Configure Interface on MWG for Handling Dedicated Traffic

[yediaelchrist]

Hi Everyone,

Hope you are all doing good during this tough time.

Is it possible to configure interfaces in MWG to handle dedicated traffic? For example interface eth0 is dedicated for handling MGMT traffic (Console) and interface eth1 is dedicated for handling data plane traffic (users web traffic, LDAP-related traffic, etc)?

Thanks.

Best regards,

Yedi

[mkutrieba · Accepted solution]

hello @yediaelchrist,

I did not test all of this but still answer to give you further hints and idea.

Yes this is possible on different ways. For example UI management traffic can be separated from normal user traffic via source based routing, explained in product guide here:
https://docs.mcafee.com/bundle/web-gateway-9.2.x-product-guide/page/GUID-0D45627C-C0D7-4313-AD1D-9E0...

To also split other traffic initiated by MWG like LDAP, DNS etc. you would need to configure static routes via Configuration > select appliance > Static Routes:
https://docs.mcafee.com/bundle/web-gateway-10.2.x-product-guide/page/GUID-D21E6B2A-AFEE-40D2-B723-74...

Static Routes are configured destination based. So if 1.2.3.4 is the LDAP server, configure a rule with destination 1.2.3.4 and once a connection is triggered from MWG to this destination, it will lookup the static routes table.

Normal user initiated traffic should still come in and leave on normal way (default gateway/interface) if no other networking rules are matching.

Of course, all need to be setup and tested.

[yediaelchrist]

Hi Marcel,

Thanks a lot for your detailed explanation, I will try to test this on our local lab first and update you accordingly.

For this matter, I will mark your comment as the solution.
Thanks a lot!

Best regards,
Yedi

[Former Member]

can you help me? How to Block Entire Countries from Accessing Your Website? 

@ geometry dash