Out-of-Path with Policy-Based-Routing Redirection

Out-of-Path with Policy-Based-Routing Redirection
Section 1: Using Subnet Sharing
Section 2: Using TCP/IP–based Auto-Optimization
This chapter contains two sections, each of which describes a method of using Policy-Based Routing (PBR) on the WAN router to redirect traffic to the Silver Peak appliance.
n
The first section uses Subnet Sharing as the preferred auto-optimization method, and allows appliances connected by an operational tunnel to optimize all packets in a flow. It simplifies network configuration and, when you’re using an out-of-path Silver Peak appliance, it eliminates the need for WAN-to-LAN packet redirection on the inbound WAN interfaces of your router.
n
It may not always be possible to use subnet sharing, however, if the configuration of your network precludes it. The second section uses TCP-based or IP-based auto-optimization without subnet sharing. In this case, the first TCP SYN packet in the flow is transmitted outside the tunnel. Therefore, to ensure that the SYN packets arrive at an out-of-path Silver Peak appliance, you must configure WAN-to-LAN PBR packet redirection on your router’s WAN–facing interfaces, as described in this section.
For more explanation, see “Determining the Need for Traffic Redirection”.
Note If you’re using a Juniper router, their equivalent term for this redirection method is Filter-Based Forwarding [FBF]. Check your router manufacturer’s documentation to verify terminology.
In This Chapter
n
n

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.