Master Security Engine and Virtual Security Engine configuration overview

Virtual Security Engines are logically separate virtual engine instances on a physical engine device. A Master Security Engine is a physical engine device that provides resources for Virtual Security Engines. One physical Master Security Engine can support multiple Virtual Security Engines.

Little configuration is done directly on the Master Security Engine. No installation or configuration is done on the Virtual Security Engines. Most of the configuration is done using the SMC Client. The engines cannot be successfully installed before defining them in the SMC Client as outlined in this section.

The tasks you must complete are as follows:
  1. Add Master Security Engine elements.
    1. Add Virtual Resource elements.
    2. Add physical interfaces and optionally VLAN interfaces to the Master Security Engine.
    3. Assign Virtual Resources to the interfaces that are used by the Virtual Security Engines hosted on the Master Security Engine.
  2. Add Virtual Engine, Virtual IPS, or Virtual Layer 2 Engine elements.
    1. Configure the automatically created physical interfaces.
    2. (Optional) Add VLAN interfaces for the Virtual Security Engines.
  3. Bind licenses to specific nodes of the Master Security Engine.