Overview

In an in-line deployment, the Silver Peak appliance is inserted in-line between the WAN router and the Ethernet switch on the LAN side of the network. In this mode, the appliance intercepts all packets destined for the WAN. Based on the Route Policy’s MATCH criteria, or using Subnet Sharing–enabled auto-optimization, the appliance optimizes all flows that are directed to a tunnel. All other traffic passes through the appliance without optimization.

When the appliance fails, it behaves as if it were a crossover cable. Best practice is to use a crossover cable between the appliance and the WAN–side router, and a standard ethernet cable between the appliance and the LAN–side switch. Verify the physical layer connectivity between the L2 switch and router with the appliance turned off. If you don’t receive link on the router and/or switch, you’ll need to correct the cabling.

Network Diagram

In-Line Deployment: Bridge Mode [Bridging with Fail-to-Wire]

Summary

Appliance Placement	Appliance placed in-line between Ethernet LAN switch and WAN router • Appliance lan0 interface connects to Ethernet LAN switch • Appliance wan0 interface connects to WAN router
Fail-Safe Behavior	• Fails-to-Wire: The appliance behaves as a crossover cable between the Ethernet LAN switch and the WAN router in any failure scenario (hardware, software, power). • IMPORTANT: Ensure that the Ethernet LAN’s switch and the WAN router have compatible Ethernet interface physical configuration settings (speed and duplex settings can be found on the Configuration > Interfaces page). This is to ensure that traffic flows correctly if the Silver Peak appliance “Fails-to-wire”.
IP Addresses	This deployment model requires two IP addresses (on the same or separate subnets) • Silver Peak Appliance data path IP address (to originate and terminate tunnel) • Silver Peak Management IP Address (for appliance configuration and management)

Summary of Initial Configuration Tasks

The following table summarizes the tasks, and points you to the appropriate section of this chapter.

	Task	Notes	For detailed instructions, see...
1	Gather all the IP addresses needed for setup	Saves time and avoids mistakes.	“Collecting the Necessary Information”.
2	Install the appliance into the network	Physical appliance: Connect each site’s appliance between its WAN edge router and Ethernet switch. Verify connectivity, connect power, and verify LEDs. Virtual appliance: Configure the hypervisor, with the required interfaces.	Silver Peak Appliance Manager Operator’s Guide Quick Start Guides
3	Configure the appliances	In a browser, access and use the Initial Configuration Wizard to configure each appliance in Bridge mode.	“Using the Initial Config Wizard”.
4	Verify appliance connectivity	Tests data path connectivity. Do NOT proceed until you verify connectivity.	“Verifying Appliance Connectivity”.
5	Create a tunnel on each appliance	Specify the local and remote endpoints for the tunnel.	“Creating Tunnels”.
6	Test the connectivity from both ends	Verify that the tunnel is up and that flows are being optimized.	“Verifying Traffic”.

Collecting the Necessary Information

The example makes the following assumptions:

n	You’re not using DHCP.

n	Speed and duplex for all interfaces are left at the default, auto-negotiation.

n	Although it isn’t a requirement, it’s considered a best practice to use different subnets for mgmt0 and the Appliance data path IP.

In-Line Deployment

Hostname	B	C
Mode	In-line (Bridge)	In-line (Bridge)
Admin Password: Old	admin	admin
Admin Password: New / Confirm
mgmt1 IP Address / Mask	---	---
Time Zone
NTP Server IP Address
License (for virtual appliance only)
mgmt0 IP Address / Mask1	192.168.1.9/24	192.168.1.5/24
mgmt0 Next-hop IP Address	192.168.1.1	192.168.1.1
LAN Next-hop IP Address (optional) 2	---	---
Appliance data path IP Address / Mask	10.110.11.100/24	10.110.21.100/24
Appliance data path Next-hop IP	10.110.11.1/24	10.110.21.1/24

---

1

In this example, all mgmt0 IP addresses are in the same subnet. In your actual network, it’s likely that mgmt0 IP addresses are in different subnets.

2

LAN next-hop IP is only required when there are subnets for which the Silver Peak appliance does not have a configured IP address.

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.