Exinda EXNV-10063, Administration Manual

Page: 282 / 623

Exinda Network Orchestrator 3 Using | 282
9.
If necessary, select the
Dynamic Virtual Circuit
option. The "Dynamic Options" open. See the "Before you begin…"
above for links to topics that explain how to use the options.
10.
If necessary, specify a
Connection Limit
. This limits the number of active connections in the virtual circuit. Leave this
field blank if you do not want to cap the number of connections.
NOTE
Once a virtual circuit connection limit has been reached, the VC will no longer match any incoming traffic.
Therefore, connections that arrive later will be evaluated against the remaining virtual circuits in the Policy Tree. As
active connections terminate, the VC then evaluates other connections.
BEST PRACTICE
To prevent traffic being entirely excluded, it is a best practice to create a further virtual circuit to capture traffic
rejected by the VC.
11.
Complete the following
Filter Options
, as needed.
Specify a VLAN Object to filter which traffic falls into the virtual circuit. The default is ALL .
Specify a
Network Object
to filter which subnet, hosts, users, or user groups falls into the virtual circuit.
Specify an Application to filter which application or application group falls into the virtual circuit. The default
is ALL .
12.
Specify the
Direction
of traffic to capture in the virtual circuit. The direction options are:
NOTE
The direction is relative to the LAN. Consider an example where a network object and a direction is specified:
Both – both inbound and outbound traffic
Inbound
– inbound from the WAN only
Outbound – outbound to the WAN only
Network Object Direction Captured Traffic
'Internal' or 'External' network
objects Both Only inbound and outbound traffic to and from the subnets defined by the
network object.
'Internal' network object Inbound Only inbound traffic to the subnets defined as 'internal' by the network object.
'External' network object Inbound Only inbound traffic to the LAN from the subnets defined as 'external' by the net-
work object.
'Internal' network object Outbound Only outbound traffic from the subnets defined as 'internal' by the Network
Object.
'External' network object Outbound Only outbound traffic from the LAN to the subnets defined as 'external' by the
Network Object.
13.
Click
Add New Circuit
. The virtual circuit appears in the policy tree.
14. If necessary, in the policy tree, change the ranking of the VC. This ensures the VC is handled in the correct order.