OverviewThis article describes a best practice you can implement to find out how the Exinda Network Orchestrator classifies network objects.
Creating a network object in the Exinda UI is typically a straightforward process. Using the Add Network Object dialog, you specify the location by selecting internal or external or inherit. And itÕs the latter option, inherit, that sometimes causes confusion.
CauseWhen you choose inherit for a network object, the Exinda uses the characteristics of other network objects to determine how to classify it. In most cases, the location of the network object that is the closest match to the new network object will be used.
For more information about network objects and the inherit location option: http://manuals.gfi.com/en/exinda/help/content/exos/objects/config_netobjs.html
The Network Object Configuration panel displays a table of all network objects defined in the Exinda. The column heading ÒLocationÓ seems to indicate how the system sees each object. However, the information in that column is only related to the way the object was defined. It doesnÕt reflect the way the system sees the object.
That distinction is vital because it directly impacts your network traffic policy tree implementation.
WorkaroundUsing the CLI to find out where the Exinda classifies a network object
- Login to the Exinda CLI interface via SSH or the Exinda web CLI
There are several ways to access to CLI. You can use SSH, the Exinda Web UI, Telnet or the Serial Console Interface. For more information: http://manuals.gfi.com/en/exinda/help/content/cli/cli-launch.htm?Highlight=console
- Enter the command:
<object name> is the name of the network object.
Example of the show network-object command in the CLI.
After running the command, the Exinda displays where it sees the network object. This is the location used by the policy tree.
NOTE: If you run the show network-object command without specifying a network object, the system will return the full list of network objects.
For more information about the CLI visit: http://manuals.gfi.com/en/exinda/help/content/exos/intro-topics/intro-cli-commands-list.htm