Interceptor Appliance User Guide version 4.0.1

156 Pages·2013·2.01 MB·English

by  Riverbed Technical Publications

®
Interceptor Appliance User’s Guide
Version 4.0.1
July 2013
© 2013 Riverbed Technology. All rights reserved.
Riverbed®, Cloud Steelhead®, Granite™, Interceptor®, RiOS®, Steelhead®, Think Fast®, Virtual Steelhead®, Whitewater®,
Mazu®, Cascade®, Shark®, AirPcap®, BlockStream™, SkipWare®, TurboCap®, WinPcap®, Wireshark®, TrafficScript®,
FlyScript™, WWOS™, and Stingray™ are trademarks or registered trademarks of Riverbed Technology, Inc. in the United States
and other countries. Riverbed and any Riverbed product or service name or logo used herein are trademarks of Riverbed
Technology. All other trademarks used herein belong to their respective owners. The trademarks and logos displayed herein
cannot be used without the prior written consent of Riverbed Technology or their respective owners.
Akamai® and the Akamai wave logo are registered trademarks of Akamai Technologies, Inc. SureRoute is a service mark of
Akamai. Apple and Mac are registered trademarks of Apple, Incorporated in the United States and in other countries. Cisco is a
registered trademark of Cisco Systems, Inc. and its affiliates in the United States and in other countries. EMC, Symmetrix, and
SRDF are registered trademarks of EMC Corporation and its affiliates in the United States and in other countries. IBM, iSeries, and
AS/400 are registered trademarks of IBM Corporation and its affiliates in the United States and in other countries. Linux is a
trademark of Linus Torvalds in the United States and in other countries. Microsoft, Windows, Vista, Outlook, and Internet
Explorer are trademarks or registered trademarks of Microsoft Corporation in the United States and in other countries. Oracle and
JInitiator are trademarks or registered trademarks of Oracle Corporation in the United States and in other countries. UNIX is a
registered trademark in the United States and in other countries, exclusively licensed through X/Open Company, Ltd. VMware,
ESX, ESXi are trademarks or registered trademarks of VMware, Incorporated in the United States and in other countries.
This product includes software developed by the University of California, Berkeley (and its contributors), EMC, and Comtech
AHA Corporation. This product is derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm.
NetApp Manageability Software Development Kit (NM SDK), including any third-party software available for review with such
SDK which can be found at http://communities.netapp.com/docs/DOC-1152, and are included in a NOTICES file included
within the downloaded files.
For a list of open source software (including libraries) used in the development of this software along with associated copyright
and license agreements, see the Riverbed Support site at https//support.riverbed.com.
This documentation is furnished “AS IS” and is subject to change without notice and should not be construed as a commitment
by Riverbed Technology. This documentation may not be copied, modified or distributed without the express authorization of
Riverbed Technology and may be used only in connection with Riverbed products and services. Use, duplication, reproduction,
release, modification, disclosure or transfer of this documentation is restricted in accordance with the Federal Acquisition
Regulations as applied to civilian agencies and the Defense Federal Acquisition Regulation Supplement as applied to military
agencies. This documentation qualifies as “commercial computer software documentation” and any use by the government shall
be governed solely by these terms. All other use is prohibited. Riverbed Technology assumes no responsibility or liability for any
errors or inaccuracies that may appear in this documentation.
Riverbed Technology
199 Fremont Street
San Francisco, CA 94105
Phone: [phone]
Fax: [phone] Part Number
Web: http://www.riverbed.com 712-00008-11
Contents
Preface.........................................................................................................................................................1
About This Guide..........................................................................................................................................1
Audience..................................................................................................................................................1
Document Conventions.........................................................................................................................2
Product Dependencies and Compatibility.................................................................................................2
Hardware and Software Dependencies...............................................................................................3
Steelhead Appliance Compatibility.....................................................................................................3
Ethernet Network Compatibility.........................................................................................................3
SNMP-Based Management Compatibility..........................................................................................4
Antivirus Compatibility........................................................................................................................4
Additional Resources....................................................................................................................................5
Release Notes..........................................................................................................................................5
Riverbed Documentation and Support Knowledge Base.................................................................5
Contacting Riverbed......................................................................................................................................5
Internet.....................................................................................................................................................5
Technical Support...................................................................................................................................6
Professional Services..............................................................................................................................6
Documentation........................................................................................................................................6
Chapter 1 - Overview of the Interceptor Management Console.............................................................7
Connecting to the Interceptor Management Console...............................................................................7
Home Page...............................................................................................................................................9
Interceptor Appliance Command-Line Interface....................................................................................12
Navigating in the Interceptor Management Console.............................................................................13
Basic Procedures..........................................................................................................................................15
Saving Your Configuration.................................................................................................................15
Printing Pages and Reports.................................................................................................................15
Restarting the Interceptor Service......................................................................................................15
Logging Out..........................................................................................................................................15
Next Steps.....................................................................................................................................................16
Getting Help.................................................................................................................................................16
Interceptor Appliance User’s Guide iii
Contents

Displaying Online Help.......................................................................................................................17
Chapter 2 - Configuring the Interceptor Appliance...............................................................................19
Configuring Network Settings...................................................................................................................19
Configuring Host Settings...................................................................................................................20
Configuring the Base Interfaces.........................................................................................................24
Configuring In-Path Interfaces...........................................................................................................27
Configuring VLAN Segregation.........................................................................................................35
Configuring WCCP..............................................................................................................................37
Setting Port Labels................................................................................................................................42
Configuring Interceptor-to-Interceptor Communication...............................................................45
Configuring Interceptor-to-Steelhead Communication..................................................................53
Configuring the Xbridge Feature.......................................................................................................60
Configuring Optimization and Load Balancing......................................................................................61
Overview of Configuring Traffic Redirection...................................................................................61
Configuring General Service Settings (Standard Mode)................................................................64
Configuring In-Path Rules..................................................................................................................65
Setting Load-Balancing Rules.............................................................................................................67
Setting Connection Tracing Rules......................................................................................................74
Configuring Hardware Assist Rules (Standard Mode only)..........................................................75
Configuring System Settings......................................................................................................................78
Creating Announcements....................................................................................................................79
Setting Alarm Parameters...................................................................................................................80
Setting SNMP Parameters and Trap Receivers................................................................................82
Creating SNMP v3 Users.....................................................................................................................84
Configuring Authentication and Access Control............................................................................86
Setting Up Email Notifications...........................................................................................................90
Configuring Logging...........................................................................................................................91
Configuring Security Settings....................................................................................................................96
Configuring General Security Settings..............................................................................................96
Managing User Permissions...............................................................................................................97
Configuring RADIUS Server Authentication...................................................................................98
Configuring TACACS+ Server Authentication..............................................................................100
Configuring Management ACL Rules.............................................................................................102
Configuring Web Settings.................................................................................................................105
Maintaining Your System.........................................................................................................................107
Starting, Stopping, and Restarting the Service...............................................................................107
Displaying Scheduled Jobs and Job Status.....................................................................................108
Managing Licenses.............................................................................................................................109
Upgrading Your Software.................................................................................................................111
Rebooting and Shutting Down the Interceptor Appliance...........................................................112
Changing the Administrative Password................................................................................................113
Managing Configuration Files.................................................................................................................113
Chapter 3 - Displaying and Customizing Reports...............................................................................117
Displaying the Interface and In-Path Counters Reports......................................................................117
iv Interceptor Appliance User’s Guide
Contents
Displaying the Interface Counters Report......................................................................................117
The In-Path Counters Report (VLAN segregation mode)............................................................119
Displaying Diagnostics Reports..............................................................................................................120
Displaying Alarm Status Reports.....................................................................................................121
Displaying Connection Tracing Reports.........................................................................................124
Displaying CPU Utilization Reports................................................................................................125
Displaying Memory Paging Reports...............................................................................................126
Viewing Logs.......................................................................................................................................127
Downloading Logs.............................................................................................................................131
Viewing the System Dumps List......................................................................................................132
Viewing the Process Dumps List......................................................................................................133
Viewing the TCP Dumps List...........................................................................................................133
Exporting Report Data..............................................................................................................................137
Appendix A - Interceptor MIB................................................................................................................139
Accessing MIB Files...................................................................................................................................139
SNMP Traps................................................................................................................................................140
Index........................................................................................................................................................147
Interceptor Appliance User’s Guide v
Contents

vi Interceptor Appliance User’s Guide
Preface
Welcome to the Interceptor Appliance User’s Guide. Read this preface for an overview of the information
provided in this guide and the documentation conventions used throughout, hardware and software
dependencies, additional reading, and contact information. This preface includes the following sections:
 “About This Guide” on page1
 “Product Dependencies and Compatibility” on page2
 “Additional Resources” on page5
 “Contacting Riverbed” on page5
About This Guide
The Interceptor Appliance User’s Guide describes how to configure and monitor the Interceptor appliance
using the Management Console.
This guide includes information relevant to the following products:
 Riverbed Interceptor appliance (Interceptor appliance)
 Riverbed Optimization System (RiOS)
 Riverbed Steelhead appliance (Steelhead appliance)
Audience
This guide is written for storage and network administrators familiar with administering and managing
WANs using common network protocols such as TCP, CIFS, HTTP, FTP, and NFS.
You must also be familiar with administering and managing a network of deployed Steelhead appliances
as described in the Steelhead Appliance Installation and Configuration Guide.
Interceptor Appliance User’s Guide 1
Preface Product Dependencies and Compatibility

Document Conventions
This guide uses the following standard set of typographical conventions.
Convention Meaning
italics Within text, new terms and emphasized words appear in italic typeface.
boldface Within text, CLI commands and GUI controls appear in bold typeface.
Courier Code examples appear in Courier font:
amnesiac > enable
amnesiac # configure terminal
< > Values that you specify appear in angle brackets:
interface <ipaddress>
[ ] Optional keywords or variables appear in brackets:
ntp peer <addr> [version <number>]
{ } Required keywords or variables appear in braces:
{delete <filename> | upload <filename>}
| The pipe symbol represents a choice between the keyword or variable to the left or right of
the symbol (the keyword or variable can be either optional or required):
{delete <filename> | upload <filename>}
Product Dependencies and Compatibility
This section provides information about product dependencies and compatibility. It includes the following
information:
 “Hardware and Software Dependencies” on page3
 “Steelhead Appliance Compatibility” on page3
 “Ethernet Network Compatibility” on page3
 “SNMP-Based Management Compatibility” on page4
 “Antivirus Compatibility” on page4
2 Interceptor Appliance User’s Guide
Product Dependencies and Compatibility Preface
Hardware and Software Dependencies
The following tables summarize the hardware and software requirements for the Interceptor appliance.

Riverbed Component Hardware and Software Requirements
Interceptor appliance 19-inch (483 mm) two- or four-post rack.
Interceptor Management Console Any computer that supports a Web browser with a color image
display.
The Management Console has been tested with Mozilla Firefox
v3.6 and Microsoft Internet Explorer v7 and v8.
JavaScript and cookies must be enabled in your Web browser.

Riverbed CLI Hardware Requirements Software and Operating System Requirements
One of the following: Secure Shell (ssh). Free ssh clients include PuTTY for Windows
computers, OpenSSH for many UNIX and UNIX-like operating
(cid:129) An ASCII terminal or emulator that can
systems, and Cygwin.
connect to the serial console (9600 baud, 8
bits, no parity, 1 stop bit, and no flow
control)
(cid:129) A computer with a Secure Shell (ssh) client
that is connected by an IP network to the
appliance primary interface
Steelhead Appliance Compatibility
The Interceptor appliance is compatible with Steelhead appliance version 6.5.x and later. However, to use
VLAN segregation with more than 24 VLAN interfaces per instance, Riverbed recommends Steelhead
appliances running RiOS 8.0.1 or higher.
Ethernet Network Compatibility
The Interceptor appliance supports the following Ethernet networking standards:
 Ethernet Logical Link Control (LLC) (IEEE 802.2 - 1998)
 Fast Ethernet 100 Base-TX (IEEE 802.3 - 2008)
 Gigabit Ethernet over Copper 1000 Base-T and Fiber 1000 Base-SX (LC connector) and Fiber 1000 Base
LX (IEEE 802.3 - 2008)
 10 Gigabit Ethernet over Fiber 10GBase-LR Single Mode and 10GBase-SR Multimode (IEEE 802.3 -
2008)
The Interceptor appliance ports support the following connection types and speeds:
 Primary - 10/100/1000 Base-T, auto-negotiating
 Auxiliary - 10/100/1000 Base-T, auto-negotiating
 LAN - 10/100/1000 Base-TX or 1000 Base-SX or 1000 Base-LX or 10GBase-LR or 10GBase-SR,
depending on configuration
 WAN - 10/100/1000 Base-TX or 1000 Base-SX or 1000 Base-LX or 10GBase-LR or 10GBase-SR,
depending on configuration
Interceptor Appliance User’s Guide 3
Preface Product Dependencies and Compatibility

The Interceptor appliance supports VLAN Tagging (IEEE 802.1Q - 2005). It does not support the ISL
protocol.
All copper interfaces are auto-sensing for speed and duplex (IEEE 802.3 - 2008).
The Interceptor appliance auto-negotiates speed and duplex mode for all data rates and supports full
duplex mode and flow control (IEEE 802.3 – 2008).
The Interceptor appliance with a Gigabit Ethernet card supports jumbo frames on in-path and primary
ports.
SNMP-Based Management Compatibility
The Interceptor appliance supports a proprietary Riverbed MIB accessible through SNMP. SNMPv1 (RFCs
1155, 1157, 1212, and 1215), SNMPv2c (RFCs 1901, 2578, 2579, 2580, 3416, 3417, and 3418), and SNMPv3 are
supported, although some MIB items might be accessible only through SNMPv3 and SNMPv2.
SNMP support allows the Steelhead appliance to be integrated into network management systems such as
Hewlett-Packard OpenView Network Node Manager, BMC Patrol, and other SNMP-based network
management tools.
Antivirus Compatibility
Because it does not process TCP sessions, the Interceptor appliance has no compatibility issues with
antivirus software.
The Steelhead appliance has been tested with the following antivirus software with no impact on
performance:
 Network Associates (McAfee) VirusScan v7.0.0 Enterprise on the server
 Network Associates (McAfee) VirusScan v7.1.0 Enterprise on the server
 Network Associates (McAfee) VirusScan v7.1.0 Enterprise on the client
 Symantec (Norton) AntiVirus Corporate Edition v8.1 on the server
The Steelhead appliance has been tested with the following antivirus software with moderate impact on
performance:
 F-Secure Anti-Virus v5.43 on the client
 F-Secure Anti-Virus v5.5 on the server
 Network Associates (McAfee) NetShield v4.5 on the server
 Network Associates VirusScan v4.5 for multiple platforms on the client
 Symantec (Norton) AntiVirus Corporate Edition v8.1 on the client
4 Interceptor Appliance User’s Guide