Client ACL | Intel 1520 instruction

enable SNMP access to either one or both of these MIBS on your Intel NetStructure Cache Appliance. See Enabling SNMP agents‚ on page 29.

If a device fails, it can send a warning message or an SNMP trap to the SNMP monitoring station. All SNMP agents require you to conﬁgure the trap destination IP address before they can send traps. This conﬁguration varies among agent implementations. It can also depend on the MIB.

Client ACL

In addition to supporting SSL security, the appliance also supports client access control lists (ACLs). The appliance serves only requests from clients whose IP addresses are on the ACL. You can edit the ACL from the command-line interface (see Chapter 1‚ Using the Command-Line Interface).

Appendix A Caching Solutions and Performance

149

Image 161

Intel 1520 manual Client ACL

Contents

Intel NetStructure 1520 Cache Appliance Copyright 2000, Intel Corporation. All rights reserved Contents Configuring the Appliance Using the Command-Line Interface Troubleshooting Problems 109 Error Messages 151 Changing network address configuration on the NIC Contents 106 Preface Conventions used in this manual Who should read this manualConvention Purpose Bold Introduction Chapter Why use this caching appliance? What is an Intel NetStructure Cache Appliance?Flexible cache architecture Web proxy cache Intel NetStructure Cache Appliance features Multithreading process support Secure, single-point administrationHigh-speed caching Broad protocol support Snmp Network Management How to use this guidePerformance reporting To find out about … See …Page Getting Started Starting the system for the first time Controls and physical features on your system Command-line interface‚ on Hhmmss Getting Started Accessing the Manager UI Dashboard Using Monitor and Configure mode Monitor mode frame Configure mode frame Accessing the command-line interface Using online helpChanging passwords Verifying that caching worksPage Monitoring Appliance Performance Using the Dashboard Accessing monitor pages Dashboard alert lights Resolving alarmsExposing node detail Alert light Condition Description Changing the selected node Using the Node Using the Protocols Using the GraphsUsing the Cache Using the ARM Using the Mrtg Using the Other Configuring the Appliance Using the Server Basics Accessing configure pages Option Description Setting general optionsNetStructure Cache section Setting virtual IP addressing options Setting Web management optionsUsing virtual IP addressing for node failover What are virtual IP addresses? Adding entries to the Virtual IP address list Configuring load-shedding Setting browser auto configuration optionsSetting throttling of network connections Enabling Snmp agents Option Definition Configuring Http Configuring Nntp Name and port see Option Definition FTP Configuring FTP Cache activation Freshness Storage For IMS If Modified Since revalidation requests Following table describes the variable conﬁguration options Variable content Link displays the Change Administrator’s Password Using the SecurityUsing the Routing Setting Http parent caching options Establishing ICP peers Setting ICP options Field Description Option Description Setting server accelerator options Checking Wccp Using the Host DatabaseChecking transparency Configuring the host database Another invalid hostname message to the user Using the Snapshots Configuring DNS Reaching the Snapshots Using the Command-Line Interface Starting the appliance the first time Starting the command-line interfaceUsing the appliance after initial start-up To do this Do this Navigating the command-line interface Changing network addresses configuration Using the setup menu Changing the gateway address Changing the controller speed and transmission modeChanging the DNS address and domain name Configuring date and time settings Configuring time zone settingsViewing current network address settings Using the main menu Stopping the appliance Checking the status of the Server and ManagerStarting the appliance Viewing and maintaining versions of the software Installing a new version of the appliance software Application upgrade Running a different version of the appliance software Patch upgradeOS/Application upgrade Deleting a version of the appliance software Clearing statistics Halting the System Rebooting the System Preparing a cache disk Resetting to factory settingsUsing the config menu Setting general controls Configuring Http options Configuring protocol options Configuring Nntp options Conﬁguring Nntp servers Tag Description Following table describes the tags you can use in a rule Tag Description Examples Conﬁguring Nntp access If access is Authenticator is User is Pass is Following table lists the access directive options Configuring FTP options Configuring Secure Socket Layer SSL port Primary Destination Allowed Value Setting filter rules Action Value Secondary Specifier Allowed Value Setting remap rules Target Enabling caching for different protocols Configuring the cache Setting object freshness options Setting disk storage options Following table shows the options Configuring caching rules Request URL method use one of the following Destip=112.12.12.12 scheme=ftp action=never-cache Controlling client access to the appliance Configuring security options Controlling access to the Manager UI Viewing and modifying ICP rules Configuring routing optionsConfiguring and maintaining ICP peers Following table describes each ﬁeld Mcttl Example Enabling and disabling ICP Viewing current ICP settings Enabling and disabling multicast in ICP Setting the ICP port numberSetting the ICP query timeout Controlling parent proxy caching Action Tag Allowed Value Secondary Specifiers Allowed Value Action Tag Allowed Value Configuring Wccp options Enabling and disabling transparent redirection Configuring the Adaptive Redirection Module ARM Rule Description Configuring ARM bypass rules Rule Format Bypass rules have the following format Configuring load-shedding options Configuring the host database options Option Description Configuring logging options Viewing Node statistics Using the monitor menuStatistic Description Cache Progress Statistic Description Viewing Protocol statisticsNetwork Statistics Description Server Statistics Description Client Statistics Description Operations From this Node Statistics Description QueriesOriginating From ICP Peers Viewing Cache statistics Viewing Other statistics Statistic Description Using the expert menu Using the logoff menu Using the save menuUsing the load menu Troubleshooting Problems Rebooting your system from the CLI Rebooting your system Upgrading software Page Appendix a Caching Solutions and Performance Day in the life of a cache request Web proxy caching Cache miss Ensuring cached object freshness Http object freshness tests Revalidating objectsExpires header test Last-Modiﬁed / Date header test Revalidate rules Default testDeciding whether to serve Http objects Configuring Http revalidation Configuring Http freshness options To cache or not to cache? Configuring Http cachabilityCaching Http alternates Directive source Caching directives Transparent proxy caching Interception strategies Serving requests transparently Using a layer 4-aware switch to filter transparency requests Using a WCCP-enabled router for transparency Using policy-based routing to filter transparency requests ARM redirection Using a router to ﬁlter Http requests More about bypass rules Adaptive interception bypassAppliance adaptive bypass Static and dynamic adaptive bypass Configuring bypass optionsSource bypass Destination bypass Server acceleration Retrieving requested documents Advantages of server accelerationHow server acceleration works Whereas the corresponding proxy request would look like this Web server redirects Understanding server acceleration mapping rules User Request Translated Request Examples of rules and translations User Request Origin Server Header Translated Header Http cache hierarchies Understanding cache hierarchies Miss ICP cache hierarchies Bombay Nntp cache hierarchies News article caching Supporting several parent news servers Appliance as a news serverAppliance as a caching proxy news server Clustering Blocking particular groupsSeveral news servers supplying the same groups Several servers supplying different groups Transparency Maintaining the cache updates and feedsPosting Pull the overview information for speciﬁed groups Pull the articles for speciﬁed groups Configuring Access controlDynamically subscribe to speciﬁed groups Take a partial feed push for speciﬁed groups Obeying Nntp control messages Self-tuning DataFlow coreClient bandwidth throttling Carrier-class architecture Raw-disk object store Fine-grained parallelismAlias-free caching Fast space reclamation Advanced protocol features AlarmsHigh-availability Fast kernel packet engine Monitor Dashboard Virtual IP failover Load shedding Node fault toleranceExpansion capabilities Centralized administration Client ACL Page Appendix B Error Messages Title Code Description Html messages sent to clients Appendix B Error Messages 153 Message Description Standard Http response messages Appendix B Error Messages 155 Page Glossary DNS ISP POP Wccp Page Index News server features