Views:

To bypass dedicated network interface, follow the steps below depending on your environment:

 
For instructions on AIX or Oracle Linux RAC, please visit KB article on Bypassing dedicated network interface in AIX or Oracle Linux RAC DB cluster environment.
 

Solaris

  1. Create a file under /etc directory named "ds_filter.conf".
  2. Open the /etc/ds_filter.conf file.
  3. Add the MAC addresses of all NICs used for cluster private communication to the first line of the file, as follows:

    MAC_EXCLUSIVE_LIST=XX:XX:XX:XX:XX,XX:XX:XX:XX:XX

  4. Save and wait for 60 seconds for the changes to take effect.

In the /etc/ds_filter.conf file:

  • The MAC_EXCLUSIVE_LIST line must be the first line in the file.
  • All letters in MAC address must be uppercase.
  • Leading zeros in each byte must be included.
  • Below are examples:

    Valid MAC_EXCLUSIVE_LIST:

    MAC_EXCLUSIVE_LIST=0B:3A:12:F8:32:5E
    MAC_EXCLUSIVE_LIST=0B:3A:12:F8:32:5E,6A:23:F0:0F:AB:34

    Invalid MAC_EXCLUSIVE_LIST:

    MAC_EXCLUSIVE_LIST=B:3A:12:F8:32:5E
    MAC_EXCLUSIVE_LIST=0b:3a:12:F8:32:5e,6a:23:F0:0F:ab:34
    MAC_EXCLUSIVE_LIST=0B:3A:12:F8:32:5E

  • If the MAC address is not valid, the interface will not be bypassed.
  • If the exact string "MAC_EXCLUSIVE_LIST=" is not present at the beginning of the line no interfaces will be bypassed.

Linux

State 01: For Deep Security Agent version earlier than version 20.00-877 (GM build) and not included in State 03

  1. Modify setParameters() in the file /etc/init.d/ds_filter.

    null

  2. Restart the Deep Security Agent Service for the changes to take effect.

State 02: For Deep Security Agent version 20.00-877 (GM build) or higher versions not included in State 03:

  1. Modify setParameters() in the file /opt/ds_agent/Linux.init.

    null

  2. Restart the Deep Security Agent Service for the changes to take effect.

State 03: For the following version of Deep Security Agent:
 

VersionRelease Version
DS 11.0DSA 11.0.0-2197 or higher
DS 12.0DSA 12.0.0-2072 or higher
DS 20.0DSA 20.0.0-3288 or higher
  1. Create a file under /etc directory, with the name "ds_filter.conf"
  2. Fill in the interface name with the following format
    • INTERFACE_BYPASS_LIST=<interface name>
    • Here is a quick one liner:
      # echo INTERFACE_BYPASS_LIST=eth0 > /etc/ds_filter.conf
  1. Restart the Deep Security Agent Service for the changes to take effect


Windows

  1. Go to the Network Interface Card properties.
  2. Uncheck “Trend Micro Lightweight Filter Driver” then click OK.

    null