When you first install the appliance and log in via the browser, the Initial Configuration Wizard appears. The wizard guides you through configuring management settings, deployment and network settings, and creating a tunnel to a remote appliance. With simpler deployments, this is enough to start optimizing traffic.
• You can always access the wizard again later by going to the Configuration menu and selecting Initial Config Wizard.
• For more complex deployments, access the Configuration > Deployment page, seen below.
It also describes common scenarios, considerations when selecting a deployment, redirection concerns, and some adaptations.For detailed deployment examples, refer to the Silver Peak Network Deployment Guide.
•
• A virtual appliance has no fail-to-wire, so you would need a redundant network path to maintain connectivity if the appliance fails.
•
• If the appliance is on a VLAN trunk, then you need to configure VLANs on the Silver Peak so that the appliance can tag traffic with the appropriate VLAN tag.
•
• When using two Silver Peaks at the same site, this is also the most common deployment for high availability (redundancy) and load balancing.This is also known as Dual-Homed Router Mode.
• In the rare case when you need to send inbound WAN traffic to a router other than the WAN next-hop router, use LAN-side routes.There are three methods for redirecting outbound packets from the client to the appliance (known as LAN-side redirection, or outbound redirection):
• PBR (Policy-Based Routing) — configured on the router. No other special configuration required on the appliance. This is also known as FBR (Filter-Based Forwarding).If you want to deploy two Silver Peaks at the site, for redundancy or load balancing, then you also need to use VRRP (Virtual Router Redundancy Protocol).
• WCCP (Web Cache Communication Protocol) — configured on both the router and the Silver Peak appliance. You can also use WCCP for redundancy and load balancing.
• Host routing — the server/end station has a default or subnet-based static route that points to the Silver Peak appliance as its next hop. Host routing is the preferred method when a virtual appliance is using a single interface, mgmt0, for datapath traffic (also known as Server Mode).To ensure end-to-end connectivity in case of appliance failure, consider using VRRP between the appliance and a router, or the appliance and another redundant Silver Peak.How you plan to optimize traffic also affects whether or not you also need inbound redirection from the WAN router (known as WAN-side redirection):
• If you use subnet sharing (which relies on advertising local subnets between Silver Peak appliances) or route policies (which specify destination IP addresses), then you only need LAN-side redirection.
• If, instead, you rely on TCP-based or IP-based auto-optimization (which relies on initial handshaking outside a tunnel), then you must also set up inbound and outbound redirection on the WAN router.
• For TCP flows to be optimized, both directions must travel through the same client and server appliances. If the TCP flows are asymmetric, you need to configure flow redirection among local appliances.
• If you enable Auto Tunnel, then the initial TCP-based or IP-based handshaking creates the tunnel. That means that the appropriate LAN-side and WAN-side redirection must be in place.
• You can let the Initial Configuration Wizard create the tunnel to the remote appliance.
• You can create a tunnel manually on the Configuration - Tunnels page.For more detailed information about when and where to set up traffic redirection, see “Determining the Need for Traffic Redirection” in “Route Policy.”High availability — as configured with VRRP and WCCP — are covered separately, and in depth, in the Silver Peak NX Series Appliances Network Deployment Guide.
• When using an NX appliance with four 1Gbps Ethernet ports, you can bond like pairs into a single 2Gbps port with one IP address. For example, wan0 plus wan1 bond to form bwan0. This increases throughput on a very high-end appliance and/or provides interface-level redundancy.
• For bonding on a virtual appliance, you would need configure the host instead of the appliance. For example, on a VMware ESXi host, you would configure NIC teaming to get the equivalent of etherchannel bonding.
• Whether you use a physical or a virtual appliance, etherchannel must also be configured on the directly connected switch/router. Choose this when you want to enable 10Gbps ports on a physical appliance that also has 1Gbps non-management ports. Forces the WAN interface to go down when the corresponding LAN interface goes down, or vice versa. This is a corner case. Here, four ports form a single bridge with a single WAN next-hop. This is in contrast to having dual WAN routers with two separate bridges.When using a four-port Silver Peak appliance, you can bond pairs of Ethernet ports into a single port with one IP address. This feature provides the capability to carry 2 Gbps in and out of an NX Series appliance when both ports are in service.
•
•
• You can view the statistics on the Monitoring - Interfaces page. If you’re using bonding, you’ll see statistics for blan0 and bwan0, as well as for the interfaces that comprise them (lan0, lan1, wan0, and wan1).
• If a WCCP or VRRP deployment already exists, then you must reconfigure the deployment on the bonding interface. In other words, if you previously configured on wan0, then after bonding you must reconfigure on bwan0.
1 Access the Configuration - Deployment page. The three available bonding modes are:
4
Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com. |