Getting Started : Getting Started with Deployment

Getting Started with Deployment
When you first install the appliance and log in via the browser, the Initial Configuration Wizard appears. The wizard guides you through configuring management settings, deployment and network settings, and creating a tunnel to a remote appliance. With simpler deployments, this is enough to start optimizing traffic.
You can always access the wizard again later by going to the Configuration menu and selecting Initial Config Wizard.
For more complex deployments, access the Configuration > Deployment page, seen below.
Deployment Basics
This section discusses the basic in-line and out-of-path deployments.
It also describes common scenarios, considerations when selecting a deployment, redirection concerns, and some adaptations.
For detailed deployment examples, refer to the Silver Peak Network Deployment Guide.
In-Path (Bridge Mode)
Single WAN-side Router
In this deployment, the appliance is in-line between a single WAN router and a single WAN-side switch.
Dual WAN-side Routers
Considerations for In-Path Deployments
If the appliance is on a VLAN trunk, then you need to configure VLANs on the Silver Peak so that the appliance can tag traffic with the appropriate VLAN tag.
Out-of-Path (Router/Server Mode)
Single WAN-side Router
Dual WAN-side Routers
This deployment redirects traffic from two routers to two interfaces on a single Silver Peak appliance.
This is also known as Dual-Homed Router Mode.
Considerations for Out-of-Path Deployments
Examining the Need for Traffic Redirection
Whenever you place an appliance out-of-path, you must redirect traffic from the client to the appliance.
There are three methods for redirecting outbound packets from the client to the appliance (known as LAN-side redirection, or outbound redirection):
PBR (Policy-Based Routing) — configured on the router. No other special configuration required on the appliance. This is also known as FBR (Filter-Based Forwarding).
If you want to deploy two Silver Peaks at the site, for redundancy or load balancing, then you also need to use VRRP (Virtual Router Redundancy Protocol).
WCCP (Web Cache Communication Protocol) — configured on both the router and the Silver Peak appliance. You can also use WCCP for redundancy and load balancing.
Host routing — the server/end station has a default or subnet-based static route that points to the Silver Peak appliance as its next hop. Host routing is the preferred method when a virtual appliance is using a single interface, mgmt0, for datapath traffic (also known as Server Mode).
To ensure end-to-end connectivity in case of appliance failure, consider using VRRP between the appliance and a router, or the appliance and another redundant Silver Peak.
How you plan to optimize traffic also affects whether or not you also need inbound redirection from the WAN router (known as WAN-side redirection):
If you use subnet sharing (which relies on advertising local subnets between Silver Peak appliances) or route policies (which specify destination IP addresses), then you only need LAN-side redirection.
If, instead, you rely on TCP-based or IP-based auto-optimization (which relies on initial handshaking outside a tunnel), then you must also set up inbound and outbound redirection on the WAN router.
For TCP flows to be optimized, both directions must travel through the same client and server appliances. If the TCP flows are asymmetric, you need to configure flow redirection among local appliances.
A tunnel must exist before auto-optimization can proceed. There are three options for tunnel creation:
If you enable Auto Tunnel, then the initial TCP-based or IP-based handshaking creates the tunnel. That means that the appropriate LAN-side and WAN-side redirection must be in place.
You can let the Initial Configuration Wizard create the tunnel to the remote appliance.
You can create a tunnel manually on the Configuration - Tunnels page.
For more detailed information about when and where to set up traffic redirection, see “Determining the Need for Traffic Redirection” in “Route Policy.”
High availability — as configured with VRRP and WCCP — are covered separately, and in depth, in the Silver Peak NX Series Appliances Network Deployment Guide.
For detailed configuration information, see the Silver Peak Network Deployment Guide.
How to Adjust the Basic Deployments
When you choose a deployment, only the appropriate options are accessible.
When using an NX appliance with four 1Gbps Ethernet ports, you can bond like pairs into a single 2Gbps port with one IP address. For example, wan0 plus wan1 bond to form bwan0. This increases throughput on a very high-end appliance and/or provides interface-level redundancy.
For bonding on a virtual appliance, you would need configure the host instead of the appliance. For example, on a VMware ESXi host, you would configure NIC teaming to get the equivalent of etherchannel bonding.
Whether you use a physical or a virtual appliance, etherchannel must also be configured on the directly connected switch/router.
Use mgmt0 for datapath traffic (server mode)
This is a corner case. Here, four ports form a single bridge with a single WAN next-hop. This is in contrast to having dual WAN routers with two separate bridges.
Note Changing the deployment mode requires a reboot.
Configuring Gigabit Etherchannel Bonding
When using a four-port Silver Peak appliance, you can bond pairs of Ethernet ports into a single port with one IP address. This feature provides the capability to carry 2 Gbps in and out of an NX Series appliance when both ports are in service.
When you configure bonding, the following is true:
lan0 plus lan1 bond to form blan0, which uses the lan0 IP address.
wan0 plus wan1 bond to form bwan0, which uses the wan0 IP address.
You can view the statistics on the Monitoring - Interfaces page. If you’re using bonding, you’ll see statistics for blan0 and bwan0, as well as for the interfaces that comprise them (lan0, lan1, wan0, and wan1).
If a WCCP or VRRP deployment already exists, then you must reconfigure the deployment on the bonding interface. In other words, if you previously configured on wan0, then after bonding you must reconfigure on bwan0.
w
To configure etherchannel bonding
To enable bonding, you need to configure both the appliance and the router for bonding.
1
Access the Configuration - Deployment page. The three available bonding modes are:
a
b
c
2
3
4
config t
interface range <g1/0/6-7>
channel-group <1> mode on
 
show etherchannel
show interface port-channel <1>

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.