Configuring Site B's Appliance

220 Pages·2010·10.23 MB·English

Silver Peak
NX Series Appliances
Network Deployment Guide
Release 3.3
October 2010
PN 200059-001 Rev H
Silver Peak NX Series Appliances Network Deployment Guide
Silver Peak NX Series Appliances Network Deployment Guide
Document PN 200059-001 Rev H
Date: October 2010
Copyright © 2005–2010 Silver Peak Systems, Inc. All rights reserved. Information in this document is subject to change at any time.
Use of this documentation is restricted as specified in the End User License Agreement. No part of this documentation can be
reproduced, except as noted in the End User License Agreement, in whole or in part, without the written consent of Silver Peak
Systems, Inc.
Trademark Notification
Silver Peak SystemsTM, the Silver Peak logo, Network MemoryTM, and Silver Peak NX-SeriesTM are trademarks of Silver Peak
Systems, Inc. All trademark rights reserved. All other brand or product names are trademarks or registered trademarks of the
respective companies or organizations.
Warranties and Disclaimers
THIS DOCUMENTATION IS PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE, OR NON-INFRINGEMENT. SILVER PEAK SYSTEMS, INC. ASSUMES NO RESPONSIBILITY FOR ERRORS OR
OMISSIONS IN THIS DOCUMENTATION OR OTHER DOCUMENTS WHICH ARE REFERENCED BY OR LINKED TO THIS
DOCUMENTATION. REFERENCES TO CORPORATIONS, THEIR SERVICES AND PRODUCTS, ARE PROVIDED “AS IS”
WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED. IN NO EVENT SHALL SILVER PEAK SYSTEMS, INC.
BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND, OR ANY DAMAGES
WHATSOEVER, INCLUDING, WITHOUT LIMITATION, THOSE RESULTING FROM LOSS OF USE, DATA OR PROFITS,
WHETHER OR NOT ADVISED OF THE POSSIBILITY OF DAMAGE, AND ON ANY THEORY OF LIABILITY, ARISING OUT OF OR
IN CONNECTION WITH THE USE OF THIS DOCUMENTATION. THIS DOCUMENTATION MAY INCLUDE TECHNICAL OR OTHER
INACCURACIES OR TYPOGRAPHICAL ERRORS. CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN;
THESE CHANGES WILL BE INCORPORATED IN NEW EDITIONS OF THE DOCUMENTATION. SILVER PEAK SYSTEMS, INC.
MAY MAKE IMPROVEMENTS AND/OR CHANGES IN THE PRODUCT(S) AND/OR THE PROGRAM(S) DESCRIBED IN THIS
DOCUMENTATION AT ANY TIME.
Silver Peak Systems, Inc.
4500 Great America Parkway, Suite 100
Santa Clara, CA 95054
1.877.210.7325 (toll-free in USA)
+1.408.935.1850
www.silver-peak.com/support
ii PN 200059-001 Rev H
Contents
Contents
Preface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
Who Should Read This Manual?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
Manual Organization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
Related Publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .viii
Technical Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .ix
Chapter 1 Fundamentals of Deploying WAN Optimization . . . . . . . . . . . . . . . . . . . 1
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
BASICS: Determining Which Flows to Optimize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
BASICS: Specifying How to Optimize the Flows. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
QoS Maps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Optimization Maps. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
SPECIALIZED: Asymmetric Networks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Asymmetrical Networks and Flows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Removing Asymmetry with Flow Redirection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
SPECIALIZED: Configuring Flow Redirection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
SPECIALIZED: High Availability . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Auto-optimization or Explicit Route Maps? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
High Availability with Auto-Optimization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
High Availability with Explicit Route-Maps. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
Considerations for Deployments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Chapter 2 Selecting a Silver Peak Deployment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Choosing a Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Step-by-Step Procedures for Ease of Use . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Ethernet Interfaces and IP Addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Definition of Terms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Typical Network Deployments. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
In-Line Deployment (Bridge Mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Out-of-Path Deployments (Router Mode) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Verifying Connectivity after Configuring Deployment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
ping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
ping -r [or ping -R]: ping with Record Route option. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
Basic procedure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Chapter 3 In-Line Deployment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Network Diagram. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Summary of Initial Configuration Tasks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Collecting the Necessary Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Using the Initial Config Wizard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Verifying Appliance Connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
Creating a Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Creating a Route Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47
Configuring the Remote Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Verifying Connectivity for Tunnel and Pass-Through Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
PN 200059-001 Rev H iii
Silver Peak NX Series Appliances Network Deployment Guide
Chapter 4 Out-of-Path with Policy-Based-Routing Redirection . . . . . . . . . . . . . . 51
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Network Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Summary of Initial Configuration Tasks. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
Collecting the Necessary Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Using the Initial Config Wizard with SiteA’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Verifying Connectivity for SiteA’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
Configuring the Router for Policy-Based Routing (PBR). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Configuring PBR with Tracking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
Configuring SiteA’s Appliance: Tunnel and Route Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Creating a Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Creating a Route Policy Entry. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Using the Initial Config Wizard with SiteB’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Verifying Connectivity for SiteB’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
Configuring SiteB’s Appliance: Tunnel and Route Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Verifying Connectivity for Tunnel and Pass-Through Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 68
Chapter 5 Out-of-Path with WCCP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Network Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
Summary of Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
Collecting the Necessary Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Configuring the Site A Router for WCCP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Using the Initial Config Wizard with SiteA’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
Verifying Connectivity for SiteA’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Configuring WCCP on SiteA’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
Configuring SiteA’s Appliance: Tunnel and Route Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Creating a Tunnel from Site A to Site B. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Creating a Route Policy Entry. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Using the Initial Config Wizard with SiteB’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
Verifying Connectivity for SiteB’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 90
Configuring SiteB’s Appliance: Tunnel and Route Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Creating a Tunnel from Site B to Site A. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
Creating a Route Policy Entry. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Verifying Tunnel Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
Verifying Connectivity for Tunnel and Pass-Through Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Tips for Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
GRE and L2 Redirection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 98
Chapter 6 Out-of-Path with VRRP Peering to a WAN Router. . . . . . . . . . . . . . . . 101
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
Network Diagram. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102
Summary of Initial Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104
Collecting the Necessary Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Using the Initial Config Wizard with SiteA’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 106
Verifying Connectivity for SiteA’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Configuring VRRP on Site A’s Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108
Configuring the Router for VRRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110
Using the Initial Config Wizard with SiteB’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Verifying Connectivity for Site B’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112
Configuring SiteA’s Appliance: Tunnel and Route Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Creating a Tunnel from Site A to Site B. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Creating a Route Policy Entry. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Configuring SiteB’s Appliance: Tunnel and Route Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
iv PN 200059-001 Rev H
Contents
Creating a Tunnel from Site B to Site A . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Creating a Route Policy Entry. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122
Verifying Tunnel Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124
Verifying Connectivity for Tunnel and Pass-Through Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125
Chapter 7 Out-of-Path with PBR and
VRRP Redundant Silver Peak Appliances . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
Network Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128
Summary of Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 130
Collecting the Necessary Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
Using the Initial Config Wizard with A1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 133
Verifying Connectivity for A1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
Using the Initial Config Wizard with A2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 135
Verifying Connectivity for A2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
Configuring High Availability for A1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
Configuring A2 for Redundancy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
Configuring Flow Redirection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 141
Using the Initial Config Wizard with B . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145
Verifying Connectivity for Site B’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146
Configuring A1’s Tunnel and Route Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
Creating a Tunnel from A1 to B. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
Creating A1’s Route Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149
Configuring A2’s Tunnel and Route Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152
Configuring Site B’s Appliance for Redundancy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 152
Creating Site B Appliance Tunnels . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153
Creating the Site B Appliance Route Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 154
Configuring the Router for Policy-Based Routing (PBR). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 158
Verifying Tunnel Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159
Verifying Connectivity for Tunnel and Pass-Through Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160
Chapter 8 Out-of-Path with WCCP Redundant (Active/Active) Appliances. . . 163
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
Two Site A Appliances. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
A Single Site B Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
Network Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165
Collecting the Necessary Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169
Configuring the Site A Router for WCCP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170
Using the Initial Config Wizard with A1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
Verifying Connectivity for A1. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 172
Configuring WCCP on A1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173
Configuring A1’s Tunnel and Route Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
Creating a Tunnel from A1 to B. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180
Creating A1’s Route Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181
Using the Initial Config Wizard with A2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184
Verifying Connectivity for A2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185
Configuring WCCP on A2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186
Configuring A2’s Tunnel and Route Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 187
Using the Initial Config Wizard with B . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188
Verifying Connectivity for SiteB’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 189
Configuring Flow Redirection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190
Configuring SiteB’s Appliance for Redundancy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
Configuring Site B’s Tunnel and Route Policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
Creating SiteB’s Appliance Tunnels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
Creating SiteB’s Appliance Route Policy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196
PN 200059-001 Rev H v
Silver Peak NX Series Appliances Network Deployment Guide
Verifying Tunnel Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199
Verifying Connectivity for Tunnel and Pass-Through Traffic . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 200
Best Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202
Tips for Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202
GRE and L2 Redirection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 202
Appendix A Deployment Planning Aids . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205
Configuration Worksheet (Generic). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 206
Additional Worksheet for High Availability Configurations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 207
vi PN 200059-001 Rev H
Preface
Welcome to the Silver Peak NX Series Appliances Network Deployment Guide. Read the Preface to
understand the target audience, the manual’s organization, related documents, and how to contact
Customer Support.
Who Should Read This Manual?
This guide is written for network administrators who are familiar with administering and managing
networks.
Specifically, this guide provides an overview and summary of the most common deployment scenarios,
followed by detailed and illustrated procedures for configuring and verifying each deployment. Because
each enterprise’s network topologies and needs can differ, the network administrator needs to evaluate
the environment and choose the deployment that best serves their needs. Silver Peak Systems’ support
personnel are available to help you determine the best course of action.
Because of this focus, this manual assumes that you are already familiar with the material covered in the
Silver Peak NX Series Appliances Operator’s Guide. This includes basic installation procedures and how
to use the Appliance Manager.
Manual Organization
This section outlines the chapters and summarizes their content.
To keep things simple, we illustrate the examples with the typical in-line deployment in Site B offices
and out-of-path deployment at Site A. However, Site B offices are not restricted to in-line deployment,
nor is Site A restricted to out-of-path deployments.
Chapter1, “Fundamentals of Deploying WAN Optimization,” describes some of the fundamental
concepts of deploying WAN acceleration in enterprise networks. It provides an overview and
introduction to common installation models, pros and cons of each, and recommendations.
Chapter2, “Selecting a Silver Peak Deployment,” provides a summarized overview of the typical
network deployments for the Silver Peak NX Series appliances. It also provides definitions of the
common interfaces and terms used.
Chapter3, “In-Line Deployment,” describes the procedures for an in-line deployment where the Silver
Peak Appliance sits between the WAN router and the Ethernet switch.
Chapter4, “Out-of-Path with Policy-Based-Routing Redirection,” describes the procedures for a
scenario that deploys the Site B location in-line and the Site A network out-of-path with an available
spare router port and uses Policy-Based Routing (PBR) on the WAN router to redirect traffic to the Silver
Peak appliance.
Chapter5, “Out-of-Path with WCCP,” describes the procedures for setting up Web Cache Coordination
Protocol (WCCP) service. The example uses a Cisco router paired with a single Silver Peak appliance
deployed out-of-path (Router mode).
vii
Silver Peak NX Series Appliances Network Deployment Guide Related Publications
Chapter6, “Out-of-Path with VRRP Peering to a WAN Router,” describes the procedures for a scenario
where the Silver Peak appliance uses the Virtual Router Redundancy Protocol (VRRP) to peer with the
existing router, when no spare router port is available.
Chapter7, “Out-of-Path with PBR and VRRP Redundant Silver Peak Appliances,” describes the
procedures for setting up high availability. In this example, Site A deploys a primary and a secondary
appliance out-of-path (Router mode), and the Site B location deploys the appliance in-line (Bridge
mode). Additionally, the peered Site A appliances use the Virtual Router Redundancy Protocol (VRRP)
to create and share a common IP address, called the Virtual IP address (VIP).
Chapter8, “Out-of-Path with WCCP Redundant (Active/Active) Appliances,” describes the procedures
for setting up high availability by using Web Cache Coordination Protocol with a Cisco router and
redundant Silver Peak appliances in an out-of-path deployment.
AppendixA, “Deployment Planning Aids,” provides a blank Configuration Worksheet where you can
collect the IP addresses and other data needed for configuring the appliance(s) and deployment.
Related Publications
Refer to the following related publications for more knowledge:
Document Part Number
Manuals Silver Peak NX Series Appliances Operator’s Guide 200030-001
Silver Peak Command Line Interface Reference Guide 200063-001
Silver Peak Global Management System User’s Guide 200095-001
Mount Rack Mount Instructions: 3-RU with rails 200258-001
Instructions
Rack Mount Instructions: 1-RU with rails 200259-001
Rack Mount Instructions: 1-RU without rails 200260-001
Rack Mount Instructions: 3-RU with rails – 200282-001
NX-9610-8600-7600-5600
Rack Mount Instructions: 2-RU with rails – NX-3600 200371-001
Rack Mount Instructions: ear mount - NX-1700 200450-001
Desk / Wall Mount Instructions: NX-1700 200461-001
Rack Mount Instructions: 2_RU with rails – 200486-001
NX-9700/8700/7700/5700/3700/2700
Quick Start GX-1000 Appliance Quick Start Guide 200080-001
Guides
NX Series Appliances Quick Start Guide 200257-001
Quick Start Guide – VX Virtual Appliance with VMware ESX/ESXi 200469-001
Quick Start Guide – GX-V Virtual GMS Server – VMware ESX/ESXi 200471-001
System VX Host System Requirements 200468-001
Requirements
GX-V Host System Requirements 200476-001
Release Notes Check www.silver-peak.com/support for the latest version.
viii PN 200059-001 Rev H
Technical Support Preface
Technical Support
For product and technical support, contact Silver Peak Systems at either of the following:
• 1.877.210.7325 (toll-free in USA)
• +1.408.935.1850
• www.silver-peak.com/support
We’re dedicated to continually improving the usability of our products and documentation.
 If you have suggestions or feedback for our documentation, please send an e-mail to
[email protected].
 If you have comments or feedback about the GUI’s ease of use, please send an e-mail to
[email protected].
ix
Silver Peak NX Series Appliances Network Deployment Guide Technical Support
x PN 200059-001 Rev H