Riverbed® Steelhead® RiOS® Application Installation and Getting Started Guide 2010-10

3-4
Getting Started
Initial Configuration
Zone. A zone is a logical group of switch ports. For example, you might create
an internal zone and assign all the ports on the internal network to this zone.
You might then create an external zone and assign the firewall’s switch port
to this zone.
Zone Policy. For Transparent Mode, you define a zone policy by specifying:
■ Source zone
■ Destination zone
■ Intercept rules
Intercept rules define the action the switch will take—intercepting the traffic—
and the direction of the traffic. For Transparent Mode, traffic is unidirectional,
or one way. A zone policy can contain one or more intercept rules.
For example, you might create a zone policy that lists the internal zone as the
source and the external zone as the destination. The intercept rules would
specify that the action is intercept and traffic is unidirectional.
Create Zones
The first criterion you define for Transparent Mode is one or more zones. By
default, the HP 5400zl or 8200zl switch supports a maximum of ten zones. Two
are created automatically—BYPASS and SWITCH_SELF. This means that you
can create up to eight additional zones. (For information about zones, see
“Transparent Mode Concepts: Zones and Zone Policies” on page 1-4 in
Chapter 1: “Overview.”)
The following are some guidelines for creating zones:
■ The switch ports you add to a zone can be in different VLANs.
■ Each switch port can belong to only one zone.
■ If a port is already associated with a zone, adding the port to another zone
removes that port from its existing zone and adds it to the new zone.
■ Ports cannot be added to the SWITCH_SELF zone.
To create a zone, complete the following steps:
1. Move to the HP zl switch’s global configuration context:
hostswitch# configure terminal