Manuals / HP / Computer Equipment / Accelerators

HP Enterprise File Services WAN Accelerator manual 6. PBR Between VLANs

Models: Enterprise File Services WAN Accelerator

1 124

Download 124 pages 48.85 Kb

Page 61

Client-Side HP EFS WAN Accelerator Attached to an Inside Router

Basic Steps (Client-Side)

Basic Steps (Server-Side)

Client-Side HP EFS WAN Accelerator Attached to an Inside Router

In this deployment, PBR is enabled on the router interface connected to the Layer-2 switch that redirects traffic to the HP EFS WAN Accelerator. The same PBR rules should not be enabled on the WAN router (or any other router on the way to the WAN).

Figure 6-5.Client-Side HP EFS WAN Accelerator Attached to an Inside Router

Perform the steps for “Basic Steps (Client-Side)” on page 50. Make sure that you configure different PBR rules for the second router.

Perform the steps for “Basic Steps (Server-Side)” on page 51.

PBR Between VLANs

If there is not a clear physical separation between the client and the HP EFS WAN Accelerator on the router where PBR is defined, you can use Virtual Local Area Networks (VLANs) to create a virtual separation.

In the following figure, the HP EFS WAN Accelerator is configured in a different VLAN than the client VLAN, and PBR is enabled on the client VLAN interface and disabled on the HP EFS WAN Accelerator VLAN interface.

Figure 6-6.PBR Between VLANs

6 - POLICY-BASED ROUTING DEPLOYMENTS

HP STORAGEWORKS ENTERPRISE FILE SERVICES WAN ACCELERATOR 2.1.5 DEPLOYMENT GUIDE

55

Image 61

HP Enterprise File Services WAN Accelerator manual Client-Side HP EFS WAN Accelerator Attached to an Inside Router

Contents

407118-001 HP StorageWorks Enterprise File Services WAN Acceleratordeployment guide 407118-002 Part number Second edition JuneLegal and notice information Enterprise File Services WAN Accelerator 2.1.5 deployment guideChapter 1 Designing an HP EFS WAN Accelerator Deployment ContentsChapter 2 In-Path Deployments Configuring Connection Forwarding ChapterChapter ChapterChapter 7 WCCP Deployments Chapter 6 Policy-Based Routing DeploymentsChapter 9 RADIUS and TACACS+ Authentication Chapter 8 Proxy File Service DeploymentsChapter 10 Serial Cluster and Cascade Deployments GlossaryAbout This Guide IntroductionIn This Introduction ‹ “About This Guide,” nextINTRODUCTION Organization of This GuideCourier Document Conventionsntp peer addr version number delete filename upload filenameEthernet Network Compatibility Hardware and Software DependenciesAntivirus Compatibility ‹ “Related HP Documentation” on page ‹ “Online Documentation” on page Additional Resources‹ “Related Reading” on page Related HP Documentation Online Documentation Related ReadingHP Storage Web Site Contacting HPTechnical Support INTRODUCTION Introduction to the HP EFS WAN Accelerator CHAPTER 1 Designing an HP EFS WAN Accelerator DeploymentIn This Chapter ‹ “Introduction to the HP EFS WAN Accelerator” nextScalable Data Referencing Transaction AccelerationVirtual Window Expansion How Does SDR Work?Transaction Prediction Design and Deployment Overview4. Choose a network template Definition of Terms Bypass ModeFailover Mode ‹ optimization is lost on the current connections on the master HP EFS WAN Accelerator 1 - DESIGNING AN HP EFS WAN ACCELERATOR DEPLOYMENT CHAPTER 2 In-Path Deployments Configuration Guide‹ “Introduction to Physical In-Path Deployments,” next ‹ “In-Path, Failover Support Deployment” on pageIn-Path, Failover Support Deployment Introduction to Physical In-Path DeploymentsBasic Steps Client-Side 4. Enable failover support. For example Basic Steps Server-Side In-Path, Two Routing Points DeploymentBasic Steps Client-Side Basic Steps Server-Side In-Path, Server-Side DeploymentBasic Steps Client-Side Basic Steps Server-Side In-Path, Server-Side, One to One DeploymentFigure 2-5. In-Path, Server-Side Deployment Figure 2-6. In-Path, Server-Side, One to One Deployment Basic Steps Client-Side Basic Steps Server-SideFigure 2-7. Setup Advanced Networking - Failover Settings Page CHAPTER 3 Virtual In-Path Network Deployments ‹ “In-Path, Load Balanced, Layer-4 Switch” on pageIntroduction to Virtual In-Path Deployments ‹ “Introduction to Virtual In-Path Deployments,” next3 - VIRTUAL IN-PATH NETWORK DEPLOYMENTS In-Path, Load Balanced, Layer-4 SwitchBasic Steps Client-Side Basic Steps Server-Side Figure 3-1. In-Path, Load-Balanced, Layer-4 Switch Deployment7. Enable Layer-4 switch support. For example Introduction to Out-of-Path Deployments CHAPTER 4 Out-of-Path Network Deployments‹ “Introduction to Out-of-Path Deployments,” next ‹ “Out-of-Path, Failover Deployment” on pageFigure 4-1. Physical Out-of-Path Deployment Out-of-Path, Failover DeploymentFigure 4-2. Out-of-Path, Server-Side, Failover Support Deployment Basic Steps Client-Side4 - OUT-OF-PATH NETWORK DEPLOYMENTS Figure 4-3. Setup Optimization Service - In-Path Rules PageBasic Steps Server-Side Out-of-Path, Static Cluster DeploymentBasic Steps Client-Side Page Basic Steps Hybrid In-Path and Out-of-Path DeploymentServer-Side Client-Side4 - OUT-OF-PATH NETWORK DEPLOYMENTS Figure 4-7. Setup Optimization Service - In-Path Rules PageBasic Steps Server-Side Figure 4-8. Setup Optimization Service - General Settings Page4 - OUT-OF-PATH NETWORK DEPLOYMENTS ‹ “Configuring Connection Forwarding” on page CHAPTER 5 Configuring Connection ForwardingIntroduction to Connection Forwarding ‹ “Introduction to Connection Forwarding,” nextFigure 5-1. Connection Forwarding in an Asymmetric Network Neighbors in Connection ForwardingOne-to-One Failover Deployment Configuring Connection ForwardingFigure 5-2. One-to-One Failover Deployment the Management Console Configuring Connection Forwarding UsingBasic Steps Client-Side Basic Steps Server-Side Figure 5-3. Connection Forwarding in an Asymmetric NetworkFigure 5-4. Setup Advanced Networking - Connection Forwarding Page ‹ Click Update SettingsFile Services WAN Accelerator Command-Line Interface Reference Manual Configuring Connection Forwarding Using the CLIAt the system prompt, enter the following set of commands To enable connectionCHAPTER 6 Policy-Based Routing Deployments ‹ “Connecting the HP EFS WAN Accelerator to Your Network in PBR‹ “Introduction to PBR,” next ‹ “Overview of CDP” on pageOverview of CDP Introduction to PBRAutodiscovery, and CDP” on page How PBR works on a Cisco 6500 Platform Version 12.217d SXB1Your Network in PBR Deployments Connecting the HP EFS WAN Accelerator toAutodiscovery, and CDP” on page Asymmetric HP EFS WAN Accelerator Deployments With PBR Configuring PBR Using the CLITo configure the client To configure the client- side HP EFS WAN AcceleratorBasic Steps Client-Side side routerBasic Steps Server-Side Configuring PBR Using the Management ConsoleTIP Enter configuration commands, one per line. End with CRTL-Z Basic Steps Client-SideFigure 6-2. Setup Optimization Service - General Settings Page Basic Steps Server-Side Figure 6-3. Setup Optimization Service - In-Path Rules PagePerform the steps for “Basic Steps Server-Side” on page Perform the steps for “Basic Steps Client-Side” on pageBasic Steps Client-Side Basic Steps Server-Side PBR Between VLANs Client-Side HP EFS WAN Accelerator Attached to an Inside RouterBasic Steps Client-Side Basic Steps Server-Side Perform the steps for “Basic Steps Server-Side” on pageTo configure the Cisco To configure the HPEFS WAN Accelerator routerDeployments With PBR and Autodiscovery Symmetric HP EFS WAN AcceleratorRight-side. Clients=10.1.1.0/24, Servers=10.1.2.0/24, HP EFS WAN EFS WAN AcceleratorsTIP Enter configuration commands, one per line end with CTRL-Z Accelerator service for your changes to take effectRouterconfig#interface fastEthernet 0/0.3 Routerconfig-subif#encapsulation dot1Q 3 Routerconfig-subif#ip address 10.1.3.1 255.255.0.0 Routerconfig-subif#exit Routerconfig#interface fastEthernet 0/1 Routerconfig-subif#ip address 10.1.4.1 To configure the HP Symmetric Deployments with PBR Autodiscovery, and CDPRight-side. Clients=10.1.1.0/24, Servers=10.1.2.0/24, HP EFS WAN EFS WAN AcceleratorsTIP Enter configuration commands, one per line end with CTRL-Z Accelerator service for your changes to take effectTroubleshooting ‹ “A Basic WCCP Configuration” on page ‹ “Connecting the HP EFS WAN Accelerator to Your Network in WCCP‹ “Configuring WCCP Using the Management Console” on page ‹ “Additional WCCP Features” on pageIntroduction to WCCP Traffic is redirected using one of the following schemes “Failover Support” on pageBasic Steps 7 - WCCP DEPLOYMENTS WCCP CLI CommandsConnecting the HP EFS WAN Accelerator to Your Network in WCCP Deploymentsservice group Connecting the HP EFS WAN Accelerator A Basic WCCP ConfigurationConfiguring the WCCP Router or Multi-Layer Switch To configure the Configuring the Client-Side HP EFS WAN AcceleratorTo configure the HP EFS WAN Accelerator fastEthernet0/0To add the WCCP service group to the HP EFS WAN Accelerator Configuring WCCP Using the Management ConsoleBasic Steps Client-Side Figure 7-3. Setup Optimization Service - General Settings Page Figure 7-4. Setup Advanced Networking - WCCP Service Groups Page 6. Navigate to the Setup Advanced Networking - WCCP Groups page7 - WCCP DEPLOYMENTS 8. Click Add Group to display your new group in the Service Group list 13. Save and apply the new configuration in the Management Console To define in-path rules to reach the server- side appliance7 - WCCP DEPLOYMENTS Basic Steps Server-Side Figure 7-7. Setup Optimization Service - In-Path Rules PageWCCP 3640 router Dual WCCP DeploymentTo configure the 7 - WCCP DEPLOYMENTS7 - WCCP DEPLOYMENTS boot-start-marker boot-end-markerTo configure the WCCP 6209 routerboot system flash sup-slot0c6msfc2-jsv-mz.121-23.E.bin boot bootldr bootflashc6msfc2-boot-mz.121-19.E1.binTo configure the server-side HP EFS WAN Accelerator Additional WCCP FeaturesTo set the password 1. On the router, at the system prompt, enter the following commandTo configure multicast groups on the HP EFS WAN Accelerator To configure multicastTo configure TCP port MulticastTo change the hashing scheme and assign a weight To configure specific traffic redirection on the routerLoad Balancing Failover SupportTo trace WCCP packets and events on the router To check the router configurationTroubleshooting 7 - WCCP DEPLOYMENTS‹ “Configuring PFS Using the Management Console” on page CHAPTER 8 Proxy File Service DeploymentsIntroduction to PFS ‹ “Introduction to PFS,” nextPFS provides PFS TermsThe following terms are used to describe processes and devices in PFS PFS Operating Modes How Does PFS Work? Figure 8-1. PFS Deployment When to Use PFSConfiguration Checklist for When to use Global ModeInstallation and Configuration Guide Configuring PFS Using the Management ConsoleTo join a domain for Figure 8-2. Setup Proxy File Service PFS - Configuration Page 14. Click Save to write your settings to memory After you have setup the PFS domain, you can configure your shares 4. Type the remote path for the share in the Remote Path text box 9. Click Save to write your settings to memory8. Click Add Share to add the share to the Shares list initialize a share To synchronize andTo map a share to modify to display the Shares Detailed Settings page Navigate to the Setup Proxy File Service - Shares pageTo modify share informationdetails To view share status8 - PROXY FILE SERVICE DEPLOYMENTS pageIntroduction to Authentication CHAPTER 9 RADIUS and TACACS+ AuthenticationRADIUS or Terminal Access Controller Access Control System TACACS+ ‹ “Introduction to Authentication,” next‹ aaa authentication login default Configuring a RADIUS Server with FreeRADIUS‹ aaa authorization map default-user ‹ aaa authorization map order ‹ show authentication methodIn a text editor, open the /usr/local/etc/raddb/clients.conf file To add acceptancerequests on the RADIUS serverAt your system prompt, enter the following set of commands Configuring a TACACS+ Server with Free TACACS+9 - RADIUS AND TACACS+ AUTHENTICATION To downloadConfiguring RADIUS Authentication Configuring RADIUS Authentication in the HP EFS WAN AcceleratorBasic Steps Figure 9-1. Setup Authentication - General Settings PageConfiguring TACACS+ Authentication Configuring TACACS+ Authentication in the HP EFS WAN AcceleratorBasic Steps Figure 9-3. Setup Authentication - General Settings PageFigure 9-4. Setup Authentication - TACACS+ Servers Page 5. Navigate to the Setup Authentication - TACACS+ Servers pageAUTHENTICATION 7. Click Save9 - RADIUS AND TACACS+ AUTHENTICATION Serial Cluster Deployment CHAPTER 10 Serial Cluster and Cascade Deployments‹ “Serial Cluster Deployment,” next ‹ “Cascade Deployment” on pageIn serial cluster deployments A Basic Serial Cluster Deployment To configure HP EFS WAN Accelerator1WAN Accelerator2 To configure HP EFSInterface Reference Manual WAN Accelerator3Figure 10-3. Cascade Deployment Cascade DeploymentFixed-Target Rules Glossary Host. A computer or other computing device that resides on a network NFS. Network File System. The file sharing protocol in a UNIX network state algorithms to send routing information to all nodes in an internetwork by calculating the shortest path to each node based on a topography of the Internet constructed by each node. Each router sends that portion of the routing table keeps track of routes to particular network destinations that describes the state of its own links. It also sends the complete routing structure topography Index INDEX R RADIUS