HP X Unified Security Platform Series User Manual download pdf (Page 155)

Security Zone Configuration

X Family LSM User’s Guide V 2.5.1 139

Configure a Security Zone

STEP 1

From the LSM menu, select Network > Security Zones.

STEP 2

Click Create (for a new security zone) or click the Edit icon for the zone you want to edit.

STEP 3

On the Create/Edit Security Zone type the Security Zone Name for the new zone.

You can only edit the Security Zone name when you are creating the zone.

STEP 4

Check the Ethernet Ports that you want to add to the zone.

If you select a port that is already assigned to another zone, the port will be reassigned to this

zone.

You do not need to assign ports to a zone if you are using the zone solely for a VPN tunnel.

STEP 5

If you want to enable VLAN tagging on the port(s) assigned to the Security Zone, check the

Enable 802.1q VLAN Tagging option and enter a VLAN ID.

STEP 6

To set the maximum transmission unit (MTU) size, enter a decimal number from 100 to 1500

in the MTU Size field.

The default for Ethernet is 1500. Reducing the MTU ensures that packets sent over networks

with smaller MTUs than Ethernet are not fragmented.

STEP 7

To a pp l y Bandwidth Management, check Enable bandwidth rate limiting, and enter the

required limits in Kbps (any decimal number from 1 to 100000) for outbound traffic and

inbound traffic in the appropriate fields.

Bandwidth Management is typically used to prevent packet queuing on a WAN device to

provide lower end-to-end latency on latency sensitive traffic such as voice over IP.

STEP 8

To restrict the IP addresses of clients in the Security Zone for additional security purposes,

check Restrict Security Zone to the following IP addresses. Then, select one of the follow

ing.

• IP Address Group — select the name of the group from the drop-down list. (To

configure IP Address Groups, navigate to Network > Configuration > IP Address

Groups.)

• IP Subnet — type the IP network address and subnet mask.

• IP Range — type a range of IP addresses within the IP Interface subnet.

STEP 9

To prevent traffic going from this security zone to a VPN tunnel, check Prevent Security

Zone sending to VPN tunnels.

STEP 10

Click Create/Save to save the configuration.

Click Cancel to discard the changes.

Note With tagged ports, you can have as many ports in a security zone

as you require. However, you cannot configure firewall rules or IPS filters

between ports in the same Security Zone.

Note With tagged ports, you can have as many security zones sharing

a port as you require. Each zone must be associated with an interface.

1 ... 154 155 156 ... 333

Comments to this Manuals

No comments

HP X Unified Security Platform Series User Manual Page 155

Comments to this Manuals

Related products and manuals for Networking HP X Unified Security Platform Series