Add layer 3 physical interfaces to Master FlexEdge Secure SD-WAN Engines

Master Secure SD-WAN Engines can have two types of physical interfaces: interfaces for the Master Secure SD-WAN Engine’s own communications, and interfaces that are used by the Virtual Secure SD-WAN Engines hosted on the Master Secure SD-WAN Engine.

1. Right-click the Master Engine element, then select Edit <element type>.
2. In the navigation pane on the left, browse to Interfaces.
3. Click Add, then select Layer 3 Physical Interface.
4. (Interface for Master Secure SD-WAN Engine communications only) Define the physical interface properties.
   1. From the Type drop-down list, select the interface type according to the engine role.
   2. Do not select a Virtual Resource for an interface that is used for the Master Secure SD-WAN Engine’s own communications.
   3. In the Cluster MAC Address field, enter the MAC address for the Master Secure SD-WAN Engine.
      Note: Do not use the MAC address of any actual network card on any of the Master Secure SD-WAN Engine nodes.
   Note: Make sure that you set the interface speed correctly. When the bandwidth is set, the Master Secure SD-WAN Engine always scales the total amount of traffic on this interface to the bandwidth you defined. The bandwidth is scaled even if there are no bandwidth limits or guarantees defined for any traffic.
5. (Interface for hosted Virtual Secure SD-WAN Engine communications only) Define the physical interface properties.
   1. From the Type drop-down list, select the interface type according to the engine role.
   2. (Virtual IPS only) From the Failure Mode drop-down list, select how traffic to the inline interface is handled if the Virtual IPS engine goes offline.
      Note: If there are VLAN interfaces under the inline interface, select Bypass.

      CAUTION:

      Using Bypass mode requires the Master Secure SD-WAN Engine appliance to have a fail-open network interface card. If the ports that represent the pair of inline interfaces on the appliance cannot fail open, the policy installation fails on the Virtual IPS engine. Bypass mode is not compatible with VLAN retagging. In network environments where VLAN retagging is used, normal mode is automatically enforced.
   3. From the Virtual Resource drop-down list, select the Virtual Resource element associated with the interface.
      Select the same Virtual Resource in the properties of the Virtual Secure SD-WAN Engine to add the Virtual IPS engine to the Master Secure SD-WAN Engine.

      Note: Only one Virtual Resource can be selected for each physical interface. If you want to add multiple Virtual Resources, add VLAN interfaces to the physical interface and select the Virtual Resource in the VLAN interface properties.
6. Click OK.
   The physical interface is added to the interface list.
7. Click Save.