Manuals / Intel / TV and Video / TV Mount

Intel A31032-001 Positioning 7110/7115 between ITM Device and Server, Scalability and Cascading

Models: A31032-001

1 196

Download 196 pages 18.6 Kb

Page 26

C H A P T E R 3 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide

Positioning 7110/7115 between ITM

Device and Server

If security considerations require limited network access to clear text, the 7110/7115 should be placed between the ITM device and the server.

		Intel® NetStructure™ 7110/7115
Router	ITM Device	e-Commerce Accelerators
Router

Internet

Client

intel

intel

intel

Servers

NOTE: The configuration in Figure 1-4 precludes layer 7 load balancing because secure traffic through the ITM device is encrypted.

Figure 1-4: 7110/7115s Between ITM Device and Servers

Multiple 7110/7115s and Cascading Processing

Scalability and Cascading

The 7110/7115’s capabilities are scalable by chaining, or “cascading,” multiple 7110/7115s together. In such configurations, each unit’s server side connector is wired to the network side connector of the next 7110/7115 in line. The last 7110/7115 in line is connected to the server, switch, or ITM device.

Spilling and Throttling

When the 7110/7115’s “spill” option is enabled, if a given 7110/7115 cannot process a request within a specified interval, the request is passed on, still encrypted, to the next 7110/7115 in line. The last

3-4

Image 26

Intel A31032-001 Positioning 7110/7115 between ITM Device and Server, Scalability and Cascading, Spilling and Throttling

Contents

Intel NetStructure 7110/7115 e-Commerce Accelerator VersionCopyright TrademarksTable of Contents Theory of Operation Scenarios Remote Management Alarms and Monitoring Troubleshooting Appendix a Front Panel List of Figures Xii Introduction About this User GuideNew in This Release Remote ManagementWho Should Use this Book Before You BeginHow to Use this Book Glossary defines terms appearing in this User Guide Page Installation and Initial Configuration Installing the 7110/7115 Free- Standing or in a Rack Rack InstallationFree-Standing Installation Network ConnectionsNetwork and Server LEDs Admin Terminal ConnectionStatus Check Inline LEDHyperTerminal§ Paste Operations Server and Network LEDs TroubleshootingContinuing Configuration Single Server Acceleration Theory of OperationSecurity 7110/7115 in Single Server Configuration Multiple ServersWorking with Internet Traffic Management ITM Devices Positioning 7110/7115 between ITM Device and Client NetworkSpilling and Throttling Positioning 7110/7115 between ITM Device and ServerScalability and Cascading Keys and Certificates AvailabilityCutting and Pasting with HyperTerminal§ Create a Certificate Signing Request ProcedureCreate a key Type the create key command at the prompt Intel 7115 create signAsciix Enter Certificate REQUEST----- linesIntel 7115 export sign mywebserver Typically, the CSR will look something like this EnterApache Interface to Open SSL§ modssl Save the configuration when the server has been mappedExporting a Key/Certificate from a Server Apache SSL§ Intel 7115 import key mywebserver Stronghold§Importing into the 7110/7115 Save the configuration when the server has been mapped Create a key as follows Enter the create cert command with the keyIDCreating a new Key/Certificate on the 7110/7115 Intel 7115 create cert mywebserverGlobal Site Certificates OverviewIntel 7115 import cert keyID Global Site Certificate Paste ProcedureExample A P T E R Redirection Clients and Unsupported Ciphers Intel 7115 set redirectIntel 7115 show redirect Client AuthenticationTo disable a redirect URL for a mapping Intel 7115 set redirect 2 none Intel 7115 show redirectNext, import the client CA certificate for Map ID Intel 7115 import clientcaGenerate a certificate signing request Creating a Client CA Certificate using OpenSSL§Generate the client CA certificate Automapping SSL ProcessingMapping Deleting automapping entries Automapping with user-specified key and certificateAutomapping with multiple port combinations Manual mappingUse the show block command to verify Combining automapping and manual mappingUse show block to verify Subnet IP, Specific PortAll IPs, Specific Port Intel 7115 delete block Use the show block command to confirm the blockDelete a Block Failure Conditions, Fail-safe, and Fail-through Scenarios Syntax Scenario 1-Single Server Procedure for ScenarioManual Configuration Intel 7115delete map 1 Intel 7115list maps This scenario shows how to configure two or more servers Scenario 2-Multiple ServersID KeyID Scenario 3-Multiple 7110/ 7115s, Cascaded AssumptionsIntel 7115 export config Multiple Cascaded 7110/7115sAfter verification y or refusal n, the prompt reappears Save the configurationIntel 7115 import config To reverse this process Intel 7115set egressmac noneCommand Reference Online HelpCommand Line Prompt Command Line InterfaceUser Authentication Abbreviation to UniquenessA P T E R Command Line Interface Moving the Insertion Point Input Editing CommandsCommand History Cut and Paste Command Summary Inline List Command Command Options ImportNic Password Reboot Command Command Options Set Command Command Options Show Status SetsnmpShowsnmp TtycharStatus Command Command ReferenceHelp Commands Delete key SSL CommandsCommand Description Create key Import keyList keys Command Description Export keyShow key Import cert Command Description Create certDelete cert Export certDisplays all certificates Command Description Show certDisplay the expanded certificate including PEM format Set ciphersShow clientca Command Description Set redirectShow redirect Create sign Command Description Import clientcaDelete clientca Show sign keyID Command Description Delete signExport sign Display the default certificate creation information Command Description Set defcertIssuer e-mail address. You can change all, some or none FieldSet clienttmo Command Description Set kstrengthShow kstrength Show clienttmoClient request is rejected Command Description Set servertmoDisplays the currently specified server timeout value Show servertmoDelete block Port Mapping CommandsCommand Definition Create block Show blockShow permit Command Definition Create permitDelete permit Show map Command Definition Create mapDelete map mapID List mapsInline Operational CommandsCommand Description Bypass Command Description Set spill Show spillMaxremotesessions Remote Management CommandsCommand Description Set ip Set telnetport Command Description Set telnetShow telnet Show ssh Command Description Show telnetportSet ssh Set sshportSetsnmp snmpinfo Command Description Setsnmp snmpShowsnmp snmp Delete Snmp community strings CommandDescriptionSnmpcommunity List trapcommunity Command Description Setsnmp trapauthenTrapcommunity Delete trapcommunity Delete Snmp trap community strings Intel 7115 delete trapcommunityShow alarms Alarms and Monitoring CommandsCommand Description Set alarms Set rscwindowSet utlhighwater Command Description Show rscwindowSet utlwindow Show utlhighwater Command Description Set utllowwaterShow utlwindow Show utllowwaterCommandDescription Show ovlwindow Intel 7115 show ovlwindowDisplay current volatile configuration settings Configuration CommandsCommand Description Show config Intel 7115 show config default Default configuration Config default Command Description Config compareConfig reset Config saveImport config Command Description Export configConfiguration specifics are displayed Import a configuration file paste, xmodem, uudecodeList system Command Description Import upgradeImport patch Command Description Factorydefault Returns to factory configuration settingsShow info Administration CommandsCommand Description Password Set dateShow ether Command Description Set egressmacSet ether Set idletoSet prompt Command Description Set moreNic Set serialCommand Description Logging CommandsCommand Description Show serial ExitAll deletes all logs Command Description Delete logDelete saved log/trace files from /flash/logs List logsRemote Management OverviewRemote Management CLI Commands LimitationsA P T E R Overview Remote Telnet Sessions Local Serial ConsoleTo display the Telnet port Remote Console, TelnetChanging the Telnet Port Unix-prompttelnetRemote SSh Sessions To verify Telnet disableEnable remote SSh sessions Disabling TelnetRemote Console, SSh Unix-promptssh -1 adminPasswordpassword Changing the SSh PortDisabling SSh To verify SSh disableIntel 7115 set ssh disable To display the SSh portStandards Compliance Intel MIB TreeManagement Information Base-II MIB-II Intel Enterprise MIBs Where to find MIB FilesSupported MIBs Ceo-header.myEnterprise Private MIB Summary Following is a summary of the 7110/7115 private MIBPage Snmp ThrottlesPerSec Number of throttles per second Snmp Private Traps in ssl-appliance-mib.my Trap SummaryStandard Snmp Traps Enabling Snmp Intel 7115 setsnmp snmp enable Intel 7115 showsnmp snmpIntel 7115 setsnmp snmp disable Intel 7115 showsnmp snmp Specifying Snmp Information Intel 7115 showsnmp snmpinfoCommunity String Intel 7115 delete snmpcommunityUse CLI commands, setsnmp trapcommunity, list Trap Community StringAccess Control Page Alarms Monitoring CLI commands for alarm configuration are Set alarms All, esc, rsc, utl, ovl, nls None Show alarmsAlarm Modifiers and Messages Alarm TypesESC Encryption Status Change Alarm For exampleRSC Refused SSL Connections RSC Alarm CLI CommandsTo set Overload Alarm time window Extended DataThis alarm monitors three utilization threshold values UTL Utilization Threshold AlarmTo display Overload Alarm time window Intel 7115 set rscwindow Intel 7115 show rscwindowTo set Utilization Threshold Alarm high-water value UTL Alarm CLI commandsTo set Utilization Threshold Alarm time window To set Utilization Threshold Alarm low-water valueIntel 7115 set ovlwindow seconds Range OVL Overload AlarmOVL Alarm CLI Commands Intel 7115 set ovlwindow Intel 7115 show ovlwindowAlarm Logging NLS Network Link Status AlarmIntel 7115 status Respend Inline Ip 10.1.11.34 netmask Example, status alarms command Intel 7115 status alarmsMonitoring Reports Report ConfigurationMonitoring Monitor report formatMonitoring Reports CLI Commands Intel 7115 set monitoringfieldsIntel 7115 set monitoring enable Intel 7115 show monitoring Intel 7115 show monitoringfieldsPage Software Updates Intel 7115 import upgrade Using Windows§ HyperTerminal§Press y for yes at the Continue with upgrade? prompt Command import patch Connect the serial cable to the 7110/7115 auxiliary consoleTo send the uuencoded file use the ~ command Intel 7115import upgradeIntel 7115import patch Page Troubleshooting Intel 7115 set clienttmo Error message Intermediate See Global Site CertificatesThen use the nic command to force Error message ServerSettings Different mediaFront Panel LEDsFront Panel LEDs Buttons and SwitchesPress to physically force bypass mode bypass 7110/7115 ProcessingSee Appendix B, Failure OverloadConnectors Enable 7110/7115 processing Failure/Bypass ModesFail-through Switch Security Level Bypass ButtonP E N D I X B Fail-through Switch Security Level Page Supported Ciphers Cipher StrengthSSL Version Level RC4-64 SSLv2 RC2 SSLv2RC2128 RC464Page Regulatory Information Taiwan Class a EMI StatementVcci Statement FCC Part 15 Compliance StatementCanada Compliance Statement Industry Canada CE Compliance StatementCispr 22 Statement Vcci Class a Japan AustraliaAvertissement Warnung Advertencias Wichtige Sicherheitshinweise Wichtige Sicherheitshinweise Page Terms and Conditions and Software License END User Terms and Conditions of Sale and Software LicensePage P E N D I X E Page Year warranty Process of being installed Export Law Regulations Page Glossary Glossary-2 Glossary-3 Glossary-4 North America only Support ServicesWorldwide Access to Technical Support Japan onlySupport-2 Intel NetStructure 7110/7115 e-Commerce Accelerator User Support-4 Index D E Index-3 Index-4