Technical Documentation

Configuring Infranet Controller Source Interface Policies (NSM Procedure)

A source interface policy specifies the source interface on the Infranet Enforcer that receives traffic from endpoints. The use cases for configuring source interface policies are limited.

You will need to use a source interface policy if you have multiple virtual routers, and you have an IPsec routing policy with destination zone DEST, and one of the following is true:

  • There are multiple IPsec policies on the enforcer with a destination zone DEST and different source zones.
  • There is an IPsec policy on the enforcer with a destination zone DEST whose source zone has multiple interfaces.

To configure a source interface policy:

  1. In the NSM navigation tree, select Device Manager> Devices.
  2. Click the Device Tree tab, and then double-click the Infranet Controller for which you want to configure a source interface policy.
  3. Click the Configuration tab. In the configuration tree, select UAC > Infranet Enforcer > Source Interface.
  4. Add or modify source interface policy settings as specified in Table 1.
  5. Click one:
    • OK—Saves the changes.
    • Cancel—Cancels the modifications.

Table 1: Source Interface Policy Configuration Details

OptionFunctionYour Action

Name

Specifies the source interface policy name.

Enter a name for the source interface policy.

Description

Describes the source interface policy.

Enter a brief description for the source interface policy.

Enforcer

Specifies the Infranet Enforcer to which the endpoints connect.

Select the Infranet Enforcer.

Source Interface

Specifies the interface on the Infranet Enforcer to which traffic from endpoints connects.

Specify the interface. To view the zone table on the Infranet Enforcer, enter the following command: get zone

Applies to roles

Specifies the policies that apply to the roles.
  • Select Policy applies to ALL roles to apply this Source Interface policy to all users.
  • Select Policy applies to SELECTED roles to apply this Source Interface policy only to users who are mapped to roles in the Members list.
  • Select Policy applies to roles OTHER THAN those selected to apply this Source Interface policy to all users except those who map to the roles in the Members list.

Note: Select the policies from the Non-members list and click Add to move it to the Members list before applying the policies to the roles.