Overview

In this deployment mode, the Silver Peak appliance uses the Virtual Router Redundancy Protocol (VRRP) to peer with the existing router, when no spare router port is available.

•	This requires changing the IP address of the router and adding the VRRP VIP (Virtual IP) address to the router.

•	The VIP address takes the existing router address; this way, you don’t need to modify the client’s default gateway.

•	The Silver Peak appliance becomes the primary default gateway for all users in that network.

•	In the unlikely event that the Silver Peak appliance fails, the router automatically becomes the default gateway.

•	The remote location is configured In-Line.

Network Diagram

Out-of-Path Deployment: Silver Peak Appliance peered with an L3 router using Virtual Router Redundancy Protocol (VRRP)

In this example, the Silver Peak appliance optimizes traffic to/from 10.110.31.0/24 and 10.110.11.0/24.

Summary

Appliance Placement	Appliance shares LAN segment with existing equipment • Appliance wan0 interface connects to Ethernet LAN switch • Do not connect lan0 interface
Failure Method	Fails-Open: • The appliance behaves as an unconnected port in all failure cases (hardware, software, power) • WAN router assumes Virtual IP Address and forwards traffic normally
IP Addresses	This deployment model requires three IP addresses: • Silver Peak Appliance data path IP address (to originate and terminate tunnel) • Silver Peak Management IP Address (for appliance configuration and management) • Virtual IP Address (VIP) shared by Silver Peak appliance and the WAN router   The VIP must be the default gateway for the clients and servers on the LAN subnet. NOTE: Typically, this would be the current default gateway, to avoid client reconfigurations. • The Silver Peak appliance must share the default gateway VIP with WAN router using VRRP. • The Silver Peak appliance must be configured with higher priority and preemption to ensure VRRP reverts to the appliance.

Fail-Safe Behavior

Fail-safe behavior should always be tested before production deployment by ensuring that traffic continues to flow in each of the following cases:

1	With the appliance in bypass state

2	With the appliance powered off

3	With the tunnels administratively down.

Summary of Initial Configuration Tasks

	Task	Notes	For detailed instructions, see...
1	Gather all the IP addresses needed for setup	Saves time and avoids mistakes.	“Collecting the Necessary Information”.
2	Install the appliance into the network	Physical appliance: Connect the Site A appliance to the Site A router, and insert the Site B appliance between its WAN edge router and the Ethernet switch. Verify connectivity, connect power, and verify LEDs. Virtual appliance: Configure the hypervisor, with the required interfaces.	Silver Peak Appliance Manager Operator’s Guide Quick Start Guides
3	Configure the appliance	In a browser, access and use the Initial Configuration Wizard to configure each appliance — one in Bridge mode, the other in Router mode. Reboot each appliance after finishing the configuration.	“Using the Initial Config Wizard”.
4	Verify appliance connectivity	Tests data path connectivity. Do NOT proceed until you verify connectivity.	“Verifying Appliance Connectivity”.
5	Enable subnet sharing	This prepares each appliance to share local subnets.	“Enabling Subnet Sharing”.
6	Create a tunnel on each appliance	Specify the local and remote endpoints for the tunnel. Afterwards, verify that the tunnels are up and the subnet table has updated.	“Creating Tunnels”.
7	Configure Site A’s router	Access the router’s command line interface, and configure the router for policy-based routing.	“Configuring VRRP on a Cisco Router”.
8	Configure VRRP on Site A’s appliance	Use two of the Configuration pages: Deployment and VRRP	“Configuring VRRP on Silver Peak A1”
9	Test the connectivity from both ends	Verify that the tunnel is up and that flows are being optimized.	“Verifying Traffic”.

Collecting the Necessary Information

The example makes the following assumptions:

n	You’re not using DHCP.

n	Speed and duplex for all interfaces are left at the default, auto-negotiation.

n	Although it isn’t a requirement, it’s considered a best practice to use different subnets for mgmt0 and the Appliance IP.

Out-of-Path Deployment: Silver Peak Appliance peered with an L3 router using Virtual Router Redundancy Protocol (VRRP)

Hostname	A1	B
Mode	Out-of-Path (Router)	In-line (Bridge)
Admin Password: Old	admin	admin
Admin Password: New / Confirm
Time Zone
NTP Server IP Address
License (for virtual appliance only)
mgmt0 IP Address / Mask1	192.168.1.7/24	192.168.1.9/24
mgmt0 Next-hop IP Address	192.168.1.1	192.168.1.1
Appliance data path IP Address / Mask	10.110.31.100/24	10.110.11.100/24
Appliance data path Next-hop IP	10.110.31.2/24	10.110.11.1/24
LAN Next-hop IP Address (optional) 2	not applicable	---
VRRP Group ID	1	---
VRRP Virtual IP Address (VIP)	10.110.31.1	not applicable
VRRP Priority	130	not applicable

---

1

In this example, all mgmt0 IP addresses are in the same subnet. In your actual network, it’s likely that mgmt0 IP addresses are in different subnets.

2

LAN next-hop IP is only required when there are subnets for which the Silver Peak appliance does not have a configured IP address.

Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.