PAN and iPrism integration problems in vwire

[jbisaillon]

Trying to insert a PAN in vwire mode between the existing external firewall and the existing iPrism web filter using vwire. When the iPrism web filter is removed and the PAN is between the external firewall and the core switch, traffic is passing fine thru the PAN. But when the iPrism is placed back between the PAN and the core switch no traffic is passed.

Originally the vwire interfaces on the PAN were set to Auto negotiation and Auto on the iPrism, but after no success they were changed to Full/1000 on both devices, however still no luck.

Anyone else have trouble with PAN - iPrism integration?

[jseals]

Hello,

I haven't personally worked with vwire and iPrism, but see no reason why we wouldn't be able to send traffic to any device using ethernet standards. Especially in vwire since it's just a pass-through.

When the links are configured in Auto, are the link lights up and green?

I would never suggest hard coding the interfaces to 1gig full as this is against the RFC standards and will only cause more issues.

Since this works without the iPrism device I think you're probably right in assuming it's a link issue and it's not getting dropped. However, you can setup a packet capture on the PAN so we can tell if the packets are coming and going as they should.

You can also look at the counters to see if any drop counters are incremented when sending traffic through:

> show counter global filter severity drop

You can also look for interface errors:

> show interface ethernet1/x (enter the interface connected to the iPrism device)

If the iPrism device gives us any insight to link state or interface errors, that would also be worth checking.

If none of this helps it may be wise to open a support case with us and / or iPrism.

Thanks,

Jason Seals