Neusoft IPS device bypass deployment configuration

Device model:

NISG6000IPS

The deployment mode is attached to the deployment, and two network segments are detected. 192.168.1.0/192.168.2.0

Switch for Huasan H3C S7500E

Port mirroring configuration:

Port mirroring

It is necessary to mirror all the traffic from G0Accord 1 to G0UniUniG2, that is, G0Accord 1 is the source port and G0Accord 2 is the destination port.

Configuration step

1. Enter the configuration mode: system-view

2. Create a local mirror group: mirroring-group 1 local

3. Configure the source port for the mirror group: mirroring-group 1 mirroring-port

4. Configure the destination port for the mirror group: mirroring-group 1 monitor-port

Configuration example

System-vies

[sysname] mirroring-group 1 local

[sysname] mirroring-group 1 mirroring-port G0Accord 0 both (set source port, image can flexibly select inbound direction, outbound direction and all traffic according to the actual situation; both, all traffic; inbound, inbound traffic; outbound, outbound traffic)

[sysname] mirroring-group 1 monitor-port G0Action0Accord 2 (set destination port)