Configuration > X10G security blade network interface configuration > Websense Content Gateway Interfaces (A1.P1 and A1.P2)

Websense Content Gateway Interfaces (A1.P1 and A1.P2)

Content Gateway Interfaces (A1.P1 and A1.P2) handle traffic directed to and from the Content Gateway proxy module.

Both the A1.P1 and A1.P2 proxy interfaces can be used to accept users' Internet requests (inbound traffic) and communicate with Web servers (outbound traffic). In other words, both interfaces can be configured to handle traffic into and out of the proxy module.

A typical configuration is to use A1.P1 for both inbound and outbound traffic; A1.P2 is not used.

Another option is to configure A1.P1 to accept users' Internet requests (inbound only). In this case, A1.P2 is configured to communicate with Web servers (outbound).

 

Important  If you use the A1.P2 interface, the A1.P1 interface is bound to the virtual eth0 interface, and the A1.P2 interface is bound to the virtual eth1 interface. Keep this in mind when you configure Content Gateway. For example, suppose you are using a transparent proxy deployment, and the A1.P1 interface is connected to a WCCP router. In this case, you must configure Content Gateway to use the virtual eth0 interface for WCCP communications (in Content Gateway Manager, see the General tab of the Configure > Networking > WCCP page).

Guidelines for configuring network interfaces A1.P1 and A1.P2

 

General guideline	If you use both A1.P1 and A1.P2 and you locate them in the same subnet, the default gateway is automatically assigned to A1.P2 (which is bound to the virtual eth1 interface). Ensure that outbound packets can reach the Internet.
IP address (A1.P1 or A1.P2 interface)	Required.
Subnet mask	Required.
Default gateway	Required. The gateway must be in the same subnet as the IP address of the interface (A1.P1 or A1.P2) used for communicating with the Internet (outbound traffic). If you use both A1.P1 and A1.P2 and they are located in different subnets, the default gateway is assigned to the interface that shares the same subnet. If A1.P1 and A1.P2 are within the same subnet, the default gateway is automatically assigned to A1.P2 (which is bound to the virtual eth1 interface). Ensure that outbound packets can reach the Internet.
Primary DNS	Required. IP address of the domain name server.
Secondary DNS	Optional. Serves as a backup in case the primary DNS is unavailable.
Tertiary DNS	Optional. Serves as a backup in case the primary and secondary DNSes are unavailable.

Configuration > X10G security blade network interface configuration > Websense Content Gateway Interfaces (A1.P1 and A1.P2)