Configuring subnet side rules settings
You can configure subnet side rules settings under Manage > Topology: Appliances. Select the name of the appliance you want to edit to expand the page and display the Appliance tabs, and select the Appliance Pages tab to display the Appliance Configuration Pages list.
Under Appliance Configuration Pages, click Subnet Side Rules to display the Editing Appliance Configuration: <hostname>, Subnet Side Rules page. These configuration options are available:
Add a Subnet Side Rule
Displays the controls to create a subnet side rule.
Insert Rule At
Specifies Start, End, or a rule number from the drop-down list. SteelHead appliances evaluate rules in numerical order starting with rule 1. If the conditions set in the rule match, then the rule is applied, and the system moves on to the next packet. If the conditions set in the rule don’t match, the system consults the next rule. For example, if the conditions of rule 1 don’t match, rule 2 is consulted. If rule 2 matches the conditions, it is applied, and no further rules are consulted.
Subnet
Specifies the subnet. Use this format: <ip-address>/<subnet-mask>
In SCC 9.8, this field also accepts IPv6 addresses.
• IPv6 Address—Specify an IP address using this format: eight 16-bit hexadecimal strings separated by colons, 128-bits. For example: 2001:38dc:0052:0000:0000:e9a4:00c5:6282
You don’t need to include leading zeros. For example: 2001:38dc:52:0:0:e9a4:c5:6282
You can replace consecutive zero strings with double colons (::). For example: 2001:38dc:52::e9a4:c5:6282
• IPv6 Prefix—Specify a prefix. The prefix length is 0 to 128, separated from the address by a forward slash (/). In this example, 60 is the prefix: 2001:38dc:52::e9a4:c5:6282/60
Subnet is on the LAN side of this appliance
Specifies that the subnet is on the LAN side of the device. In virtual in-path configurations, all traffic is flowing in and out of one physical interface.
Subnet is on the WAN side of this appliance
Specifies that the subnet is on the WAN side of the device. In virtual in-path configurations, all traffic is flowing in and out of one physical interface.
Add
Adds the rule to the subnet map table. The Management Console redisplays the subnet map table and applies your changes to the running configuration, which is stored in memory.