Software Secure Access
Activity Manage

Deploy a New VA to Support Dual-NIC DMZ Mode

You can deploy a new VA with dual-NIC support. The configuration steps are similar to configuring an upgraded VA. You can add the secondary adapter to the VM using the hypervisor console, before powering on the VM. Both adapters should be of the same driver type.

  1. Enter configuration mode on the VA and retrieve the name of both adapters.

    Run:

    config va show
    
  2. Configure the primary adapter and then the secondary adapter.

    Ensure that the primary adapter is configured with the IP that you wish to use for internal communication and that the secondary adapter is configured with the IP to be used for internet-bound communication.

    Run:

    config va interface <interface name> <ip address> <netmask> <gateway>
    
  3. Once both adapters are configured, enable traffic segregation.

    Run:

    config va dmz enable