yes
  op mode  : tap (tapping)
  fail-safe: open
  policy   : mixed
  tolerance: 1
  Ports    : pether3  pether4