Configuring VLAN segregation
VLAN segregation allows network traffic from different groups of users to be kept securely segregated, creating an independent environment for each group or customer. With VLAN segregation enabled, you create instances to segregate traffic to a reserved cluster of SteelHeads.
This section includes these topics:
Working with instances
An instance is a label that associates a group of VLANs and the configuration that applies to the traffic on those VLANs. An instance is a virtual representation of a SteelHead Interceptor that can, for example, map to a customer of an MSP (Managed Service Provider), a partner of an enterprise, or a department within an enterprise. It can also logically map a VRF environment (virtual routing and forwarding) in a network.
The instance contains all configuration necessary—including in-path rules, load-balancing rules, and connection forwarding—for setting up an optimization cluster with other Interceptors and SteelHeads in the network.
Instances have these characteristics:
• Each instance can have multiple VLAN tags. A maximum of five VLAN tags per instance is recommended.
• Two instances cannot share the same set of VLANs or SteelHeads.
• Each VLAN interface belonging to an instance has a unique IP address, gateway, subnet, and routing table.
• You can configure up to thirty instances on a single SteelHead Interceptor.
Enabling VLAN segregation
You can enable VLAN segregation in the VLAN Segregation page.
If you enable VLAN segregation, you must reboot the appliance. Entering VLAN segregation changes some aspects of the Interceptor Management Console. For example, the Interceptor and SteelHead configuration displays on an instance page, which is accessed from the Dashboard. Load balancing and in-path rules are also configured in the specific instance page.
Similarly, all traffic is passed through until you complete the instance configuration.
To enable VLAN segregation
1. Choose Networking > Networking: VLAN Segregation to display the VLAN Segregation page.
Figure: VLAN Segregation page
2. Select the Enable VLAN Segregation check box.
3. Click Apply.
4. Click Save in the menu bar to save the configuration.
5. Choose Administration > Maintenance: Reboot/Shutdown, and click Reboot.
Adding an instance for VLAN segregation
You can add an instance to the VLAN segregation configuration. For details on instances, see
Working with instances.
To add an instance
1. Choose Networking > Networking: VLAN Segregation to display the VLAN Segregation page.
2. Click Add an Instance.
3. Enter a name for the instance.
4. Click Add.