|
SANGFOR IAM v2.1 User Manual31network segments should also be configured in [Bridge Mode] > [Bridge Settings ] page >[Bridge IP List]. Under Bridge mode, the IAM gateway device supports VLAN TRUNK traversing; [BridgeIP] can be IP address of 802.1Q-VLAN (which indicates the IAM gateway device can betransparently connected to the main channel of VLAN TRUNK). To configure theBridge-mode deployment to support VLAN TRUNK, go to [Gateway Mode] > [BridgeMode] > [Bridge mode -VLAN Settings] page, as shown below:Enter [VID], the VLAN [IP address] and [Subnet mask], and then click . If you haveenabled the functions that need to be redirected to the IAM gateway device, such as anti-virusfunction, email filter, ingress rule, WEB authentication, etc., you have to configure this IPaddress; otherwise, you can also leave the VLAN address list blank.3.4.3. Bypass ModeWithout altering the networking, bypass-mode IAM gateway device can fulfill monitoring andcontrolling, and can avoid disconnecting with the users. The IAM gateway device is connected tothe mirror port or the HUB, monitoring the overall local area network. Bypass mode plays noinfluence on the network environment, and device failure will not disconnect the network.Typical topology of bypass-mode deployment is as shown below:
|
