Manuals / HP / Computer Equipment / Accelerators

HP Enterprise File Services WAN Accelerator manual Basic Steps

Models: Enterprise File Services WAN Accelerator

1 124

Download 124 pages 48.85 Kb

Page 110

Figure 9-3.Setup: Authentication - General Settings Page

Basic Steps

The following section describes the basic steps for configuring TACACS+ authentication in the HP EFS WAN Accelerator.

1.Configure the HP EFS WAN Accelerator. For detailed information, see the HP StorageWorks Enterprise File Services WAN Accelerator Installation and Configuration Guide.

2.Connect to the Management Console. For detailed information, see the HP StorageWorks Enterprise File Services WAN Accelerator Installation and Configuration Guide.

3.Navigate to the Setup: Authentication - General Settings page in the Management Console.

4.Define the authentication methods. Make sure you put the authentication methods in the order in which you want them to occur. If authorization fails on the first method, the next method is attempted, and so forth, until all the methods have been attempted.

Figure 9-3.Setup: Authentication - General Settings Page

104	9 - RADIUS AND TACACS+ AUTHENTICATION

Image 110

HP Enterprise File Services WAN Accelerator manual Basic Steps, 3. Setup Authentication - General Settings Page

Contents

deployment guide HP StorageWorks Enterprise File Services WAN Accelerator407118-001 407118-002 Part number Second edition JuneEnterprise File Services WAN Accelerator 2.1.5 deployment guide Legal and notice informationChapter 2 In-Path Deployments ContentsChapter 1 Designing an HP EFS WAN Accelerator Deployment Chapter ChapterConfiguring Connection Forwarding ChapterChapter 6 Policy-Based Routing Deployments Chapter 7 WCCP DeploymentsChapter 10 Serial Cluster and Cascade Deployments Chapter 8 Proxy File Service DeploymentsChapter 9 RADIUS and TACACS+ Authentication GlossaryIn This Introduction IntroductionAbout This Guide ‹ “About This Guide,” nextOrganization of This Guide INTRODUCTIONntp peer addr version number Document ConventionsCourier delete filename upload filenameAntivirus Compatibility Hardware and Software DependenciesEthernet Network Compatibility ‹ “Related Reading” on page Additional Resources‹ “Related HP Documentation” on page ‹ “Online Documentation” on page Related Reading Related HP Documentation Online DocumentationTechnical Support Contacting HPHP Storage Web Site INTRODUCTION In This Chapter CHAPTER 1 Designing an HP EFS WAN Accelerator DeploymentIntroduction to the HP EFS WAN Accelerator ‹ “Introduction to the HP EFS WAN Accelerator” nextVirtual Window Expansion Transaction AccelerationScalable Data Referencing How Does SDR Work?Design and Deployment Overview Transaction Prediction4. Choose a network template Definition of Terms Bypass ModeFailover Mode ‹ optimization is lost on the current connections on the master HP EFS WAN Accelerator 1 - DESIGNING AN HP EFS WAN ACCELERATOR DEPLOYMENT ‹ “Introduction to Physical In-Path Deployments,” next Configuration GuideCHAPTER 2 In-Path Deployments ‹ “In-Path, Failover Support Deployment” on pageBasic Steps Client-Side Introduction to Physical In-Path DeploymentsIn-Path, Failover Support Deployment 4. Enable failover support. For example In-Path, Two Routing Points Deployment Basic Steps Server-SideIn-Path, Server-Side Deployment Basic Steps Client-Side Basic Steps Server-SideFigure 2-5. In-Path, Server-Side Deployment In-Path, Server-Side, One to One DeploymentBasic Steps Client-Side Basic Steps Server-Side Basic Steps Client-Side Basic Steps Server-Side Figure 2-6. In-Path, Server-Side, One to One DeploymentFigure 2-7. Setup Advanced Networking - Failover Settings Page Introduction to Virtual In-Path Deployments ‹ “In-Path, Load Balanced, Layer-4 Switch” on pageCHAPTER 3 Virtual In-Path Network Deployments ‹ “Introduction to Virtual In-Path Deployments,” nextIn-Path, Load Balanced, Layer-4 Switch 3 - VIRTUAL IN-PATH NETWORK DEPLOYMENTSFigure 3-1. In-Path, Load-Balanced, Layer-4 Switch Deployment Basic Steps Client-Side Basic Steps Server-Side7. Enable Layer-4 switch support. For example ‹ “Introduction to Out-of-Path Deployments,” next CHAPTER 4 Out-of-Path Network DeploymentsIntroduction to Out-of-Path Deployments ‹ “Out-of-Path, Failover Deployment” on pageOut-of-Path, Failover Deployment Figure 4-1. Physical Out-of-Path DeploymentBasic Steps Client-Side Figure 4-2. Out-of-Path, Server-Side, Failover Support DeploymentFigure 4-3. Setup Optimization Service - In-Path Rules Page 4 - OUT-OF-PATH NETWORK DEPLOYMENTSBasic Steps Client-Side Out-of-Path, Static Cluster DeploymentBasic Steps Server-Side Page Server-Side Hybrid In-Path and Out-of-Path DeploymentBasic Steps Client-SideFigure 4-7. Setup Optimization Service - In-Path Rules Page 4 - OUT-OF-PATH NETWORK DEPLOYMENTSFigure 4-8. Setup Optimization Service - General Settings Page Basic Steps Server-Side4 - OUT-OF-PATH NETWORK DEPLOYMENTS Introduction to Connection Forwarding CHAPTER 5 Configuring Connection Forwarding‹ “Configuring Connection Forwarding” on page ‹ “Introduction to Connection Forwarding,” nextNeighbors in Connection Forwarding Figure 5-1. Connection Forwarding in an Asymmetric NetworkFigure 5-2. One-to-One Failover Deployment Configuring Connection ForwardingOne-to-One Failover Deployment Basic Steps Client-Side Basic Steps Server-Side Configuring Connection Forwarding Usingthe Management Console Figure 5-3. Connection Forwarding in an Asymmetric Network‹ Click Update Settings Figure 5-4. Setup Advanced Networking - Connection Forwarding PageAt the system prompt, enter the following set of commands Configuring Connection Forwarding Using the CLIFile Services WAN Accelerator Command-Line Interface Reference Manual To enable connection‹ “Introduction to PBR,” next ‹ “Connecting the HP EFS WAN Accelerator to Your Network in PBRCHAPTER 6 Policy-Based Routing Deployments ‹ “Overview of CDP” on pageIntroduction to PBR Overview of CDPHow PBR works on a Cisco 6500 Platform Version 12.217d SXB1 Autodiscovery, and CDP” on pageAutodiscovery, and CDP” on page Connecting the HP EFS WAN Accelerator toYour Network in PBR Deployments Configuring PBR Using the CLI Asymmetric HP EFS WAN Accelerator Deployments With PBRBasic Steps Client-Side To configure the client- side HP EFS WAN AcceleratorTo configure the client side routerTIP Enter configuration commands, one per line. End with CRTL-Z Configuring PBR Using the Management ConsoleBasic Steps Server-Side Basic Steps Client-SideFigure 6-2. Setup Optimization Service - General Settings Page Figure 6-3. Setup Optimization Service - In-Path Rules Page Basic Steps Server-SideBasic Steps Client-Side Basic Steps Server-Side Perform the steps for “Basic Steps Client-Side” on pagePerform the steps for “Basic Steps Server-Side” on page Basic Steps Client-Side Basic Steps Server-Side Client-Side HP EFS WAN Accelerator Attached to an Inside RouterPBR Between VLANs Perform the steps for “Basic Steps Server-Side” on pageEFS WAN Accelerator To configure the HPTo configure the Cisco routerRight-side. Clients=10.1.1.0/24, Servers=10.1.2.0/24, HP EFS WAN Symmetric HP EFS WAN AcceleratorDeployments With PBR and Autodiscovery EFS WAN AcceleratorsAccelerator service for your changes to take effect TIP Enter configuration commands, one per line end with CTRL-ZRouterconfig#interface fastEthernet 0/0.3 Routerconfig-subif#encapsulation dot1Q 3 Routerconfig-subif#ip address 10.1.3.1 255.255.0.0 Routerconfig-subif#exit Routerconfig#interface fastEthernet 0/1 Routerconfig-subif#ip address 10.1.4.1 Right-side. Clients=10.1.1.0/24, Servers=10.1.2.0/24, HP EFS WAN Symmetric Deployments with PBR Autodiscovery, and CDPTo configure the HP EFS WAN AcceleratorsAccelerator service for your changes to take effect TIP Enter configuration commands, one per line end with CTRL-ZTroubleshooting ‹ “Configuring WCCP Using the Management Console” on page ‹ “Connecting the HP EFS WAN Accelerator to Your Network in WCCP‹ “A Basic WCCP Configuration” on page ‹ “Additional WCCP Features” on pageIntroduction to WCCP Basic Steps “Failover Support” on pageTraffic is redirected using one of the following schemes WCCP CLI Commands 7 - WCCP DEPLOYMENTSservice group Your Network in WCCP DeploymentsConnecting the HP EFS WAN Accelerator to Configuring the WCCP Router or Multi-Layer Switch A Basic WCCP ConfigurationConnecting the HP EFS WAN Accelerator To configure the HP EFS WAN Accelerator Configuring the Client-Side HP EFS WAN AcceleratorTo configure the fastEthernet0/0Basic Steps Client-Side Configuring WCCP Using the Management ConsoleTo add the WCCP service group to the HP EFS WAN Accelerator Figure 7-3. Setup Optimization Service - General Settings Page 7 - WCCP DEPLOYMENTS 6. Navigate to the Setup Advanced Networking - WCCP Groups pageFigure 7-4. Setup Advanced Networking - WCCP Service Groups Page 8. Click Add Group to display your new group in the Service Group list 7 - WCCP DEPLOYMENTS To define in-path rules to reach the server- side appliance13. Save and apply the new configuration in the Management Console Figure 7-7. Setup Optimization Service - In-Path Rules Page Basic Steps Server-SideTo configure the Dual WCCP DeploymentWCCP 3640 router 7 - WCCP DEPLOYMENTSboot-start-marker boot-end-marker 7 - WCCP DEPLOYMENTSboot system flash sup-slot0c6msfc2-jsv-mz.121-23.E.bin WCCP 6209 routerTo configure the boot bootldr bootflashc6msfc2-boot-mz.121-19.E1.binTo set the password Additional WCCP FeaturesTo configure the server-side HP EFS WAN Accelerator 1. On the router, at the system prompt, enter the following commandTo configure TCP port To configure multicastTo configure multicast groups on the HP EFS WAN Accelerator MulticastLoad Balancing To configure specific traffic redirection on the routerTo change the hashing scheme and assign a weight Failover SupportTroubleshooting To check the router configurationTo trace WCCP packets and events on the router 7 - WCCP DEPLOYMENTSIntroduction to PFS CHAPTER 8 Proxy File Service Deployments‹ “Configuring PFS Using the Management Console” on page ‹ “Introduction to PFS,” nextThe following terms are used to describe processes and devices in PFS PFS TermsPFS provides PFS Operating Modes How Does PFS Work? When to Use PFS Figure 8-1. PFS DeploymentWhen to use Global Mode Configuration Checklist forTo join a domain for Configuring PFS Using the Management ConsoleInstallation and Configuration Guide Figure 8-2. Setup Proxy File Service PFS - Configuration Page 14. Click Save to write your settings to memory After you have setup the PFS domain, you can configure your shares 8. Click Add Share to add the share to the Shares list 9. Click Save to write your settings to memory4. Type the remote path for the share in the Remote Path text box To map a share To synchronize andinitialize a share To modify share Navigate to the Setup Proxy File Service - Shares pageto modify to display the Shares Detailed Settings page information8 - PROXY FILE SERVICE DEPLOYMENTS To view share statusdetails pageRADIUS or Terminal Access Controller Access Control System TACACS+ CHAPTER 9 RADIUS and TACACS+ AuthenticationIntroduction to Authentication ‹ “Introduction to Authentication,” next‹ aaa authorization map default-user ‹ aaa authorization map order Configuring a RADIUS Server with FreeRADIUS‹ aaa authentication login default ‹ show authentication methodrequests on the To add acceptanceIn a text editor, open the /usr/local/etc/raddb/clients.conf file RADIUS server9 - RADIUS AND TACACS+ AUTHENTICATION Configuring a TACACS+ Server with Free TACACS+At your system prompt, enter the following set of commands To downloadConfiguring RADIUS Authentication in the HP EFS WAN Accelerator Configuring RADIUS AuthenticationFigure 9-1. Setup Authentication - General Settings Page Basic StepsConfiguring TACACS+ Authentication in the HP EFS WAN Accelerator Configuring TACACS+ AuthenticationFigure 9-3. Setup Authentication - General Settings Page Basic StepsAUTHENTICATION 5. Navigate to the Setup Authentication - TACACS+ Servers pageFigure 9-4. Setup Authentication - TACACS+ Servers Page 7. Click Save9 - RADIUS AND TACACS+ AUTHENTICATION ‹ “Serial Cluster Deployment,” next CHAPTER 10 Serial Cluster and Cascade DeploymentsSerial Cluster Deployment ‹ “Cascade Deployment” on pageIn serial cluster deployments To configure HP EFS WAN Accelerator1 A Basic Serial Cluster DeploymentInterface Reference Manual To configure HP EFSWAN Accelerator2 WAN Accelerator3Cascade Deployment Figure 10-3. Cascade DeploymentFixed-Target Rules Glossary Host. A computer or other computing device that resides on a network NFS. Network File System. The file sharing protocol in a UNIX network state algorithms to send routing information to all nodes in an internetwork by calculating the shortest path to each node based on a topography of the Internet constructed by each node. Each router sends that portion of the routing table keeps track of routes to particular network destinations that describes the state of its own links. It also sends the complete routing structure topography Index R RADIUS INDEX