Steelhead® Appliance Installation and Configuration Guide

March 28, 2018 | Author: amendes_life | Category: Transmission Control Protocol, Computer Network, Command Line Interface, Antivirus Software, Port (Computer Networking)
Share
Report this link


Comments



Description

Steelhead® Appliance Installation and Configuration GuideSteelhead® EX (Series xx60) Version 1.0.0 June 2012 © 2012 Riverbed Technology. All rights reserved. Riverbed®, Cloud Steelhead®, Granite™, Interceptor®, RiOS®, Steelhead®, Think Fast®, Virtual Steelhead®, Whitewater®, Mazu®, Cascade®, Cascade Pilot™, Shark®, AirPcap®, SkipWare®, TurboCap®, WinPcap®, Wireshark®, and Stingray™ are trademarks or registered trademarks of Riverbed Technology, Inc. in the United States and other countries. Riverbed and any Riverbed product or service name or logo used herein are trademarks of Riverbed Technology. All other trademarks used herein belong to their respective owners. The trademarks and logos displayed herein cannot be used without the prior written consent of Riverbed Technology or their respective owners. Akamai® and the Akamai wave logo are registered trademarks of Akamai Technologies, Inc. SureRoute is a service mark of Akamai. Apple and Mac are registered trademarks of Apple, Incorporated in the United States and in other countries. Cisco is a registered trademark of Cisco Systems, Inc. and its affiliates in the United States and in other countries. EMC, Symmetrix, and SRDF are registered trademarks of EMC Corporation and its affiliates in the United States and in other countries. IBM, iSeries, and AS/400 are registered trademarks of IBM Corporation and its affiliates in the United States and in other countries. Linux is a trademark of Linus Torvalds in the United States and in other countries. Microsoft, Windows, Vista, Outlook, and Internet Explorer are trademarks or registered trademarks of Microsoft Corporation in the United States and in other countries. Oracle and JInitiator are trademarks or registered trademarks of Oracle Corporation in the United States and in other countries. UNIX is a registered trademark in the United States and in other countries, exclusively licensed through X/Open Company, Ltd. VMware, ESX, ESXi are trademarks or registered trademarks of VMware, Incorporated in the United States and in other countries. This product includes software developed by the University of California, Berkeley (and its contributors), EMC, and Comtech AHA Corporation. This product is derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm. NetApp Manageability Software Development Kit (NM SDK), including any third-party software available for review with such SDK which can be found at http://communities.netapp.com/docs/DOC-3777, and are included in a NOTICES file included within the downloaded files. For a list of open source software (including libraries) used in the development of this software along with associated copyright and license agreements, see the Riverbed Support site at https//support.riverbed.com. You must log in to Riverbed Support to view this information. This documentation is furnished “AS IS” and is subject to change without notice and should not be construed as a commitment by Riverbed Technology. This documentation may not be copied, modified or distributed without the express authorization of Riverbed Technology and may be used only in connection with Riverbed products and services. Use, duplication, reproduction, release, modification, disclosure or transfer of this documentation is restricted in accordance with the Federal Acquisition Regulations as applied to civilian agencies and the Defense Federal Acquisition Regulation Supplement as applied to military agencies. This documentation qualifies as “commercial computer software documentation” and any use by the government shall be governed solely by these terms. All other use is prohibited. Riverbed Technology assumes no responsibility or liability for any errors or inaccuracies that may appear in this documentation. Riverbed Technology 199 Fremont Street San Francisco, CA 94105 Phone: 415.247.8800 Fax: 415.247.8801 Web: http://www.riverbed.com Part Number 712-00110-01 Contents Preface......................................................................................................................................................... 1 About This Guide ..........................................................................................................................................1 Audience ..................................................................................................................................................1 Document Conventions .........................................................................................................................2 Product Dependencies and Compatibility .................................................................................................2 Hardware and Software Dependencies...............................................................................................3 CMC Compatibility ................................................................................................................................3 Virtual Services Platform (VSP) Support ............................................................................................3 Firewall Requirements ...........................................................................................................................3 Ethernet Network Compatibility .........................................................................................................4 SNMP-Based Management Compatibility..........................................................................................4 Antivirus Compatibility ........................................................................................................................5 Additional Resources ....................................................................................................................................5 Release Notes ..........................................................................................................................................5 Riverbed Documentation and the Support Knowledge Base ..........................................................6 Safety Guidelines ...........................................................................................................................................6 Contacting Riverbed......................................................................................................................................6 Internet .....................................................................................................................................................6 Technical Support ...................................................................................................................................6 Professional Services ..............................................................................................................................6 Documentation........................................................................................................................................7 Chapter 1 - Overview of the Steelhead EX ............................................................................................... 9 WAN Optimization........................................................................................................................................9 Auto-Discovery Process.......................................................................................................................11 Configuring Optimization...................................................................................................................11 Fail-to-Wire (Bypass) Mode.................................................................................................................12 Fail-to-Block (Disconnect) Mode ........................................................................................................13 Virtual Services Platform (VSP) .................................................................................................................13 VSP Packages ........................................................................................................................................14 Virtual Network Interfaces (VNIs).....................................................................................................14 Granite Branch Storage ...............................................................................................................................15 Steelhead Appliance Installation and Configuration Guide iii ...................................................Troubleshooting............................................................................................................................................................................................................................................................................................................................................37 Verifying Your Connections ..................................................................................................................................................................................................................................................................................30 Bypass Card Interface Naming Conventions ..............................................23 Chapter 3 .............45 Configuring the Client-Side Appliance...................................................Installing and Configuring the Steelhead Appliance.......................19 Automatic Licensing ................................Contents How Granite Works.......................................................................................................................48 Solutions...........................................................48 Example.........................................................................................................................................................20 Retrieving Licenses Using the Riverbed Licensing Portal ........................................................................................................................................................................................................................................................................................................29 Steelhead Appliance Ports.......................................................................................................15 System Architecture ....................................................................................................................................................42 Before You Begin...........................................................................................................................49 In-Path Steelhead Appliances Connection.............................................................................................................................................................................................................................................................................................................................................25 Choosing a Network Deployment ................................................................................................17 Chapter 2 ......................Managing Riverbed Licenses ............................42 Connecting the Steelhead Appliance to Your Network ...........................................40 Verifying Your Configuration ...........................................................................................47 Solution ..................................................................................33 Avoiding Duplex Mismatch ..........................................................................................................................................................................................................................................................33 Configuration Wizard ............................................................................................................................................................................................................................................................................................................................................................................................................................................48 Possible Cause...............................................................................................41 Configuring Out-of-Path Steelhead Appliances .......................48 Duplex Mismatch....................32 Configuring In-Path Steelhead Appliances ......28 Completing the Configuration Checklist ..................................................................................................45 Chapter 4 ........................................30 Powering On the Steelhead Appliance......38 Connecting to the Management Console ......................49 Oplock Issues....................................................................................................................................................................................49 Solutions.............47 Cables ...............................19 Riverbed Licensing Methods .....................................................................................................................49 Possible Cause...................................................................................................................................................................16 Granite-Dedicated Target Mode ..........................21 Installing Your License Keys .....................................................................27 Preparing Your Site for Installation................................................33 Connecting the Steelhead Appliance to Your Network ........................................................................49 iv Steelhead Appliance Installation and Configuration Guide ...................................25 Checking Your Inventory............................31 Connecting to the Steelhead Appliance ...................................................................... ....................................................................................................................................55 Auto-Discovery Failure...............57 Specific Problems .................................................................................................................54 Solutions.........................................................................................................................56 Protocol Optimization Errors.......69 EX560 with Granite Technical Specifications.............................................................................................................................................................................................................................70 EX1160 and EX1260 Technical Specifications.....................................................................................................................................................................57 Server-Side Out-of-Path Connection Caveats...............................................................................................................................56 Solutions.62 1U EX560 and EX760 Status Lights and Ports ..........................................62 VSP and Granite Storage Specifications ..............................................................................................................................................................................................................50 Example................................................................................................70 Steelhead Appliance Installation and Configuration Guide v ..........69 Power Requirements and Consumption........................................................54 Packet Ricochet—Internet Control Messaging Protocol (ICMP) Redirects.......................................................................................................54 Possible Causes ..............................................................................................61 VSP and Granite Memory and Storage Specifications ..............................................68 EX560 and EX760 Technical Specifications ................................................................................................................................................................................................................50 CIFS Overlapping Open Optimization Denies Multi-User Access ........................................................................................................................................................................................................................56 Possible Causes ...............................................................................................................................................................53 Packet Ricochet......................................................................................................................................................................................................................................................................................................66 System LEDs...........................................................................................................................................54 Solutions............................................64 1U EX1160 Status Lights and Ports .........................................................................................................50 Solutions..........Series EX xx60 Technical Specifications .........................................................54 Simplified Routing.............................62 VSP Memory Specifications ..............................................................................................58 Network Integration Checklist .......................................................................................................................53 Possible Cause......................................................................................................51 Solution .........................66 2U EX1260 Status Lights and Ports .............63 System LEDs............................................................................................51 IP Address Configuration..........................................................................................................52 Asymmetric Routing ................56 Solutions......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................57 Resetting a Lost Password.........................................................................................................................................53 Solutions.............................................................................................53 Possible Cause.........................67 System LEDs..................................................................................................................................................................52 Solutions...................................................................................................Contents Possible Causes ...............................................................................................................................................................................59 Appendix A ......................... ...........71 EX1160 and EX1260 Power Requirements and Consumption ........................................................................73 vi Steelhead Appliance Installation and Configuration Guide ..........................72 Environmental Specifications .............................Contents EX1160 and EX1260 with Granite Technical Specifications ................................................................................................................72 Index .................................71 CPU Specifications............................................................................................................................................................................................................................................................ Preface Welcome to the Steelhead Appliance Installation and Configuration Guide for Steelhead EX appliances. FTP. CIFS. About This Guide The Steelhead Appliance Installation and Configuration Guide describes how to install and configure the Steelhead EX appliance (Steelhead appliance). Audience This guide is written for storage and network administrators familiar with administering and managing WANs using common network protocols such as TCP. Steelhead Appliance Installation and Configuration Guide 1 . Read this preface for an overview of the information provided in this guide and for an understanding of the documentation conventions used throughout. HTTP. and NFS. describe command syntax. new terms and emphasized words appear in italic typeface. Convention italics boldface Courier Meaning Within text. CLI commands and GUI controls appear in bold typeface. Within text. and so forth. illustrate screen displays.” next “CMC Compatibility” on page 3 “Virtual Services Platform (VSP) Support” on page 3 “Ethernet Network Compatibility” on page 4 “SNMP-Based Management Compatibility” on page 4 “Antivirus Compatibility” on page 5 2 Steelhead Appliance Installation and Configuration Guide . It includes the following information:       “Hardware and Software Dependencies. Code examples appear in Courier font: amnesiac > enable amnesiac # configure terminal <> Values that you specify appear in angle brackets: interface <ipaddress> [] Optional keywords or variables appear in brackets: ntp peer <addr> [version <number>] {} Required keywords or variables appear in braces: {delete <filename> | upload <filename>} | The pipe symbol represents a choice between the keyword or variable to the left or right of the symbol (the keyword or variable can be either optional or required): {delete <filename> | upload <filename>} Product Dependencies and Compatibility This section provides information about product dependencies and compatibility.Preface Product Dependencies and Compatibility Document Conventions This manual uses the following standard set of typographical conventions to introduce new terms. 0. VSP is supported only on the EX Series xx60 hardware platforms.0.1 v7. Make sure your firewall does not strip TCP options.3 v7.Product Dependencies and Compatibility Preface Hardware and Software Dependencies The following table summarizes the hardware and software requirements for the Steelhead appliance.5.0. CMC Compatibility The Steelhead appliance has been tested with the following Central Management Console (CMC) version.3 VMware Server 2. Steelhead Appliance Installation and Configuration Guide 3 .0. Riverbed Component Steelhead EX appliance Hardware and Software Requirements 19-inch (483 mm) four-post rack. The Management Console has been tested with Mozilla Firefox version v3.0.0.3 Recommended CMC Version v6. and Microsoft Internet Explorer version v6. ports 7950-7954 must be open. Firewall Requirements Riverbed recommends that you deploy the Steelhead appliance behind your firewall.x or later Note: JavaScript and cookies must be enabled in your Web browser.x or later. Steelhead RiOS Version v7.5.x and v7.1 CMC v6.0 Virtual Services Platform (VSP) Support In RiOS v7.2 Steelhead Management Console Any computer that supports a Web browser with a color image display.1 and later. RiOS v7. The following firewall settings are required for the Steelhead appliance:    Ports 7800 and 7810 must be open. If you have the Granite option enabled. 10/100/1000 Base-T. 2578. and 1215) and SNMP v2c (RFCs 1901.10/100/1000 Base-TX or 1000 Base-SX or 1000 Base-LX or 10GBase-LR or 10GBase-SR.Preface Product Dependencies and Compatibility Ethernet Network Compatibility The Steelhead appliance supports the following Ethernet networking standards:    Ethernet Logical Link Control (LLC) (IEEE 802. auto-negotiating LAN .2008).3 . auto-negotiating Auxiliary . 1212.3 2008)  The Steelhead appliance ports support the following connection types and speeds:    Primary .2008). SNMP support allows the Steelhead appliance to be integrated into network management systems such as Hewlett Packard OpenView Network Node Manager. 2580. and other SNMP-based network management tools.10/100/1000 Base-T.1998) Fast Ethernet 100 Base-TX (IEEE 802. The Steelhead appliance with a Gigabit Ethernet card supports jumbo frames on in-path and primary ports. All copper interfaces are auto-sensing for speed and duplex (IEEE 802. even though some MIB items can only be accessible through SNMPv2. 3417.2008). SNMP-Based Management Compatibility The Steelhead appliance supports a proprietary Riverbed MIB accessible through SNMP. 2579.3 .3 . BMC Patrol.2008) 10 Gigabit Ethernet over Fiber 10GBase-LR Single Mode and 10GBase-SR Multimode (IEEE 802. The Steelhead appliance auto-negotiates speed and duplex mode for all data rates and supports full duplex mode and flow control (IEEE 802. 4 Steelhead Appliance Installation and Configuration Guide .2008) Gigabit Ethernet over Copper 1000 Base-T and Fiber 1000 Base-SX (LC connector) and Fiber 1000 Base LX (IEEE 802. depending on configuration  The Steelhead appliance supports VLAN Tagging (IEEE 802. It does not support the ISL protocol. depending on configuration WAN .3 . and 3418) are supported. SNMP v1 (RFCs 1155.10/100/1000 Base-TX or 1000 Base-SX or 1000 Base-LX or 10GBase-LR or 10GBase-SR. 1157.2 .3 . 3416. 1. and workarounds.” next “Riverbed Documentation and the Support Knowledge Base” on page 6 Release Notes The following online file supplements the information in this manual. It contains important information about this release of the Steelhead appliance.0 Enterprise on the server Network Associates (McAfee) VirusScan v7. Examine this file before you begin the installation and configuration process.5 on the server Network Associates VirusScan v4.5 on the server Network Associates (McAfee) NetShield v4.1.riverbed.Additional Resources Preface Antivirus Compatibility The Steelhead appliance has been tested on clients and file servers generating CIFS traffic with the following antivirus software with no impact on performance:     Network Associates (McAfee) VirusScan v7.5 for multiple platforms on the client Symantec (Norton) AntiVirus Corporate Edition v8. It is available on the Riverbed Support site at https://support.0. pdf Purpose Describes the product release and identifies fixed problems. known problems. It contains the following sections:   “Release Notes. This file also provides documentation information not covered in the manuals or that has been modified since publication.0 Enterprise on the client Symantec (Norton) AntiVirus Corporate Edition v8.1 on the client Additional Resources This section describes resources that supplement the information in this guide.0 Enterprise on the server Network Associates (McAfee) VirusScan v7.com. Steelhead Appliance Installation and Configuration Guide 5 . Online File <product>_<version_number><build_number>.1 on the server The Steelhead appliance has been tested on clients and file servers generating CIFS traffic with the following antivirus software with moderate impact on performance:      F-Secure Anti-Virus v5.43 on the client F-Secure Anti-Virus v5. network redesign. consult the Safety and Compliance Guide. consolidation project design. Contacting Riverbed This section describes how to contact departments within Riverbed.Preface Safety Guidelines Riverbed Documentation and the Support Knowledge Base For a complete list and the most current version of Riverbed documentation. Internet You can learn about Riverbed products through our Web site at http://www. 6 Steelhead Appliance Installation and Configuration Guide . The Riverbed Knowledge Base is a database of known issues. To access the Riverbed Knowledge Base. operate. how-to documents. and custom coded solutions. You can also go to https://support.com.riverbed. using.com or go to http://www. Mishandling of the equipment voids all warranties. system requirements. open a trouble ticket by calling 1-888RVBD-TAC (1-888-782-3822) in the United States and Canada or +1 415 247 7381 outside the United States. Many countries require the safety information to be presented in their national languages. contact Riverbed Support or your channel partner who provides support. custom designs. you must be familiar with the safety information. and common error messages. provisioning. Safety Guidelines Follow the safety precautions outlined in the Safety and Compliance Guide when installing and setting up your equipment.com.riverbed. Professional Services Riverbed has a staff of professionals who can help you with installation.com. log in to the Riverbed Support site at https://support.com.com. Technical Support If you have problems installing. To contact Riverbed Support. Read and follow safety guidelines and installation instructions carefully. If this requirement applies to your country. log in to the Riverbed Support site at https://support.riverbed. To contact Riverbed Professional Services. You can browse titles or search for keywords and strings. or replacing Riverbed products. Important: Failure to follow these safety guidelines can result in injury or damage to the equipment.riverbed.riverbed. Before you install. project management. or service the Riverbed products. email proserve@riverbed. Refer to the Safety and Compliance Guide if you do not clearly understand the safety information provided in this guide. We appreciate any suggestions you may have about our online documentation or printed materials. Steelhead Appliance Installation and Configuration Guide 7 .Contacting Riverbed Preface Documentation We continually strive to improve the quality and usability of our documentation. Send documentation comments to [email protected]. Preface Contacting Riverbed 8 Steelhead Appliance Installation and Configuration Guide . All client requests are passed through to the server normally. and storage consolidation to enable organizations to meet the needs of the active branch office. and chatty application protocols. file semantics. a dedicated platform that runs virtual services and enables consolidation in branch offices. reduce capital expenditures. including:    Insufficient WAN bandwidth Inefficient transport protocols in high-latency environments Inefficient application protocols in high-latency environments The Riverbed Optimization System (RiOS) intercepts client-server connections without interfering with normal client-server interactions. Each EX appliance combines WAN optimization and the Riverbed Virtual Services Platform (VSP). With the Steelhead appliance. virtualization. and improve productivity. the virtual edge of the data center that allows end users in a branch to access and write to centralized storage over the WAN at local speeds. Steelhead appliances let you consolidate and centralize key IT resources to save money.CHAPTER 1 Overview of the Steelhead EX The Steelhead EX series combines WAN optimization. Steelhead EX series can be upgraded to include Granite. It includes the following sections:     “WAN Optimization. you can solve a range of problems affecting WANs and application performance. or protocols. while relevant traffic is optimized to improve performance.” next “Virtual Services Platform (VSP)” on page 13 “Granite Branch Storage” on page 14 “Granite-Dedicated Target Mode” on page 16 WAN Optimization The causes for slow throughput in WANs are well known: high delay (round-trip time or latency). much of it spent to compensate for slow throughput by deploying redundant servers and storage and the required backup equipment. Large enterprises spend a significant part of their information technology budgets on storage and networks. simplify key business processes. This chapter provides an overview of the Steelhead EX. The optimization techniques RiOS utilizes are: Steelhead Appliance Installation and Configuration Guide 9 . limited bandwidth. and automatically generating traces for troubleshooting.Steelhead appliances and Steelhead Mobile can reduce WAN bandwidth utilization by 65% to 98% for TCP-based applications using Data Streamlining.The Mobile Controller is the management appliance that tracks the individual health and performance of each deployed software client. Central Management Console (CMC) . In addition to traditional techniques like data compression. Transport Streamlining uses a set of standards and proprietary techniques to optimize TCP traffic between Steelhead appliances. It also provides a single view of the overall benefit and health of the Steelhead appliance network. The peer RiOS device (a Steelhead appliance or Steelhead Mobile host system) uses this reference to find the original data chunk in its RiOS data store.Management Streamlining refers to the methods that Riverbed has developed to simplify the deployment and management of RiOS devices. Transport Streamlining . and perform support operations such as resetting connections. the reference is sent across the WAN instead of the raw data chunk. RiOS also uses a Riverbed proprietary algorithm called Scalable Data Referencing (SDR). SDR breaks up TCP data streams into unique data chunks that are stored in the hard disk (RiOS data store) of the device running RiOS (a Steelhead appliance or Steelhead Mobile host system). such as TCP selective acknowledgements. and to manage enterprise client licensing. When the same byte sequence is seen again in future transmissions from clients or servers.Auto-discovery enables Steelhead appliances and Steelhead Mobile to automatically find remote Steelhead appliances and to use them to optimize traffic.The CMC enables remote Steelhead appliances to be automatically configured and monitored. specify traffic to be optimized. are used.Steelhead appliances use a generic latency optimization technique called Transport Streamlining. CIFs. pulling logs. RiOS can apply application-specific optimizations for certain application protocols: for example. The autodiscovery process enables administrators to control and secure connections. maximize throughput across a wide range of WAN links. MAPI. view their data reduction statistics. You can perform all these management tasks without end user input. and specify peers for optimization.  – – 10 Steelhead Appliance Installation and Configuration Guide .In addition to Data and Transport Streamlining optimizations. and reconstruct the original TCP data stream. Management Streamlining . negotiate optimal TCP window sizes to minimize the impact of latency on throughput.   Application Streamlining . The Mobile Controller enables you to see who is connected. These techniques: – – – ensure that efficient retransmission methods. Oracle Forms.Overview of the Steelhead EX WAN Optimization  Data Streamlining . NFS. These methods include: – Auto-Discovery Process . TDS. HTTP. Each data chunk is assigned a unique integer label (reference) before it is sent to a peer RiOS device across the WAN. Auto-discovery relieves the burden of manually configuring large amounts of network information. Steelhead Mobile Controller . Auto-discovery relieves you of having to manually configure the Steelhead appliances with large amounts of network information: for example.Allow the SYN packet to pass through the Steelhead appliance. There are two types of auto-discoveries. the Steelhead appliance is deployed on a LAN. original and enhanced. Fixed-Target . Because optimization between Steelhead appliances typically takes place over a secure WAN. Fixed-target rules require the input of at least one remote target Steelhead appliance. No optimization is performed on the TCP connection initiated by this SYN packet. Because connections are usually initiated by clients. the original auto-discovery protocol automatically discovers the first Steelhead appliance in the path. it is not necessary to configure company firewalls to support specific ports for a Steelhead appliance . specify which traffic is optimized.Skip the auto-discovery process and use a specified remote Steelhead appliance as an optimization peer. an optional backup Steelhead appliance might also be specified. with communication between appliances taking place over a private WAN or VPN. multiple in-path rules. Typical In-Path Deployment For detailed information about how the Steelhead appliance works and deployment design principles. You configure one of the following types of in-path rule actions: – – – Auto . The difference is only seen in environments where there are three or more Steelhead appliances in the network path for connections to be optimized. You configure what traffic a Steelhead appliance optimizes and specify the type of action it performs using:  In-Path rules . and specify how remote peers are selected for optimization. Steelhead Appliance Installation and Configuration Guide 11 . Enhanced auto-discovery works with Steelhead appliances running the original auto-discovery protocol. Figure 1-1. The autodiscovery process enables you to control and secure connections. usually by a client. Auto-Discovery Process Auto-discovery enables Steelhead appliances to automatically find remote Steelhead appliances and to optimize traffic to them. in-path rules are configured for the initiating. or client-side Steelhead appliance.Use the auto-discovery process to determine if a remote Steelhead appliance is able to optimize the connection attempting to be created by this SYN packet. Configuring Optimization You configure optimization of traffic using the Management Console or the Riverbed CLI.WAN Optimization Overview of the Steelhead EX Typically. In-path rules are used only when a connection is initiated. see the Steelhead Appliance Deployment Guide. Pass-through . Enhanced auto-discovery automatically discovers the last Steelhead appliance in the network path of the TCP connection.In-path rules determine the action a Steelhead appliance takes when a connection is initiated. In contrast. this has the same effect as the Accept peering rule action. Generally. source or destination subnet. enable the kickoff feature. Traffic that was optimized might be interrupted. see the Steelhead Management Console User’s Guide. you are notified in the following ways:  The Intercept/Bypass status light on the bypass card is triggered. When connections are restored. If enhanced auto-discovery is enabled.Overview of the Steelhead EX WAN Optimization – –  Deny . see the Riverbed Command-Line Interface Reference Manual. Email notifications are sent (if you have set this option). depending on the behavior of the application-layer protocols.Drop the SYN packet and send a message back to its source. When the Steelhead appliance is in bypass mode the traffic passes through uninterrupted. When the ping succeeds. if the server-side Steelhead appliance fails. Accept . IP address.The receiving Steelhead appliance does not respond to the probing Steelhead appliance. a ping channel is set up from the client-side Steelhead appliance to the server-side Steelhead appliance. the first connection from the client fails. For detailed information about enabling the kickoff feature. see the appendix. 12 Steelhead Appliance Installation and Configuration Guide .     When the fault is corrected. new connections receive optimization. The Home page of the Management Console displays Critical in the Status bar. Discard . see the Steelhead Management Console User’s Guide. processing is restored and subsequent connections are intercepted and optimized. – For detailed information about in-path and peering rules and how to configure them. however. the peer Steelhead appliance) for the optimized connection. or TCP port.Peering rules determine how a Steelhead appliance reacts when it sees a probe query. After detecting that the Steelhead appliance is not functioning. Peering rules are an ordered list of fields a Steelhead appliance uses to match with incoming SYN packet fields: for example. connections are short-lived and kickoff is not necessary. This is especially useful in complex networks.The receiving Steelhead appliance responds to the probing Steelhead appliance and becomes the remote-side Steelhead appliance (that is. SNMP traps are sent (if you have set this option). Peering rules . the Steelhead appliance only becomes the optimization peer if it is the last Steelhead appliance in the path to the server. even though without optimization. Auto . In the event of a failure or loss of power. For detailed information about bypass card status lights. VLAN. If the Steelhead appliance is in bypass mode. For detailed information about the ping command. To force all connections to be optimized. the Steelhead appliance goes into bypass mode and the traffic passes through uninterrupted. In an out-of-path deployment. Subsequent connections are passed through unoptimized. and allows the SYN+ probe packet to continue through the network. connections made during the fault do not. as well as the IP address of the probing Steelhead appliance. they succeed. The event is logged to system logs (syslog).If the receiving Steelhead appliance is not using enhanced auto-discovery. Fail-to-Wire (Bypass) Mode All Steelhead appliance models and in-path network interface cards support a fail-to-wire mode.Drop the SYN packet silently. There are the following types of peering rule actions: – – Pass . and an additional Steelhead appliance on another path to the WAN to achieve redundancy. DNS and DHCP management software.In VSP. VSP supports running up to five different virtual services on a single Steelhead EX appliance. and print services. Services include in-band packages that sit in-line with optimization such as the Universal Threat Management (UTM) security services.2 as the virtualization platform. Steelhead Appliance Installation and Configuration Guide 13 . In the event of a failure. see the Steelhead Appliance Deployment Guide. the LAN and WAN interfaces power down and from a connected router or switch perspective those devices do not detect a link. You set fail-to-block mode in the Steelhead appliance CLI. Steelhead EX supports fail-to-block mode on all cards. However. any virtual machine can be packaged and run as a service in VSP. This section briefly describes the following:   “VSP Packages. proxy solutions such as video or network monitoring services.0. packaged virtual machines are installed in slots and run simultaneously as services directly from the Steelhead EX appliance. see the Riverbed Command-Line Interface Reference Manual. thus traffic continues to be optimized on the backup path if there is a failure on the active path. This feature is useful only if the network has a routing or switching infrastructure that can automatically divert traffic off the link to the optimized backup path. and the backup path is configured to use fail-to-bypass.Virtual Services Platform (VSP) Overview of the Steelhead EX Fail-to-Block (Disconnect) Mode With fail-to-block mode enabled in a redundant network path environment. In an active-backup redundant network setup. For more information. The following events trigger fail-to-block if the feature is enabled:    Kernel crash Hardware failure Power loss Note: You can use this with connection-forwarding. the allow-failure CLI command.” next “Virtual Network Interfaces (VNIs)” on page 14 For details on configuring and using VSP. VSP is included in the native Steelhead EX appliance functionality and does not require a separate license. and improved support for out-of-band packages like Windows Active Directory. you can upload and store as many packages in a library as you want. In general. VSP uses VMware Server 2. the only limitation is the disk space on the VSP partition. the active path is configured to use fail-to-block. traffic is blocked and rerouted to an optimized backup path in the event of a failure. see the Steelhead Management Console User’s Guide for the Steelhead EX. Virtual Services Platform (VSP) VSP is a VMware-based virtualization platform that provides the benefits of the most commonly deployed and advanced virtualization tool set. For detailed information. 0. and detach virtual disks. see the Steelhead Management Console User’s Guide for the Steelhead EX. memory footprint. Virtual Network Interfaces (VNIs) VSP packages communicate with the network through virtual network interfaces (VNIs). Connected to the physical network interfaces on the Steelhead appliance. primary. Each package can have up to ten VNIs. and such). VNIs are the connection points for the LAN.   Users can configure installed services as follows:      Enable. A package can be:  a VM created by a third-party vendor that also contains configuration files specific to the Riverbed RSP implementation. Manage ping or heartbeat watchdog settings. This eliminates the need for dedicated storage. Granite does the following:  Provides LAN performance for block-level access at the branch office while consolidating storage at the data center. Note: VSP supports any packages that ran on the Riverbed Services Platform (RSP). disable. which was available in RiOS versions before v7. 14 Steelhead Appliance Installation and Configuration Guide . including private clouds. attach. a VM created by Riverbed.Overview of the Steelhead EX Granite Branch Storage VSP Packages To run on VSP. and auxiliary interfaces of the Steelhead appliance. VNIs are network taps that enable data flow in and out of the VSP packages. which provide the basis for controlling the flow of data through packages in a multiple-package scenario.2. Manage VM settings (priority. You can create packages using the Package Creator wizard.0. Granite Branch Storage Granite is a dual-ended system that enables complete consolidation of storage at the data center. Create. or restart. Uninstall services from slots. For details. virtual machines are packaged as VSP services and uploaded to the Steelhead EX appliance and either stored in the library or installed in one of five slots. Note: Granite functionality in Steelhead EX requires RiOS 7. a VM created internally within your organization. at the branch office. including management and related backup resources. by providing LAN performance for block-level access. WAN. Configured policies identify the set of blocks that are likely to be requested at a given edge site in advance. Blocks are communicated between Granite-enabled Steelhead EX appliances and Granite Core and the data center LUN via an internal protocol. Policy-based prefetch .      In brief. The Granite-enabled Steelhead EX appliance also connects to the blockstore. acknowledged to the edge server. (Optionally. the blockstore is authoritative for both reads and writes.” it is subject to standard WAN latency.Blocks are added to the blockstore when first requested. costly data replication. they are requested from the data center LUN (logical unit number). by consolidating all storage at the data center and creating “diskless branches. If they are not present. The edge server connects to the Granite-enabled Steelhead EX appliance. and can tolerate WAN outages without worrying about cache coherency. When the edge server requests blocks. and requests those blocks from the data center LUN in advance. and the risk of data loss at the branch office. and then asynchronously propagated to the data center. Because each Granite-enabled Steelhead EX appliance implementation is linked to a dedicated LUN at the data center. Provides “infinite storage” for branch services including virtualized branch services. applies heuristics based on these observations to intelligently predict the blocks most likely to be requested in the near future.” Granite eliminates data sprawl. How Granite Works Granite enables edge server systems efficient access to storage arrays over the WAN. Steelhead Appliance Installation and Configuration Guide 15 . Eliminates need for storage management and backup resources at the branch office. this traffic can be further optimized by Steelheads for improved performance.Granite Branch Storage Overview of the Steelhead EX  Improves performance for custom applications by eliminating the need for custom protocol optimization.) Granite initially populates the blockstore in several ways:  Reactive prefetch . which implements handlers for the iSCSI protocol. Allows extension of data-center deployed iSCSI SAN to all branch locations. Because the first request is “cold. Simplifies disaster recovery strategy. For more information about Granite. First request . Granite is a dualended system with Granite Core at the data center and a Granite-enabled Steelhead EX appliance at the edge. Similarly. see the Granite documentation including the Granite Core Installation and Configuration Guide.   System Architecture At the data center. a persistent local cache of storage blocks. and requests those blocks from the data center LUN in advance. Granite Core connects dedicated LUNs with each Granite-enabled Steelhead EX appliance at the edge or branch office. those blocks are served locally from the blockstore.The system observes block requests. newly written blocks are spooled to the local cache. Granite Core integrates with existing storage systems and Riverbed implementations. Extends data-center class thin-provisioned storage to the branch office. and such. Blockstore . as well as all the associated maintenance. As a result.The branch-side server that accesses data from the Granite system instead of a local storage device. LUNs . service resources. Granite Core manages block transfers between the LUN and the Granite-enabled Steelhead EX appliance. Figure 1-2. the blockstore on the branch side synchs with LUN1 at the data center. Granite-enabled Steelhead EX appliance . Data Center Steelhead .   iSCSI Initiator .The blockstore is a persistent local cache of storage blocks. Granite Core . hardware.Each Granite-enabled Steelhead EX appliance requires a dedicated LUN in the data center storage configuration. Generic Granite Deployment The basic system components are:  Microsoft Windows Edge Server . 16 Steelhead Appliance Installation and Configuration Guide .The data center-side Steelhead peer for general optimization.The branch-side component of the Granite system links the edge server to the blockstore and links the blockstore to the iSCSI target and LUN at the data center.The iSCSI initiator is the branch-side client that sends SCSI commands to the iSCSI target at the data center.The data center-side server that communicates with the branch-side iSCSI initiator. Because each Granite-enabled Steelhead EX appliance is linked to a dedicated LUN at the data center. tools.The data center component of the Granite system. the blockstore eliminates the need for separate block storage facilities at the branch office. Appliances in Granite-dedicated target mode are intended to be used in conjunction with existing Steelhead deployments. iSCSI Target . The Steelhead provides general optimization services.      Granite-Dedicated Target Mode Granite-dedicated target mode refers to a Granite-enabled Steelhead EX appliance that provides neither WAN optimization nor VSP functionality. thereby enabling customers to take advantage of Granite functionality without upgrading their existing Steelhead appliances.Overview of the Steelhead EX Granite-Dedicated Target Mode Each Granite-enabled Steelhead EX appliance contains a blockstore that mirrors the datastore LUN. backup services. In the above diagram. The following diagram illustrates a generic deployment. the blockstore is generally authoritative for both reads and writes. Virtual Whitewater.You can have all your Riverbed licenses installed at the factory for a small fee. Riverbed employs the following licensing methods:  Automatic Licensing . see “Connecting to the Steelhead Appliance” on page 32.riverbed.” next “Automatic Licensing” on page 20 “Retrieving Licenses Using the Riverbed Licensing Portal” on page 21 Riverbed Licensing Methods A license is a string issued by Riverbed that embeds information that ties the license to data to prevent tampering. and HP ProCurve.CHAPTER 2 Managing Riverbed Licenses This chapter describes the Riverbed licensing methods and how to manage Riverbed licenses. For detailed information.com/index.You can fetch and activate licenses for Riverbed products using the Riverbed Licensing Portal. Token Method . such as the Virtual Steelhead Mobile. Simply go to https://licensing. After you install the license. It includes the following sections:    “Riverbed Licensing Methods. Manual Licensing .    Steelhead Appliance Installation and Configuration Guide 19 .htm and follow the instructions to retrieve license keys. Factory Licensing .Once you connect your Steelhead appliance to the network. the system saves it in the configuration database and enables the functionality associated with the license.You use tokens to activate Riverbed software. For detailed information. the Steelhead appliance automatically contacts the Riverbed Licensing Portal which downloads and installs the licenses. see the respective installation guides for these products. Virtual Steelhead. Note: Only administrator users can fetch and install licenses. choose Configure > Maintenance > Licenses to display the Licenses page. the Steelhead appliance automatically contacts the Riverbed License Portal and downloads the new licenses. Tip: If automatic licensing fails an error message appears in the Management Console. The Management Console Licensing page displays a success message or the Alarm Status page reports an actionable error message. 2. The Steelhead appliance automatically contacts the Riverbed Licensing Portal which downloads and installs the licenses. For detailed information on administrator and monitor users. Click Fetch Updates Now. see the Steelhead Management Console User’s Guide. you can retrieve licenses at the Riverbed Licensing Portal using the email option or by downloading and XML file to the Riverbed Central Management Console. see “Retrieving Licenses Using the Riverbed Licensing Portal” on page 21. To fetch a license on demand 1. The Management Console Licensing page displays a success message or the Alarm Status page reports an actionable error message. If you are behind a firewall. to automatically contact the Riverbed Licensing Portal to retrieve and install license keys for the appliance. 20 Steelhead Appliance Installation and Configuration Guide . To replace expired licenses  Purchase new downloadable licenses to replace the expired license.Managing Riverbed Licenses Automatic Licensing Automatic Licensing Automatic licensing allows the Steelhead appliance. In the Management Console. To view licenses on a new Steelhead appliance  Connect the new Steelhead appliance to the network. At the time of the next scheduled automatic license fetch. Go to the Riverbed Licensing Portal and follow the instructions for retrieving your licenses. For detailed information. Automatic licensing simplifies inventory management and provides an automated mechanism of fetching licenses for Riverbed products without having to manually activate individual appliances and licenses. once connected to the network. The Management Console Licensing page displays a success message or the Alarm Status page reports an actionable error message. back. The serial numbers are on barcoded labels located on the front. Riverbed Licensing Portal 3. or side of your appliance. back. Go to the License Activation page in the Riverbed Licensing Portal at https://licensing.riverbed.Retrieving Licenses Using the Riverbed Licensing Portal Managing Riverbed Licenses Retrieving Licenses Using the Riverbed Licensing Portal You can retrieve and manage Riverbed licenses using the Riverbed Licensing Portal. Steelhead Appliance Installation and Configuration Guide 21 . Copy the barcoded Serial Number (SN) and Manufacturing Serial Number (MFG) that is located on the front.htm Figure 2-1. The Riverbed Licensing Portal simplifies license management by providing an automated way to fetch and activate licenses for Riverbed products. To retrieve your licenses using the Riverbed Licensing Portal 1. or side of your appliance. email address. type your name.com/ index. 2. To retrieve your licenses by serial number. and Serial Number (SN) and click Submit to display the Software License Summary page. phone number. Optionally. Optionally. 5. if you are behind a firewall. 6. 22 Steelhead Appliance Installation and Configuration Guide . Tip: Click New Search to search for additional license records.Managing Riverbed Licenses Retrieving Licenses Using the Riverbed Licensing Portal 4. Make sure your serial numbers match the software features. Figure 2-2. click the check box for the software feature you want to activate and click Refresh. type the email address in the Email address text box and click Email Keys to have the license keys emailed to you. For each serial number. The Riverbed Central Management Console can import the XML file. You cannot make changes after you have activated selected licenses. click Download XML to download an XML file. if you are behind a firewall. At the system prompt. or Enter. For details. For details see the Riverbed Command-Line Interface Reference Manual. enter the following commands: license install <the license key you retrieved from Riverbed Licensing Portal> write memory To install a license using the Management Console 1. 2. Steelhead Appliance Installation and Configuration Guide 23 . Separate multiple license keys with a space. make sure to install your license key on the appropriate appliance. Choose Configure > Maintenance > Licenses to display the Licenses Page. 3. see the Steelhead Management Console User’s Guide. 2. copy and paste the license key provided by Riverbed Licensing Portal into the text box. To install a license using the CLI 1. Connect to the Management Console of the appliance. Tab.Retrieving Licenses Using the Riverbed Licensing Portal Managing Riverbed Licenses Installing Your License Keys Each license key is generated for a specific appliance. Connect to the CLI of the appliance and enter configuration mode. In the Licenses Text Box. Managing Riverbed Licenses Retrieving Licenses Using the Riverbed Licensing Portal 24 Steelhead Appliance Installation and Configuration Guide . with communication between appliances taking place over a private WAN or VPN.CHAPTER 3 Installing and Configuring the Steelhead Appliance This chapter describes how to install and configure the Steelhead appliance. Steelhead appliances should be as close as possible to your network end points (clientside Steelhead appliances should be as close to your clients as possible and server-side Steelhead appliances should be as close to your servers as possible). the Steelhead appliance is deployed on a LAN. SYN and SYN/ACK packets with the TCP option 76 must be passed through firewalls for auto-discovery to function properly.” next “Checking Your Inventory” on page 27 “Preparing Your Site for Installation” on page 28 “Completing the Configuration Checklist” on page 29 “Powering On the Steelhead Appliance” on page 31 “Connecting to the Steelhead Appliance” on page 32 “Configuring In-Path Steelhead Appliances” on page 33 “Configuring Out-of-Path Steelhead Appliances” on page 42 Important: Read and follow the safety guidelines described in the Safety and Compliance Guide. Failure to follow these safety guidelines can result in damage to the equipment. Because optimization between Steelhead appliances usually takes place over a secure WAN. Note: If there are one or more firewalls between two Steelhead appliances. you should minimize latency between Steelhead appliances and their respective clients and servers. Choosing a Network Deployment Typically. It includes the following sections:         “Choosing a Network Deployment. it is not necessary to configure company firewalls to support Steelhead-specific ports. ports 7800 and 7810 must be passed through firewall devices located between the pair of Steelhead appliances. Also. Steelhead Appliance Installation and Configuration Guide 25 . For optimal performance. Physical In-Path Deployment  Virtual In-Path . you must select a network deployment:  Physical In-Path . the Steelhead appliance is physically in the direct path between clients and servers. The best and easiest way to achieve this is to deploy the Steelhead appliances where the LAN connects to the WAN. and not where any LAN-to-LAN or WAN-to-WAN traffic can pass through (or be redirected to) the Steelhead appliance. PBR. see the Steelhead Appliance Deployment Guide.Installing and Configuring the Steelhead Appliance Choosing a Network Deployment Ideally. and the most common type of Steelhead appliance deployment. Virtual In-Path: WCCP Deployment 26 Steelhead Appliance Installation and Configuration Guide . Before you begin the installation and configuration process.In a physical in-path deployment. Steelhead appliances optimize only traffic that is initiated or terminated at their local site. even for large sites. For detailed information about your deployment options and best practices for deploying Steelhead appliances. Figure 3-1. or Layer-4 switching) is used to place the Steelhead appliance virtually in the path between clients and servers. Figure 3-2. a redirection mechanism (such as WCCP.In a virtual in-path deployment. In-path designs are the simplest to configure and manage. The clients and servers continue to see client and server Internet Protocol (IP) addresses. it ships with two suitable cables. If a system has two power supplies.riverbed.com for replacement or repair. notify Riverbed Support at https://support. Figure 3-3.     One Phillips screwdriver Rails are preinstalled on the EX Series xx60 platforms.Checking Your Inventory Installing and Configuring the Steelhead Appliance  Out-of-Path . Out-of-Path Deployment Checking Your Inventory Your shipping carton contains the following items:      The Steelhead appliance One standard Ethernet straight-through cable One standard Ethernet crossover cable One serial null-modem cable One or two power cables (depending on your order) Aside from country-specific requirements. the Steelhead appliance acts as a proxy. You must use a rack PDU or power strip that provides the appropriate three-prong outlet (hot/neutral/ground). all systems ship with the same power cable. Steelhead Appliance Installation and Configuration Guide 27 . You cannot connect a Steelhead appliance directly to multiphase outlets. The power cable has a IEC 60320 C13 plug on one end (to connect to the Steelhead appliance) and a countryspecific plug that fits the wall socket for that country.In an out-of-path deployment. You must always connect the Steelhead appliance using either the cable in the accessories box or another cable that is approved for use by the IEC in the country in which the appliance is connected. the server-side Steelhead appliance is not in the direct path between the client and the server. For details. This type of deployment might be suitable for locations where physical in-path or virtual inpath configurations are not possible. see the Knowledge Base solution number S13425. One mounting kit Documentation kit If any items are damaged or missing. In an out-of-path deployment. For details about installing the Steelhead appliance to a rack. There is available space on a two-post or four-post 19-inch rack. make sure that your site meets the following requirements:  It is a standard electronic environment where the ambient temperature does not exceed 40º C (104º F) and the relative humidity does not exceed 80% (noncondensing). Before you install the Steelhead appliance. For detailed information. see the appendix. Note: If your rack requires special mounting screws. 28 Steelhead Appliance Installation and Configuration Guide . The rack is a standard 19-inch Telco-type mounting rack. Note: Riverbed recommends that you use a four-post mounting rack for 2U systems. A clean power source is available. consult the Rack Installation Guide for detailed information about how to install your model to a rack. Ethernet connections are available within the standard Ethernet limit.     Before you begin. dedicated to computer devices and other electronic equipment. see the Rack Installation Guide or the printed instructions that were shipped with the system. with all the equipment parts in place and securely fastened.Installing and Configuring the Steelhead Appliance Preparing Your Site for Installation Preparing Your Site for Installation The Steelhead appliance ships completely assembled. contact your rack manufacturer. Be prepared to provide values for these parameters. Appliance Steelhead Appliance (the Primary Interface) Parameter Host name IP address Netmask Default gateway (the WAN gateway) DNS IP address Domain name for the system Administrator password SMTP server IP address Events and failures notification email address Primary interface speed Primary interface duplex In-Path Deployments In-path interface IP address In-path netmask In-path gateway In-path: LAN interface speed In-path: LAN interface duplex In-path: WAN interface speed In-path: WAN interface duplex Your Value Steelhead Appliance Installation and Configuration Guide 29 .Completing the Configuration Checklist Installing and Configuring the Steelhead Appliance Completing the Configuration Checklist The following table lists the parameters you specify to complete the initial configuration of the Steelhead appliance. – You cannot use the auxiliary port for out-of-path Steelhead appliances. For example. if a four-port bypass card is located in slot 0 of your appliance. Primary (PRI) Bypass Card Interface Naming Conventions The interface names for the bypass cards are a combination of the slot number and the port pairs (<slot>_<pair>. The management interface that connects the Steelhead appliance to a LAN switch. and wan0_1. if the bypass card is located in slot 1 of your appliance. wan1_0. Alternatively. WAN LAN Connects the WAN port of the Steelhead appliance and the WAN router using a crossover cable. Note: If the Steelhead appliance is deployed between two switches. lan1_1. the interface names are lan0_0. the interface names are lan1_0. 30 Steelhead Appliance Installation and Configuration Guide . Connects the LAN port of the Steelhead appliance and the LAN switch using a straightthrough cable. lan0_1. You cannot have the primary and auxiliary ports on the same subnet. You establish a serial connection to a terminal emulation program for console access to the configuration wizard and the Steelhead CLI. – The primary and auxiliary ports cannot share the same network subnet. respectively. For detailed information about installing additional bypass cards. – The auxiliary and in-path interfaces cannot share the same network subnet. and wan1_1. For detail information about bypass cards on the EX560 and EX760. see the Network Interface Card Installation Guide. respectively. This management interface enables you to connect to the Management Console and the Steelhead CLI.Installing and Configuring the Steelhead Appliance Completing the Configuration Checklist Steelhead Appliance Ports The following table summarizes the ports used to connect the Steelhead appliance to your network. Auxiliary (AUX) An optional port that provides an additional management interface for a secondary network. – The primary and in-path interfaces can share the same subnet. <slot>_<pair>). – You must use the primary port on the server-side for out-of-path deployments. Port Console Description Connects the serial cable to a terminal device. both the LAN and WAN ports must be connected with straight-through cables. see the Series EX560 and EX760 Systems Owner’s Manual. wan0_0. press the power switch off. Check the status lights on the Steelhead appliance. you must ground (earth) the Green/Yellow tab on the power cord or risk electrical shock. Plug the AC power cord into the Steelhead appliance. Caution: In European electrical environments.Powering On the Steelhead Appliance Installing and Configuring the Steelhead Appliance Powering On the Steelhead Appliance The following section describes how to connect the AC power and how to power on the system. Note: If your model has multiple power supplies. For detailed information about the status lights. you must plug in all the power cords or you will hear an alarm. Ensure that the system power switch is in the off position on the rear of the Steelhead appliance. Press the system power switch on. Note: The 1U and 2U Steelhead EX appliances (Series xx60) takes 15 minutes to start. 2. Plug the AC power cord into an uninterrupted AC power source. see the appendix. 4. Figure 3-4. If the Steelhead appliance does not immediately power on. then press the power switch on again. Connecting the AC Power 3. To power on the system 1. 5. The EX555 and EX755 take about 7 minutes to start. Steelhead Appliance Installation and Configuration Guide 31 . 3. such as Tera Term Pro. Even though this is not a requirement. Tip: Riverbed recommends that you connect the console port to a device that logs output.Installing and Configuring the Steelhead Appliance Connecting to the Steelhead Appliance Connecting to the Steelhead Appliance To access the configuration wizard and the Steelhead CLI. Plug the serial cable into the Serial/Console port and a terminal. To connect to the Steelhead appliance 1. Start your terminal emulation program. you establish a serial connection using a terminal emulator program. For example. login as: admin Sent username "admin" password: password The configuration wizard automatically starts after you enter the login and default password. it can help you identify problems with the system. Connecting to the Steelhead Appliance 2. After you have established a connection. Do not use the VGA or DVI ports to connect to the appliance. Figure 3-5. Log in as administrator user (admin) and enter the default password (password). the terminal server must use hardware flow control for the port connected to the Steelhead appliance. you configure the Steelhead appliance using the configuration wizard: 32 Steelhead Appliance Installation and Configuration Guide . The terminal device must have the following settings: – – – – – – Baud rate: 9600 bps Data bits: 8 Parity: none Stop bits: 1 vt100 emulation No flow control Note: If you are using the Steelhead appliance with a terminal server. You cannot connect to an attached device. the duplex settings on the network device default to half-duplex. but you cannot connect to that same device when you manually set the speed or duplex. Configuring In-Path Steelhead Appliances In a physical in-path deployment. see “Configuring Out-of-Path Steelhead Appliances” on page 42. The Steelhead appliance automatically negotiates duplex settings. The clients and servers continue to see client and server IP addresses. see “Choosing a Network Deployment” on page 25. For detailed information about in-path deployments. receives. If one end of the link is set to autonegotiate and the other end of the link is not set to auto-negotiate. “Troubleshooting. For out-of-path configurations. Avoiding Duplex Mismatch Before you begin the configuration process. ensure that your LAN and WAN interfaces have the same duplex settings. When using the configuration wizard:   Click Enter to enter the default value. Steelhead Appliance Installation and Configuration Guide 33 . see “Configuring In-Path Steelhead Appliances. This duplex mismatch passes traffic. To achieve maximum optimization. You can connect to a device when you choose auto-negotiation. manually configure the duplex settings on your:      router switch Steelhead appliance WAN interface Steelhead appliance LAN interface Steelhead appliance primary interface The following can be signs of a duplex mismatch:  On the Reports > Diagnostics > System Logs page. see the Steelhead Appliance Deployment Guide.    For detailed information about checking for duplex mismatches. see Chapter 4. Slow performance across the network. For a detailed figure. Click ? for help.Configuring In-Path Steelhead Appliances Installing and Configuring the Steelhead Appliance   For in-path configurations. CRC. you see errors for sends. but it causes late collisions and results in degraded optimization. To avoid duplex mismatches.” Configuration Wizard The configuration wizard automatically starts when you log in to the CLI for the first time.” next. Physical in-path configurations are suitable for any location where the total bandwidth is within the limits of the installed Steelhead appliance. the Steelhead appliance is physically in the direct path between clients and servers. and short sends. set your network devices to 100 and full. The default value is riverbedcmc. For detailed information. If you enter no. You are given the option to enable the DHCP to automatically assign an IP address to the primary interface for the Steelhead appliance. To configure the Steelhead appliance in an in-path deployment 1. 2.1 Primary DNS server? 10. enter the configuration jump-start command from configuration mode. see the Riverbed Command-Line Interface Reference Manual. Wizard Prompt Step 1: Host name? Step 2: Use DHCP on the primary interface? Description Enter the host name for the Steelhead appliance. The default value is no. you can use it to automatically configure them: Do you want to auto-configure using a CMC? no If you answer yes.Installing and Configuring the Steelhead Appliance Configuring In-Path Steelhead Appliances  Click Ctrl-B to go back to the previous step. enter yes at the system prompt.0 Default gateway? 10. If you quit the configuration wizard. Enter the default gateway for the Steelhead appliance.0.10. You must be in configuration mode to restart the configuration wizard.0. Do you want to use the configuration wizard for initial configuration? yes 3. Primary IP address? 10. Riverbed recommends that you do not set DHCP. Tip: If you mistakenly answer yes. Complete the configuration wizard steps on the client-side and the server-side Steelhead appliances as described in the following table. you are prompted for the CMC host name or IP address.0.0.6 Example hostname? amnesiac Use DHCP? no Netmask? 255. Step 3: Primary IP address? Step 4: Netmask? Step 5: Default gateway? Step 6: Primary DNS server? Enter the IP address for the Steelhead appliance. Enter the netmask address. the wizard continues. The host name or IP address is used to contact the CMC. To restart the configuration wizard  Enter the following set of commands at the system prompt: > enable # configure terminal (config) # configuration jump-start For detailed information about the CLI. see the “To restart the configuration wizard” on page 34. If you have a Riverbed Central Management Console (CMC) appliance installed in your network to manage multiple Steelhead appliances. Enter the primary DNS server IP address. you can restart it from the Steelhead CLI. To start the configuration wizard.2 34 Steelhead Appliance Installation and Configuration Guide .255. to return to the wizard from the CLI.10.0. Notification email address? example@xample. The default administrator password is password. Admin password? xxxyyy Step 9: SMTP server? Enter the name of the SMTP server. you can enter host names in the system without the domain name. see the Steelhead Appliance Deployment Guide. Enter the in-path netmask address.6 In-Path Netmask? 255. Important: Make sure that you provide a valid SMTP server to ensure that the email notifications for events and failures. SMTP server? natoma Step 10: Notification email address? Step 11: Set the primary interface speed? Enter a valid email address to which notification of events and failures are to be sent.0 In-Path Default Gateway? 10.11. Example Domain name? example.11.0. For detailed information about inpath configurations. The default value is auto. Enter the speed on the primary interface (that is. Set the primary interface duplex? [auto] auto Step 13: Would you like to activate the in-path configuration? Would you like to activate the in-path configuration? yes Step 14: In-Path IP address? Step 15: In-Path Netmask? Step 16: In-Path Default gateway? Enter the in-path IP address for the Steelhead appliance.11. the Steelhead appliance). Enter the in-path default gateway (the WAN gateway). An in-path configuration is a configuration in which the Steelhead appliance is in the direct path of the client and server.com Step 8: Admin password? Riverbed strongly recommends that you change the default administrator password at this time.255.16 Steelhead Appliance Installation and Configuration Guide 35 . The password must be a minimum of six characters. If you set a domain name. Make sure that this value matches the settings on your router or switch.Configuring In-Path Steelhead Appliances Installing and Configuring the Steelhead Appliance Wizard Prompt Step 7: Domain name? Description Enter the domain name for the network where the Steelhead appliance is to reside. In-Path IP address? 10. The default value is auto.com Set the primary interface speed? [auto] auto Step 12: Set the primary interface duplex? Enter the duplex mode on the primary interface. Enter yes at the system prompt to configure in-path support.11. Make sure that this value matches the settings on your router or switch. External DNS and external access for SMTP traffic is required for email notification of events and failures to function. enter the step number to return to.11. The default value is auto. 5. LAN interface speed.Installing and Configuring the Steelhead Appliance Configuring In-Path Steelhead Appliances Wizard Prompt Step 17: Set the in-path: LAN interface speed? Description Enter the in-path. Primary DNS server: 10. Make sure that this value matches the settings on your router or switch. Use DHCP on primary interface: no 3. Set the in-path:WAN interface duplex: auto To change an answer. The system confirms your settings. Make sure that this value matches the setting on your router or switch. Netmask: 255. Admin password: xxxyyy 9.com 8. Domain name: example. Set the in-path: WAN interface speed? [auto] auto Step 20: Set the in-path: WAN interface duplex? Enter the in-path.16 17.0.10. LAN duplex value.0 16. Set the in-path: WAN interface duplex? [auto] auto 4. Make sure that this value matches the settings on your router or switch. The default value is auto. Set the in-path:LAN interface duplex: auto 19. Would you like to activate the in-path configuration: yes 14. WAN duplex speed. The default value is auto.11. Primary IP address: 10. In-Path IP address: 10.0.10. In-Path Default gateway: 10.0. Default gateway: 10. In-Path Netmask: 255.1 6.com 11.0. Set the in-path: LAN interface duplex? [auto] auto Step 19: Set the in-path: WAN interface speed? Enter the in-path. Choice: The Steelhead appliance configuration wizard automatically saves your configuration settings.0.11.2 7.255.0.11. Notification email address: example@example. SMTP server: natoma 10. Set the in-path:LAN interface speed: auto 18.6 15. The default value is auto.6 4. Make sure that this value matches the settings on your router or switch. Set the in-path:WAN interface speed: auto 20. Otherwise hit <enter> to save changes and exit. Hostname: amnesiac 2. Set the primary interface speed: auto 12. To log out of the system. You have entered the following information: 1. Example Set the in-path: LAN interface speed? [auto] auto Step 18: Set the in-path: LAN interface duplex? Enter the in-path. WAN interface speed.0 5. Set the primary interface duplex: auto 13. enter the following command at the system prompt: amnesiac> exit 36 Steelhead Appliance Installation and Configuration Guide .255. This can be any port on your LAN switch configured to connect to a host. Connecting the Primary Port to the LAN Switch 2.Configuring In-Path Steelhead Appliances Installing and Configuring the Steelhead Appliance Connecting the Steelhead Appliance to Your Network You use standard Ethernet straight-through and crossover cables to connect to your network in an in-path configuration.Primary and LAN ports on the appliance to the LAN switch. Figure 3-8. Crossover cable . Plug the straight-through cable into the primary port of the Steelhead appliance and the LAN switch. To connect to your network 1. Unplug the end connected to the WAN router. Plug the straight-through cable that you disconnected from the WAN router into the LAN port of the Steelhead appliance. Make sure that you use the correct cables to establish your network connections:   Straight-through cables .WAN port on the appliance to the WAN router. Disconnecting the WAN Router 3. Figure 3-6. Connecting the LAN Switch to the LAN Port Steelhead Appliance Installation and Configuration Guide 37 . Figure 3-7. Identify the straight-through cable that connects your LAN switch to your WAN router. ping from the in-path default gateway: ping -I <in-path-IP-address> <in-path-default-gateway> 38 Steelhead Appliance Installation and Configuration Guide . It must have the following settings: 9600 baud.Installing and Configuring the Steelhead Appliance Configuring In-Path Steelhead Appliances 4. To verify your connections 1. plug the cable into the WAN port of the Steelhead appliance and the WAN router. 1 stop bit. 4.domain or ssh admin@ipaddress 3. For detailed information about installing additional bypass cards. 2. Figure 3-9. Using the provided crossover cable. 8 bits. repeat Step 1 through Step 4. At the system prompt. Verifying Your Connections Perform the following tasks to verify that you have properly connected the Steelhead appliance. At the system prompt. no parity. ping from the management interface: ping -I <primary-IP-address> <primary-default-gateway> 5. You can now optimize WAN traffic using the Steelhead appliance. This is the password you set in the configuration wizard. enter the following command: ssh admin@host. This must be a crossover cable. At the system prompt. and no flow control. Verify that you can connect to the CLI using one of the following devices: – – An ASCII terminal or emulator that can connect to the serial console. You are prompted for the administrator password. vt100. A computer with a Secure Shell (SSH) client that is connected to the Steelhead appliance primary port. Connecting the WAN Port to the WAN Router Note: If you have a four-port or six-port bypass card. see the Network Interface Card Installation Guide. Resolving IP Connectivity Steelhead Appliance Installation and Configuration Guide 39 .Configuring In-Path Steelhead Appliances Installing and Configuring the Steelhead Appliance Figure 3-10. Installing and Configuring the Steelhead Appliance Configuring In-Path Steelhead Appliances Connecting to the Management Console After you configure the Steelhead appliance. you can check and modify your configuration settings and view performance reports and system logs in the Management Console. host is the host name you assigned to the Steelhead appliance during initial configuration. displaying the Login page. and administrator password that you assigned in the configuration wizard. Figure 3-11. you must know the host. If your DNS server maps that IP address to a name. you are prompted to inspect and verify the SSL key. You can connect to the Management Console through any supported Web browser. The Management Console appears. domain. If you use HTTPS to connect. Specify the URL for the Management Console in the location box of your Web browser: protocol://host. you can specify the IP address instead of the host and domain. domain is the full domain name for the Steelhead appliance. Login Page 40 Steelhead Appliance Installation and Configuration Guide . To connect to the Management Console 1. HTTPS uses the SSL protocol to ensure that a secure environment. you can specify the DNS name. Note: Alternatively. To connect to the Management Console. Note: Cookies and JavaScript must be enabled in your Web browser.domain – – – protocol is http or https. or any local accounts created using the Role-Based Accounts feature. To verify optimization in an in-path configuration 1. Users with monitor (monitor) privileges can view the Steelhead appliance reports. 4. type the user login: admin. The Home page summarizes the current status of your system. and change their own password. 3.) 4. A monitor user cannot make configuration changes. Users with administrator (admin) privileges can configure and administer the Steelhead appliance. To check for speed and duplex errors 1. Go to the Reports > Optimization > Bandwidth Optimization in the Management Console to verify optimization. In the Management Console. If you find errors. In the Password text box. 5. monitor. 3. Check the system logs for duplex or speed errors. go to the Reports > Diagnostics > System Logs page. Ensure that the server is located across the WAN. Click Log In to display the Home page. a login from a RADIUS or TACACS+ database. type the password you assigned in the configuration wizard of the Steelhead appliance. In the Username text box. Steelhead Appliance Installation and Configuration Guide 41 . Check for duplex and speed errors. you must ensure that the Steelhead appliance negotiated the speed and duplex at the rate your devices expect. change the speed and duplex settings on your LAN and WAN interface in the Configure > Networking > Inpath 0_0 page. 4. Performance improves significantly. ensure settings are auto on the LAN and WAN and 100 FULL on the LAN and WAN. You can verify your speed and duplex settings in the Configure > Networking > Inpath0_0 page and the Configure > Networking > Base Interfaces page of the Management Console. 3. For example. Go to the Reports > Networking > Current Connections page. If you selected auto-negotiation (auto) for your in-path and primary interfaces. user logs. Verifying Your Configuration Perform the following tasks to verify that you have properly configured the Steelhead appliance.Configuring In-Path Steelhead Appliances Installing and Configuring the Steelhead Appliance 2. Drag and drop the 1 MB file again. 2. Map a remote drive on a client machine. 2. (The Steelhead appliance ships with the default password: password. The default login is admin. Drag and drop a 1 MB file from the client to the remote server. ensure that settings are auto speed and duplex on the LAN and WAN or 100 FULL on the LAN and WAN. enter yes at the system prompt. Make sure that the settings on the router. 2. and the Steelhead appliance match. to return to the wizard from the CLI. If you enter no. Servers see the IP address of the server-side Steelhead appliance rather than the client-side IP address. see “Configuration Wizard” on page 33. For example. the wizard continues. An out-of-path configuration is suitable for data center locations where physical in-path or logical in-path configurations are not possible. For a detailed figure. check the duplex and speed settings on the router and switch that connects to your Steelhead appliance. you are prompted for the CMC host name or IP address. The host name or IP address is used to contact the CMC. For detailed information about out-of-path deployments. enter the configuration jump-start command from configuration mode. the Steelhead appliance is not in the direct path between the client and the server. see the “To restart the configuration wizard” on page 34. For detailed information. optimization might be degraded. If you have a Central Management Console appliance installed in your network to manage multiple Steelhead appliances. you can use it to automatically configure them. The default value is set to riverbedcmc. Important: In an out-of-path configuration. Do you want to auto-configure using a CMC? no If you enter yes. To start the configuration wizard.Installing and Configuring the Steelhead Appliance Configuring Out-of-Path Steelhead Appliances Configuring Out-of-Path Steelhead Appliances In an out-of-path deployment. To configure the server-side Steelhead appliance in an out-of-path deployment 1. Before You Begin Before you begin the configuration process. 42 Steelhead Appliance Installation and Configuration Guide . If the settings do not match. see the Steelhead Appliance Deployment Guide. For detailed information about the configuration wizard and how to restart it. Do you want to use the configuration wizard for initial configuration? yes Tip: If you mistakenly answer no. see “Choosing a Network Deployment” on page 25. switch. The configuration wizard automatically starts when you log in to the Steelhead CLI for the first time. the client-side Steelhead appliance is configured as an in-path device and the server-side Steelhead appliance is configured as an out-of-path device. The default value is no. If you set a domain name. Enter the speed on the primary interface (that is.255.1 Primary DNS server? 10. SMTP server? natoma Step 10: Notification email address? Step 11: Set the primary interface speed? Enter a valid email address to receive email notification of events and failures. Enter the domain name for the network where the Steelhead appliance is to reside. you can enter host names in the system without the domain name.0. Admin password? xxxyyy Step 9: SMTP server? Enter the SMTP server. External DNS and external access for SMTP traffic is required for email notification of events and failures to function. Make sure that this value matches the settings on your router or switch.2 Domain name? example. You are given the option to enable the DHCP to automatically assign an IP address to the primary interface for the Steelhead appliance.Configuring Out-of-Path Steelhead Appliances Installing and Configuring the Steelhead Appliance 3. Enter the default gateway for the Steelhead appliance.6 Netmask? 255. Riverbed recommends that you do not set DHCP.10. The default value is auto. Enter the primary DNS server IP address. Description Enter the host name for the Steelhead appliance.0.com Step 8: Admin password? Riverbed strongly recommends that you change the default administrator password at this time. The default administrator password is password. Complete the configuration wizard steps on the client side and server side.0.0.10. Example Hostname? amnesiac Wizard Prompt Step 1: Host name? Step 2: Use DHCP on the primary interface? Use DHCP? no Step 3: Primary IP address? Step 4: Netmask? Step 5: Default gateway? Step 6: Primary DNS server? Step 7: Domain name? Enter the IP address for the Steelhead appliance.0 Default gateway? 10. Enter the netmask address. Notification email address? [email protected]. The password must be a minimum of 6 characters. the Steelhead appliance). Important: Make sure that you provide a valid SMTP server to ensure that the email notifications for events and failures.com Set the primary interface speed? [auto] auto Steelhead Appliance Installation and Configuration Guide 43 . Primary IP address? 10. and type a value at the system prompt. Otherwise hit <enter> to save changes and exit. Example Set the primary interface duplex? [auto] auto Step 13: Would you like to activate the in-path configuration? Would you like to activate the in path configuration? no Step 14: Would you like to activate the out-of-path configuration? Enter yes at the system prompt to configure out-of-path support. 4. see the Steelhead Appliance Deployment Guide. For detailed information about inpath configurations. The Steelhead appliance configuration wizard automatically saves your settings. Would you like to activate the out-of-path configuration? [no] yes The system confirms your settings: You have entered the following information: Step 1: Hostname? amnesiac Step 2: Use DHCP on primary interface? no Step 3: Primary IP address? 10.6 Step 4: Netmask? 255. enter the step number to return to. For detailed information about inpath configurations.0.0. see the Steelhead Appliance Deployment Guide.0. Make sure that this value matches the settings on your router or switch. Enter no at the system prompt to configure in-path support.255. Would you like to activate the in-path configuration: no Step 14: Would you like to activate the out-of-path configuration? yes To change an answer.1 Step 6: Primary DNS server? 10. An in-path configuration is a configuration in which the Steelhead appliance is in the direct path of the client and server.0.10.0 Step 5: Default gateway? 10.com Step 8: Admin password? xxxyyyy Step 9: SMTP server? natoma Step 10: Notification email address? [email protected] and Configuring the Steelhead Appliance Configuring Out-of-Path Steelhead Appliances Wizard Prompt Step 12: Set the primary interface duplex? Description Enter the duplex mode on the primary interface.com Step 11: Set the primary interface speed? auto Step 12: Set the primary interface duplex? auto Step 13.10.2 Step 7: Domain name? example. The default value is auto. enter the following command at the system prompt: amnesiac> exit 44 Steelhead Appliance Installation and Configuration Guide .0. To log out of the system. An out-of-path configuration is a configuration in which the Steelhead appliance is not in the direct path of the client and server. For detailed information about the Management Console. you configure the client-side Steelhead appliance in the same way as in an in-path configuration. Figure 3-12. you must define a fixed-target rule on the client-side Steelhead appliance that points to the out-of-path. see “Connecting to the Management Console” on page 40. For details. For detailed information about the CLI. You can define fixedtarget rules using the Management Console or the CLI. server-side Steelhead appliance. To configure the client-side Steelhead appliance 1. Steelhead Appliance Installation and Configuration Guide 45 . The following procedures describe how to configure in-path rules using the Management Console. see the Steelhead Management Console User’s Guide. Follow the procedures for an in-path configuration. Connect to the Management Console. For optimization to occur. 2. For details. To connect the Steelhead appliance to your network  Plug the straight-through cable into the primary port of the Steelhead appliance and the LAN switch. see the Riverbed Command-Line Interface Reference Manual. This can be any port on your LAN switch that is configured to connect to a host.Configuring Out-of-Path Steelhead Appliances Installing and Configuring the Steelhead Appliance Connecting the Steelhead Appliance to Your Network You use a standard Ethernet straight-through cable to connect the primary port of the Steelhead appliance to the LAN switch in an out-of-path configuration. see “Configuring In-Path Steelhead Appliances” on page 33. Connecting the Primary Port and LAN Switch Configuring the Client-Side Appliance In an out-of-path configuration. The default port is 7810.0/0.0. For Target Appliance IP Address. Use the format 0. click Add a New In-Path Rule to display the in-path rule configuration options. You can now optimize WAN traffic using the Steelhead appliance.0.0/0. For detailed information about verifying your connections and configuration settings. for Backup Appliance IP Address.0. 6. The default port is 7810.Installing and Configuring the Steelhead Appliance Configuring Out-of-Path Steelhead Appliances 3. specify the IP address and port number for the peer Steelhead appliance. select Fixed-Target from the drop-down list. failover support). 5. For Type. In-Path Rules Page 4. 46 Steelhead Appliance Installation and Configuration Guide . Optionally. 9. The IP address must be the primary Port IP address on the target Steelhead appliance. Go to the Configure > Optimization > In-Path Rules page. Use the format 0. Click Add Rule to apply the rule to the running configuration.0. 8. see “Verifying Your Connections” on page 38 and “Verifying Your Configuration” on page 41. Under In-Path Rules. Figure 3-13. specify the IP address and port for the backup appliance in the Backup IP and Port text boxes. Click Save to write your settings to memory. if you have a backup. 7. out-of-path Steelhead appliance in your system (that is. ” next “Duplex Mismatch” on page 48 “In-Path Steelhead Appliances Connection” on page 49 “Oplock Issues” on page 49 “CIFS Overlapping Open Optimization Denies Multi-User Access” on page 51 “IP Address Configuration” on page 52 “Asymmetric Routing” on page 53 “Packet Ricochet” on page 53 “Packet Ricochet—Internet Control Messaging Protocol (ICMP) Redirects” on page 54 “Auto-Discovery Failure” on page 56 “Protocol Optimization Errors” on page 56 “Server-Side Out-of-Path Connection Caveats” on page 57 “Specific Problems” on page 57 “Resetting a Lost Password” on page 58 This chapter also provides a checklist to help with your network configuration settings:  “Network Integration Checklist” on page 59 Cables Improper cabling prevents smooth traffic flows between the Steelhead appliance and the router or switch.CHAPTER 4 Troubleshooting This chapter describes how to troubleshoot the Steelhead appliance installation and describes how to investigate and solve isses with the following common problems:               “Cables. Steelhead Appliance Installation and Configuration Guide 47 . but poor performance in the opposite direction. The timed performance numbers to transfer a 20 MB file over FTP are:    no Steelhead appliance – 3:16 cold Steelhead appliance – 5:08 warm Steelhead appliance – 3:46 Adding a pass through rule for an application does not help. Verify the cable selection by removing the power cable from the appliance. and when the Steelhead appliance transitions to bypass mode. An alarm or log message about error counts appears.Troubleshooting Duplex Mismatch Solution To ensure that the traffic flows when the Steelhead appliance is optimizing traffic. 48 Steelhead Appliance Installation and Configuration Guide . Slow connections appear as optimized in the Management Console on the Current Connections report page.  Possible Cause  You have probably set the duplex value for your router to 100Full (fixed) and for the Steelhead appliance to Auto. use the appropriate crossover or straight-through cable to connect the Steelhead appliance to a router or switch. stopping the Steelhead appliance service while leaving the system powered on and an in-path configuration returns performance to original levels. Good performance for one direction of data flow. Make sure that you have connected your cables as follows:     Steelhead appliance to router: crossover cable Steelhead appliance to switch: straight-through cable Steelhead appliance to Steelhead appliance: crossover cable Steelhead appliance to a host: crossover cable Duplex Mismatch The following symptoms occur due to a duplex mismatch:       Access is not faster after configuring the Steelhead appliance. but you cannot connect with the same device when you manually set the speed or duplex. Example The following example shows applications that appear slower with Steelhead appliances configured in an in-path deployment.) There are many retransmissions in packet traces. You can connect with a device when you choose auto-negotiation. (This is a definite indication of duplex mismatch. However. and then test connectivity through it. The pass through rule is ineffective. You cannot connect to an attached device. The interface counters display error messages. Try the half-duplex mode. In-Path Steelhead Appliances Connection When there are Steelhead appliances with in-path connection issues.  If all combinations fail. add an intermediary hub or switch that is more compatible with both network interfaces. If they do not match. try hard-setting one end and autosetting the other. use the port visibility mode.  Steelhead Appliance Installation and Configuration Guide 49 . but they cannot connect to each other to optimize data. If matching speed and duplex do not reduce collisions or errors. The Current Connections report page in the Management Console (select Reports > Networking > Current Connections) displays slow connections as optimized. the two sites are connected in-path and you can ping them. ensure connectivity when service is down. Solutions To resolve the Steelhead appliance connection issue:    open port 7800 on both firewalls. you might have a large number of errors on the interface when it is in the bypass mode. if there is no encryption. because the switch and the router are not set with the same duplex settings. The firewall is filtering the IP and port address of the source and destination (bandwidth limitation) systems. Ensure there is a speed and duplex match between each in-path interface and its peer network interface. Possible Cause The firewall is running port filtering and drops your probe packets. Also.In-Path Steelhead Appliances Connection Troubleshooting Solutions To resolve the duplex mismatch error:  Connect to the Steelhead appliance CLI and enter the flood-ping command to check the duplex mismatch: ping –f –I >in-path-ip> –s 1400 <clientIP>   Change the interface speed and duplex to match. place the Steelhead appliance after the firewall. as a last resort. Oplock Issues The following symptoms occur due to opportunistic lock (oplock) issues:  File access is not faster or tasks such as drag-and-drop are fast but applications might benefit from acceleration. To prevent any compromise to data integrity. If you close the file on PC1. the Steelhead appliance only optimizes data when a client has exclusive access to the data. this function is enabled). you can open it in 5 seconds on PC2. but not as effectively as when application optimizations are available. the Steelhead appliance does not perform application-level latency optimization but still performs Scalable Data Referencing (SDR) and data compression as well as TCP optimization. it takes you 24 seconds to open the same file on PC1. Solutions Windows Common Internet File System (CIFS) uses oplock to determine the level of safety the OS or the application has in working with a file. To resolve oplock issues:    Upgrade your anti-virus software to the latest version. Check whether the client is running an anti-virus software that is scanning the files over the WAN or that the anti-virus software does not break the oplock. When an oplock is not available. The server has oplocks disabled. Use Filemon (sysinternals) to check for file access.Troubleshooting Oplock Issues Possible Causes  The client is running an old anti-virus software such as McAfee v4. The antivirus causes multiple file opens. Run a network analyzer such as Riverbed Cascade Pilot. and determine that the server grants oplocks when the client opens a file. An oplock controls the consistency of optimizations such as read-ahead. Oplock is a lock that a client requests on a file in a remote server. the most common type. but you cannot open the same file under 24 seconds on PC2. even without the benefits of latency optimization. For details. which is fully integrated with Wireshark.  Example You can open a previously-accessed file in 5 seconds on PC1. see “CIFS Overlapping Open Optimization Denies Multi-User Access” on page 51. which competes with the application for an oplock instead of opening as read-only. Ensure that the server has oplock enabled by verifying registry settings on Windows servers or the Filer configuration (for NetApp or EMC servers). However. Steelhead appliances still increase WAN performance. Therefore.    50 Steelhead Appliance Installation and Configuration Guide .5. Oplock levels are reduced when you make conflicting opens to a file. Enable CIFS Overlapping Opens (by default. Connect to the Steelhead Management Console. configure CIFS overlapping open optimization on the client-side Steelhead appliance as follows: 1. CIFS (SMB1) Page Steelhead Appliance Installation and Configuration Guide 51 . choose Configure > Optimization > CIFS (SMB1) to display the CIFS (SMB1) page. On the client-side Steelhead appliance.CIFS Overlapping Open Optimization Denies Multi-User Access Troubleshooting CIFS Overlapping Open Optimization Denies Multi-User Access The CIFS overlapping open optimization issue prevents a client from accessing a file when different clients access the file at the same time. 2. Figure 4-1. Solution To resolve the CIFS overlapping open optimization issue. For details. see the Steelhead Management Console User’s Guide. x or later Steelhead appliance or if it does not go through a Steelhead appliance: for example. Use the radio buttons to set either an include list or exclude list of file types subject to overlapping opens optimization. Ensure that the Steelhead appliances in the network can reach each other through their own interfaces. CAD applications. By default. Specify a list of extensions you do not want to include. For example. by pinging their primary and inpath interfaces. are correct. Enter the following command to ping from a specific in-path interface on a Steelhead appliance to another in-path interface: ping -f -I {Local-Steelhead appliance-Inpath-IP} -s 1400 {Remote-Steelhead appliance-InpathIP}   Ensure that the default gateways. this setting is disabled.x. Under Overlapping Open Optimization (Advanced). Control Enable Overlapping Open Optimization Description Enables overlapping opens to obtain better performance with applications that perform multiple opens on the same file: for example. Click Apply to apply your settings to the current configuration. see the Riverbed Command-Line Interface Reference Manual. the Steelhead appliance optimizes data where exclusive access is available (when locks are granted). Connect to the Steelhead appliance CLI. If this occurs. IP Address Configuration If you have not configured IP addresses correctly. you should specify any file extensions that use Enable Applock Optimization. complete the configuration as described in the following table. both for the Steelhead appliance and for its in-path interfaces. Optimize only the following extensions Optimize all except the following extensions Specify a list of extensions you want to include in overlapping opens optimization. Solutions To verify the IP address has been configured correctly:  Ensure the Steelhead appliances are reachable through the IP address. 4. the Steelhead appliance does not perform application-level latency optimizations but still performs SDR and compression on the data as well as TCP optimizations. 5. Click Save to save your settings permanently. For details. When an oplock is not available. you should disable overlapping opens for such applications. Note: If a remote user opens a file that is optimized using the overlapping opens feature and a second user opens the same file. certain applications that are sent over the LAN. the Steelhead appliances cannot connect to each other or to your network. 52 Steelhead Appliance Installation and Configuration Guide . they might receive an error message if the file fails to go through a v3. Note: Enable this setting on the client-side Steelhead appliance. With overlapping opens enabled.Troubleshooting IP Address Configuration 3. see the Riverbed Command-Line Interface Reference Manual. Connect to the Steelhead appliance CLI. see the Riverbed Command-Line Interface Reference Manual. If the Steelhead appliance sees only the LAN to WAN or only the WAN to LAN packets. destined for the specified IP address and TCP port. configure connection-forwarding with two Steelhead appliances. Enter the command: tproxytrace -i inpath0_0 <example-server-IP-address>:<example-server-TCP-port> This causes the Steelhead appliance to generate a fake TCP SYN packet. verify that the server-side Steelhead appliance can be autodiscovered by the client-side Steelhead appliance. A remote Steelhead appliance should respond if it sees the SYN packet. use four-port or six-port Steelhead appliance.  Verify that the client-side Steelhead appliance is visible to the server-side Steelhead appliance. Connect to the Steelhead appliance CLI. Enter the command: tproxytrace -i inpath0_0 <example-client-IP-address>: <example-client-TCP-port> Asymmetric Routing If there is an asymmetric routing issue. use a logical in-path configuration such as WCCP or PBR. Solutions To resolve the asymmetric routing issue. do one of the following:  Rank the following solutions from most to least preferable with respect to complexity and cost and select one: – – – – configure a fixed-target rule. Possible Cause Asymmetric routing occurs when a TCP connection takes one path to the destination and another when returning to the source. many connections fail during data transfer or they fail to start.  Remove the asymmetry. Packet Ricochet The following symptoms occur due to packet ricochet:   Performance is less than expected The following log message appears: Steelhead Appliance Installation and Configuration Guide 53 . For details. and send it to the specified in-path interface. For details. it cannot optimize the data.Asymmetric Routing Troubleshooting  For physical or virtual in-path installations. Add static routes to LAN subnets through the LAN router. Solutions To resolve packet ricochet issues:    Change the in-path gateway to the LAN router. On one or both sites.208. Outer connections to clients or servers are routed through the WAN interface to the WAN gateway. The WAN router is probably dropping the SYN from the Steelhead appliance before issuing an ICMP redirect. and then routed through the Steelhead appliance to the next hop LAN gateway.9:7801 Possible Cause Traffic to the LAN is travelling to the WAN router on the way to the LAN. Add static routes to LAN subnets through the LAN router. the in-path interface on the Steelhead appliance is on a different network than the local host. Packet Ricochet—Internet Control Messaging Protocol (ICMP) Redirects The following symptoms occur due to packet ricochet ICMP redirects:   Connections fail on first attempt. For details.12:80 ==> 192. Add in-path routes to local destinations to prevent the ICMP redirect and subsequent drop 54 Steelhead Appliance Installation and Configuration Guide .72.n7a3t. Enable in-path simplified routing._1c5h:e1c6k1: 1 SYN ==> packet 192. Change the in-path gateway to the LAN router.168.Troubleshooting Packet Ricochet—Internet Control Messaging Protocol (ICMP) Redirects » [fionr taelrcreeapdt/y lnoactaltekde rnceoln/neiccotireo. Enable in-path simplified routing.n c:119426.  Possible Causes  Traffic to the LAN is travelling to the WAN router on the way to the LAN.   Solutions To resolve the packet ricochet ICMP redirects issue.168. but succeed on second attempt. but the router drops the packet. There are no in-path routes defined. see “Simplified Routing” on page 55.316] 8. do one of the following:      Change the router ICMP configuration to forward the packet or turn off ICMP redirect. Figure 4-2. you must define one router as the default gateway and static routes for the other routers so that traffic is not redirected back through the Steelhead appliance. see the Steelhead Appliance Deployment Guide. and by associating the next-hop Ethernet addresses with IP addresses. Without simplified routing. Choose Configure > Networking > Simplified Routing to display the Simplified Routing page. Enabling simplified routing eliminates this issue. you can use either the WAN or LAN-side device as a default gateway. Enabling simplified routing eliminates the need to add static routes when the Steelhead appliance is in a different subnet from the client and the server. The default route must exist on each Steelhead appliance in your network. even with the static routes defined. Simplified routing collects the IP address for the next hop MAC address from each packet it receives to address traffic. Tip: For detailed information. With simplified routing. In some cases. Simplified routing has the following constraints:   You cannot enable WCCP. Under Mapping Data Collection Setting. Steelhead Appliance Installation and Configuration Guide 55 . the Access Control List (ACL) on the default gateway can still drop traffic that should have gone through the other router. Simplified Routing Page 2.Simplified Routing Troubleshooting Simplified Routing Simplified routing changes the process used to select the destination Ethernet address for packets transmitted from in-path interfaces. To enable simplified routing 1. complete the configuration as described in the following table. if a Steelhead appliance is installed in a different subnet from the client or server. The Steelhead appliance learns the right gateway to use by watching where the switch or router sends the traffic. Also collect data for connections that are un-natted (connections that are not translated using NAT). • Destination and Source .Do not collect mappings. 4. • All . Specify the Target Appliance IP Address and its port as 7800 on the opposite Steelhead appliance (inpath without auto-discovery). Auto-Discovery Failure When auto-discovery fails. Possible Causes    Cisco PIX 7. Configure the Steelhead appliance IP address as the friendly IP address for IDS or IPS.0 might block the auto-discovery probe.Troubleshooting Auto-Discovery Failure Control Collect Mappings From Description Select one of the following options from the drop-down list: • None . Click Save to save your settings permanently. the Steelhead appliance does not optimize expected protocols. Use this option in connection-forwarding deployments. Riverbed recommends that you use this option to maximize the effects of simplified routing. 3.    Configure end nodes (firewalls) to allow your probe to pass through. Cisco PIX Firewall IOS v7. Some firewall configurations strip TCP options or drop packets with these options.Collects destination MAC data. 56 Steelhead Appliance Installation and Configuration Guide . Protocol Optimization Errors When there are protocol optimization errors.x or Raptor firewalls Satellite Intrusion Detection System (IDS) or Intrusion Prevention System (IPS) Solutions  Create a fixed-target rule on the client-side Steelhead appliance. Use this option in connection-forwarding deployments.Collect mappings from destination and source MAC data. You cannot enable this option in connectionforwarding deployments. You can keep this configuration and switch to fixedtarget rules or change the configuration on the firewall. Click Apply to save your settings to the running configuration. This is the default setting. • Destination Only . source. all traffic passes through with the Steelhead appliance in-path (physically or logically).Collect mappings for destination. and inner MAC data. ensure that there are no network speed or duplex mismatches.Server-Side Out-of-Path Connection Caveats Troubleshooting Solutions To resolve protocol optimization errors. Clients connect to servers. see the Network Interface Card Installation Guide. Problem The show interfaces CLI command displays 4294967295 as the number of errors on an interface. Steelhead Appliance Installation and Configuration Guide 57 .     You can use OOP configurations along with in-path or logical in-path configurations. An OOP configuration provides non-transparent optimization from the server perspective. but servers treat it like a server-side Steelhead appliance connection. For details. This affects: – – – log files. The Steelhead appliance blocks traffic when going into bypass mode. You must create a fixed-target rule on the clientside Steelhead appliance. Ensure that the cable from the Steelhead appliance to the switch is a straight-through cable and the cable from the Steelhead appliance to the router is a crossover cable. If a Steelhead appliance blocks traffic when going into bypass mode. Specific Problems The following section describes specific problems you might encounter in the Steelhead appliance. reinstall it. that the LAN and WAN cables are not inadvertently swapped. Solution The bypass card is not properly installed. check:     that connections have been successfully established. bi-directional applications such as rsh. You must create an OOP connection from an in-path or logical in-path Steelhead appliance and direct it to port 7810 on the primary interface of the server-side Steelhead appliance. for secure or interactive ports that are preventing protocol optimization. that Steelhead appliances on the other side of a connection are turned on. verify that connections to its neighboring devices are correctly configured. for any pass through rules that could be causing some protocols to pass through the Steelhead appliances unoptimized. This setting is mandatory.  Server-Side Out-of-Path Connection Caveats The following are the caveats for a server-side out-of-path (OOP) Steelhead appliance connection:  OOP configuration does not support auto-discovery. server-side ACLs. Also. Interception is not supported on the primary interface. the rocker switch is in the depressed. Continue with Step 4. Solution If a Steelhead appliance does not come out of bypass mode. When prompted. at the system prompt. or reboot the appliance. For example. 4. at the system prompt. Press E.0 (that has not had previous versions). diagnostics. at the system prompt. For example.9600n8 ----------------- 58 Steelhead Appliance Installation and Configuration Guide . For example.0 or 3.com. the menu prompts you to select the Riverbed Steelhead. press any key to continue. even if they have not been activated. the menu displays root and kernel parameters. Ensure that: • The power strip or the uninterruptable power supply (UPS) the Steelhead appliance is plugged into is turned on and is functioning properly.1) 1: kernel /vmlinuz ro root=/dev/sda5 console=tty0 console=ttyS0. Skip to Step 6. enter the show service CLI command. The Steelhead appliance fails to boot. • In-path interception is enabled. Press V or ^ to select the disk image to boot. To enable the Steelhead appliance service if it is not running. Start. For software versions prior to 4. you must have access to the serial console or monitor and must be able to see the entire boot process to perform these steps: 1. enter the show licenses CLI command. Expected results are: Enabled: yes Optimizations Enabled On: inpath0_0 • The bypass service is running. or 1 position. 2. the menu prompts you to select the disk image to use. For questions about licenses. • You have a valid and active SH10BASE license.Troubleshooting Resetting a Lost Password Problem The Steelhead appliance does not come out of bypass mode when the network connection is restored. 5. verify that: • The in-path interface has an IP address.0. enter the show interfaces CLI command. or a restore/recovery image. Immediately press E. with options similar to the following: ----------------0: root (hd0. 3. For a Steelhead manufactured with 4. • The rocker switch on the back of the Steelhead appliance (Series xx20) is turned on. Your license file should also contain entries for SH10CIFS and SH10EXCH licenses. A GNU GRUB menu appears. A GRUB menu appears. contact Riverbed Support at https://support. For example. enter the show in-path CLI command.0 from 2. Select Riverbed Steelhead and skip to Step 5.) Resetting a Lost Password To reset your password. at the system prompt. – – – For a Steelhead upgraded to 4. use the CLI command service enable.0.riverbed. (When on. Multi-hop optimization. The CLI displays a partially completed line of text similar to the following: kernel /vmlinuz ro root=/dev/sda5 console=tty0 console=ttyS0. type a space and append the line with single fastboot console=tty0 console=ttyS0 – – You must include a space before the word single. In-path: Is it a VLAN trunk? (Configure trunking). Fail-to-wire or fail-to-block. The system starts.sh. Press E to edit the kernel boot parameters. If inside the Steelhead appliance. you need Link State Protocol (LSP) for quicker convergence.9600n8 8. 12. 11. Press V or ^ to select the kernel boot parameters entry. delete If you are accessing the Steelhead appliance directly (through a keyboard and monitor connected to the appliance). Network Integration Checklist Before you begin configuring the Steelhead appliance. Type reboot and press Enter to reboot the appliance. QoS integration. delete At the end of the line. The line of text contains two console= entries. Press Enter.Network Integration Checklist Troubleshooting 6. 10. try probe caching for src IP rules. Tip: Use the arrow keys to access the entire command line. Incorrectly designed load balancing implementations. Packet ricochet. The password is blank. 9. VPN: Ensure the encryption is on the WAN side of the Steelhead appliance.     Steelhead Appliance Installation and Configuration Guide 59 . Press B to continue booting. enter /sbin/resetpw. Modify this line as follows: – – If you are accessing the Steelhead appliance remotely. Remove or manage asymmetry. especially Cisco PIX and Raptor. Firewall: Ensure probes are passed. check firewall performance. check the following configuration settings:       Speed and duplex. At the command prompt. 7. if outside. Does the network use Network Address Translation (NAT) or Port Address Translation (PAT). 60 Steelhead Appliance Installation and Configuration Guide .Troubleshooting Network Integration Checklist   WCCP or VLAN bridge: Router model and IOS revision. and the technical and environmental specifications.” next “1U EX1160 Status Lights and Ports” on page 64 “2U EX1260 Status Lights and Ports” on page 65 “EX560 and EX760 Technical Specifications” on page 67 “EX560 with Granite Technical Specifications” on page 68 “EX1160 and EX1260 Technical Specifications” on page 68 “EX1160 and EX1260 with Granite Technical Specifications” on page 69 “EX1160 and EX1260 Power Requirements and Consumption” on page 69 “CPU Specifications” on page 70 “VSP and Granite Memory and Storage Specifications” on page 70 “Environmental Specifications” on page 72 Steelhead Appliance Installation and Configuration Guide 61 .APPENDIX A Series EX xx60 Technical Specifications This appendix describes the status lights and ports. It includes the following sections:            “1U EX560 and EX760 Status Lights and Ports. The power button controls the DC power supply output to the system. Figure A-1. For detailed information. see the Series EX560 and EX760 Systems Owner’s Manual. Back Panel System LEDs The following table summarizes the EX560 and EX760 system LEDs. Front Panel Figure A-2. HDD Lights when the hard disk drive (HDD) is in use. the power button is not accessible.Series EX xx60 Technical Specifications 1U EX560 and EX760 Status Lights and Ports 1U EX560 and EX760 Status Lights and Ports The following figures illustrate the EX560 and EX760 status light and port locations. Use the power button to perform a graceful shutdown before you remove the system from the AC power source. When the system bezel is installed. LED Power On/Power Button Description The power-on indicator lights when the system power is on. 62 Steelhead Appliance Installation and Configuration Guide . Contact Riverbed Support at https://support. Hard drive failure.riverbed. Solid green = LAN or WAN link is in bypass mode. Plug the system into a working electrical outlet and press the power button.com. BIOS checksum failure detected.com. Contact Riverbed Support at https://support.riverbed. SSD LAN-WAN Ports Steelhead Appliance Installation and Configuration Guide 63 . Possible processor failure.1U EX560 and EX760 Status Lights and Ports Series EX xx60 Technical Specifications LED System Diagnostics (4) Description The system is in a normal off condition or a possible pre-BIOS failure has occurred. When either of the buttons is pushed.riverbed.riverbed.com. Possible video failure. Lights when the solid state drive (SSD) is in use. System Status (On both the front and back panels) Lights blue when the system hardware is operating normally. Possible NIC card failure. Contact Riverbed Support at https:/ /support. Contact Riverbed Support at https:/ /support. System ID Button (On both the front and back panels) Enables you to locate a system within a rack. Lights orange when the system needs attention due to a problem. Blinks green = LAN or WAN link is active. Contact Riverbed Support at https://support. Possible USB failure. Contact Riverbed Support at https://support.com.com. Disconnect Bypass Solid green = LAN or WAN link is in disconnect mode. Contact Riverbed Support at https://support. The diagnostic lights are not lit after the system successfully boots to the operating system. Memory failure. the system status indicators on the front and back panels light blue until one of the buttons is pushed again.riverbed. Note: To determine the current status of the Management Console software. check the Management Console status bar. Contact Riverbed Support at https:// support.riverbed.riverbed.riverbed. system is in recovery mode.com.com.com. The system is in a normal operating condition after POST. Link/Activity Solid green = LAN or WAN link is up. Other failure. LED SYSTEM PRI = Primary AUX = Auxiliary REM = Remote LAN-WAN BYP/BLK BYP = Bypass BLK = Block (Disconnect) HDDs/SSDs Status Normal = Blue System Boot = Red Link and Traffic = Blinks Blue Link and Traffic = Blinks Blue Normal = No Light Bypass or Block (Disconnect) = Orange Disk Connected = Blue Read/Write Activity = Blinks Blue Failed Disk = Orange 64 Steelhead Appliance Installation and Configuration Guide .Series EX xx60 Technical Specifications 1U EX1160 Status Lights and Ports 1U EX1160 Status Lights and Ports The following figures illustrate the 1U EX1160 status lights and ports. Back Panel System LEDs The following table summarizes the 1U EX1160 system LEDs. Front Panel Figure A-4. Figure A-3. Back Panel Steelhead Appliance Installation and Configuration Guide 65 . Front Panel Figure A-6.2U EX1260 Status Lights and Ports Series EX xx60 Technical Specifications LED Back Panel PRI = Primary AUX = Auxiliary REM = Remote Status Left LED Link = Green Activity = Blinks Green Right LED GB = Orange 100 MB = Green (REM only at 100 MB) 10 MB = No Light Left LED Link = Green Activity = Blinks Green Right LED GB = Orange 100 MB = Green 10 MB = No Light BYP/BLK Normal = No Light Bypass or Block (Disconnect) = Orange Back Panel LAN-WAN 2U EX1260 Status Lights and Ports The following figures illustrate the 2U EX1260 status lights and ports. Figure A-5. Series EX xx60 Technical Specifications 2U EX1260 Status Lights and Ports System LEDs The following table summarizes the 2U EX xx60 system LEDs. LED SYSTEM PRI = Primary AUX = Auxiliary REM = Remote LAN-WAN BYP/BLK BYP = Bypass BLK = Block (Disconnect) HDDs/SSDs Status Normal = Blue System Boot = Red Link and Traffic = Blinks Blue Link and Traffic = Blinks Blue Normal = No Light Bypass or Block (Disconnect) = Orange Disk Connected = Blue Read/Write Activity = Blinks Blue Failed Disk = Orange Left LED Link = Green Activity = Blinks Green Right LED GB = Orange 100 MB = Green (REM only at 100 MB) 10 MB = No Light Left LED Link = Green Activity = Blinks Green Right LED GB = Orange 100 MB = Green 10 MB = No Light BYP/BLK Normal = No Light Bypass or Block (Disconnect) = Orange Back Panel PRI = Primary AUX = Auxiliary REM = Remote Back Panel LAN-WAN 66 Steelhead Appliance Installation and Configuration Guide . 4 mm Voltage PSU 295 BTU 100-127V.EX560 and EX760 Technical Specifications Series EX xx60 Technical Specifications EX560 and EX760 Technical Specifications The following table summarizes the physical and power specifications for the Series EX560 and EX760 hardware platform. 50-60 Hz 0. 200-240V 4 1.2 A 85 W Weight (without packaging ) 17.4 mm 17. 2-1 A 250 W 100-240Vac.058 kg 100-127V.52 x1.3 x 42.058 kg Bypass Ports/ Max # Ports 4 VA (max) 140 VA BTU HDD SSD 1 TB HDD 1 x 80 GB SSD Data Store 40 .2 A Power Requirements and Consumption Series EX560 and EX760 systems use a single 250 W internal power supply unit. The systems are rated at the following power characteristics when operating at nominal AC input voltages (120 V and 230 V).66 in 434.76 lbs 8.97 295 BTU/hr typical 230 V.3 x 42. 50-60 Hz 1.66 in 434. Power Series Amps EX560 1U L-M-H 1.70 GB 380 GB VSP 150 GB 380 GB VSP Dimensions (LxWxH) 17. 50/60Hz.52 x1.0 x 394.0 x 394.85 280 BTU/hr typical Steelhead Appliance Installation and Configuration Guide 67 .09 x 15. Power Characteristic Amperes (A) Power (W) 120 V. 2-1 A EX760 1U L-M-H 85 W 140 VA 295 BTU 1 TB HDD 1 x 160 GB SSD 17. 200-240V 250 W 100-240Vac. 50/60Hz.76 lbs 8.6 A maximum 135 W maximum 80 W typical 140 maximum 0.09 x 15.2 A maximum 135 W maximum 85 W typical Volts Amperes (V*A) Power factor (W/VA) Heat dissipation 140 maximum 0. 50/60Hz 4 4/4 EX1260-4 2U L/M/H/VH 8 x 1TB 2x 80GB SSDs VH=4 x 80GB SSD 150-300 GB 1860 GB VSP 25. 200-240V 12 x 450W 100-127Vac/ 8A.Series EX xx60 Technical Specifications EX560 with Granite Technical Specifications EX560 with Granite Technical Specifications The following table summarizes the physical and power specifications for the EX560G with the Granite option. 200-240V 2x 770W 100-127Vac/ 8A. 50/60Hz 200-240Vac/ 4A.2x1.36 kg 100-127V.40 x 39.66 x 17. Weight (without packaging ) 36 lbs / 16.2x3.71 in 645.4x17. 50/60Hz.43 cm Voltage PSU 295 BTU 100-127V. 2-1 A EX1160 and EX1260 Technical Specifications The following table summarizes the technical specifications for the Series EX1160 and EX1260 hardware platform. 200-240V 250 W 100-240Vac.4x17. 50/60Hz EX1260-2 2U L/M/H/VH 4 x 1TB 2x 80GB SSDs VH=4x 80GB SSD 150-300 GB 860GB VSP 25.2x3. Power Series Amps EX560G 1U + Granite License L/M/H 1.36 kg Onboard Bypass Ports/Max # Ports 4/4 Series HDD SSD 2 x 1TB 2x 80GB SSDs VH=2x 160GB SSD Data Store 150-300 GB 415GB VSP Dimensions (LxWxH) 25.058 kg Bypass Ports/ Max # Ports 4 VA (max) 140 VA BTU HDD SSD 1 TB HDD 1 80 GB SSD Block Store 380 GB Dimensions (LxWxH) 1.4x436x87.2 A 85 W Weight (without packaging ) 17. 50/60Hz 4 4/4 68 Steelhead Appliance Installation and Configuration Guide .4x436x87.43 in 645. 50/60Hz 200-240Vac/ 4A.76 lbs 8.1 mm 58 lbs / 23.1 mm 58 lbs / 23.52 in 4. 200-240V 2x 770W 100-127Vac/ 8A.43 in 645. 50/60Hz 200-240Vac/ 4A.24 x 43.09 x 15.4x436x43.4x17.36 kg 100-127V.5 mm Voltage PSU PCIe Slots 2 EX1160 1U L/M/H/VH 100-127V. EX1160 and EX1260 with Granite Technical Specifications Series EX xx60 Technical Specifications EX1160 and EX1260 with Granite Technical Specifications The following table summarizes the technical specifications for the Series EX1160G and EX1260G with the Granite option. Weight (without packaging) 36lbs / 16.36 kg Onboard Bypass Ports/Max # Ports 4/4 Series HDD SSD 2 x 1TB 2x 80GB SSDs Block Store 760GB Dimensions (LxWxH) 25.4x17.2x1.71 in 645.4x436x43.5 mm Voltage PSU PCIe Slots 2 EX1160G 1U + Granite License L/M/H 100-127V, 200-240V 12 x 450W 100-127Vac/ 8A, 50/60Hz 200-240Vac/ 4A, 50/60Hz EX1260-2G 2U + Granite License L/M/H/VH 4 x 1TB 2x 80GB SSDs VH=4x 80GB SSD 8 x 1TB 2x 80GB SSDs VH=4x 80 GB SSD 1580 GB 25.4x17.2x3.43 in 645.4x436x87.1 mm 58 lbs / 23.36 kg 100-127V, 200-240V 2x 770W 100-127Vac/ 8A, 50/60Hz 200-240Vac/ 4A, 50/60Hz 4 4/4 EX1260-4G 2U + Granite License L/M/H/VH 3575 GB 25.4x17.2x3.43 in 645.4x436x87.1 mm 58 lbs / 23.36 kg 100-127V, 200-240V 2x 770W 100-127Vac/ 8A, 50/60Hz 200-240Vac/ 4A, 50/60Hz 4 4/4 EX1160 and EX1260 Power Requirements and Consumption The following table summarizes the power specifications for the EX1160 and EX1260 systems. The systems are rated at the following power characteristics when operating at nominal AC input voltages (120 V and 230 V). System EX1160 All (L/M/H/ VH/+G) 2 x 450W 120V 4.1 220 175 EX1160 All (L/M/H/VH/ +G) 2 x 450W 230V 3.4 220 180 EX1260 w/4 HDD All (L/M/H/VH/ +G) 2 x 770W 120V 4.5 415 330 EX1260 w/4 HDD All (L/M/H/VH/ +G) 2 x 770W 230V 2.1 400 320 EX1260 w/8 HDD All (L/M/H/VH/ +G) 2 x 770W 120V 5.2 440 355 EX1260 w/8 HDD All (L/M/H/VH/ +G) 2 x 770W 230V 3.2 430 345 Configuration PSU Type AC Input Max. Amps. Max. Watts Typical Watts Steelhead Appliance Installation and Configuration Guide 69 Series EX xx60 Technical Specifications CPU Specifications System EX1160 All (L/M/H/ VH/+G) 2 x 450W 120V 225 97 605 EX1160 All (L/M/H/VH/ +G) 2 x 450W 230V 265 92 610 EX1260 w/4 HDD All (L/M/H/VH/ +G) 2 x 770W 120V 419 98 1130 EX1260 w/4 HDD All (L/M/H/VH/ +G) 2 x 770W 230V 490 94 1190 EX1260 w/8 HDD All (L/M/H/VH/ +G) 2 x 770W 120V 445 97 1215 EX1260 w/8 HDD All (L/M/H/VH/ +G) 2 x 770W 230V 515 94 1175 Configuration PSU Type AC Input Max VA Power Factor BTU (Typical) CPU Specifications The following table describes the CPU specifications for the xx60 series models: Size 1U 1U 1U 2U Model EX 560 EX 760 EX 1160 EX 1260 Minimum CPU 1 x 4 cores 3.1 GHz 1 x 4 cores 3.1 GHz 2 x 4 cores 2.2 GHz 2 x 6 cores 2.6 GHz VSP and Granite Memory and Storage Specifications This section details the memory and storage specifications for xx60 Models. It includes the following sections:   “VSP Memory Specifications,” next “VSP and Granite Storage Specifications” on page 71 VSP Memory Specifications The following table describes the RAM available on xx60 model appliances with and without Granite branch storage licensed. GB of RAM Without Granite Licensed Appliance Model and Configuration Shipped RAM EX560 L/M/H EX760 L/M/H 8 16 Available to VSP 2 6 GB of RAM With Granite Licensed Available to VSP in VSP-Only Mode 9.25 8.25 Available to VSP in Mixed VSP/Granite Mode 7 6 Shipped RAM 16 16 70 Steelhead Appliance Installation and Configuration Guide VSP and Granite Memory and Storage Specifications Series EX xx60 Technical Specifications GB of RAM Without Granite Licensed Appliance Model and Configuration Shipped RAM EX1160 L/M/H EX1160 VH EX1260-2 L/M/H EX1260-2 VH EX1260-4 L/M/H 16 24 — — — Available to VSP 8 10 — — — GB of RAM With Granite Licensed Available to VSP in VSP-Only Mode 11.5 13.5 15 (upgradeable to 23) 11 (upgradeable to 19) 22.5 (upgradeable to 54.5) Available to VSP in Mixed VSP/Granite Mode 8 10 9 (upgradeable to 17) 5 (upgradeable to 13) 12 (upgradeable to 43) Shipped RAM 20 24 24 (upgradeable to 32) 24 (upgradeable to 32) 32 (upgradeable to 64) EX1260-4 VH — — 32 (upgradeable to 64) 18.5 (upgradeable to 50.5) 8 (upgradeable to 40) VSP and Granite Storage Specifications The following table describes the possible disk space allocations between VSP and Granite on xx60 model appliances. Series EX xx60 G models are Granite-dedicated target mode appliances and do not support VSP. GB of Disk Space Allocated for Granite Storage and for VSP Functionality Appliance Model and Configuration EX560 G EX560/760 EX1160 G EX1160 EX1260-2 G EX1260-2 EX1260-4 G EX1260-4 Granite-Only Allocation Granite 380 380 760 760 1580 1580 3575 3575 VSP 0 0 0 0 0 0 0 0 VSP-Only Allocation Granite Not Supported 0 Not Supported 0 Not Supported 0 Not Supported 0 VSP Not Supported 380 Not Supported 415 Not Supported 860 Not Supported 1860 Mixed VSP/Granite Allocation Granite Not Supported 190 Not Supported 275 Not Supported 575 Not Supported 1230 VSP Not Supported 190 Not Supported 275 Not Supported 575 Not Supported 1230 Steelhead Appliance Installation and Configuration Guide 71 5 dBa Sound Pressure (Typical) Temperature (Operating) 10º .65º C -40º .Series EX xx60 Technical Specifications Environmental Specifications Important: You need a granite license for Granite-only allocations. for VSP-only allocations.40º C 50° .104º F 10º .149º F -40º .95º F 10º .10.80% non-condensing 20% .95º F Temperature (Storage) -40º . Environmental Specifications The following table summarizes the environmental requirements for the EX Series xx60.80% non-condensing 20% .000‘ -15.80% non-condensing Storage Humidity 5% .24 m .24 m .3048 m EX1260 72 Steelhead Appliance Installation and Configuration Guide .149º F -40º .24 m .95% non-condensing Operating Altitude -50’ .5 dBA Sound Pressure (Typical) 65.40º C 50° .65º C -40º . and to access the disk space allocated for Granite storage in a mixed allocation.000’ -15.65º C -40º .149º F Relative Humidity 20% .3048 m -50’ .10.3048 m -50’ .95% non-condensing 5% .95% non-condensing 5% .40º C 50° . EX760 EX1160 Operating Acoustic 50 dBA Sound pressure (Typical) 61.000’ -15. Model EX560.10. overview of 11 Auxiliary port. definition of 30 D Data Streamlining. diagram of 27 Out-of-path. 45 WAN port to WAN router. 41 Connecting LAN switch to LAN port. diagram of 26 Physical in-path. overview of 12 Auto-discovery. overview of 12 In-path. illustration of 37. definitions of 30 Steelhead Appliance Installation and Configuration Guide 73 . required 29 configuration jump-start command. connecting to 37 O Online documentation 6 Online notes 5 Out-of-path deployment. 47 powering on 31 Appliance ports. connecting 37 Logical in-path WCCP deployment. definitions of 30 Application Streamlining. overview of 12 Discard rules. overview of 10 N Network. overview of 12 Physical in-path deployment. enhanced. definition of 30 LAN switch. diagram of 26 Login page 40 M Management Streamlining. illustration of 37 Primary port to LAN switch. overview of 13 Fixed-target rules. configuring 45 CMC compatibility 3 CMC. illustration of 38 Console port. checking your settings 42 E Environmental specifications 72 Error 4294967295 57 Ethernet network compatibility 4 F Fail-to-block mode overview of 13 Failure modes fail-to-block. restarting the wizard 34 Configuration wizard about 33 restarting 34 Configuration. overview of 12 Peering rules. connecting 31 Appliance connecting to 32 installing 25. overview of 26 Ports. configuring 42 P Pass-through rules.Index A AC power. definition of 12 C Client-side appliance. overview of 10 Deny rules. verifying 38. overview of 12 I In-Path rules. definition of 30 B Blocked traffic in bypass mode 57 Boot failure 58 Bypass cards errors on 57 interface naming convention 30 Bypass mode troubleshooting 58 troubleshooting for 57 Bypass mode. configuring 33 Interface naming convention 30 K Known issues 6 L LAN port. overview of 10 Configuration information. overview of 10 Auto-discovery rule. contacting 7 Duplex and speed. overview of 12 Documentation. overview of 10 Auto-Discovery process. contacting 6 Traffic. detailed 71 Preparing your site 28 Primary port. overview of 26 Virtual Services Platform. connecting 37 Primary port. overview of 10 SDR. EX1250 70. contacting 6 R Release notes 5 Required equipment 28 S Safety guidelines 6 Scalable Data Referencing. restarting 34 74 Index . blocked in bypass mode 57 Transport Streamlining. overview of 10 SNMP compatibility 4 Speed and duplex. connecting 38 WAN port. about 33 Wizard. 71 EX560. support for 3 VMware Server 13 W WAN port. overview of 10 V Virtual in-path deployments. checking your settings 42 Status lights and ports EX560. definition of 30 WAN router.Index Power specifications. EX760 69 Technical support. overview of 10 T Technical specifications EX1160. definition of 30 Product inventory 27 Professional services. disconnecting 37 Wizard. EX760 63 Steelhead Mobile Controller.
Copyright © 2024 DOKUMEN.SITE Inc.