Silver Peak WAN Optimization Appliances

250 Pages·2015·11.4 MB·English

Silver Peak
WAN Optimization Appliances
Network Deployment Guide
VXOA 6.2
March 2015
PN 200059-001 Rev L
Silver Peak NX Series Appliances Network Deployment Guide
Silver Peak NX Series Appliances Network Deployment Guide
Document PN 200059-001 Rev L
Date: March 2015
Copyright © 2015 Silver Peak Systems, Inc. All rights reserved. Information in this document is subject to change at any time. Use of
this documentation is restricted as specified in the End User License Agreement. No part of this documentation can be reproduced,
except as noted in the End User License Agreement, in whole or in part, without the written consent of Silver Peak Systems, Inc.
Trademark Notification
Silver Peak SystemsTM, the Silver Peak logo, Network MemoryTM, and Silver Peak NX-SeriesTM are trademarks of Silver Peak
Systems, Inc. All trademark rights reserved. All other brand or product names are trademarks or registered trademarks of the
respective companies or organizations.
Warranties and Disclaimers
THIS DOCUMENTATION IS PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR
PURPOSE, OR NON-INFRINGEMENT. SILVER PEAK SYSTEMS, INC. ASSUMES NO RESPONSIBILITY FOR ERRORS OR
OMISSIONS IN THIS DOCUMENTATION OR OTHER DOCUMENTS WHICH ARE REFERENCED BY OR LINKED TO THIS
DOCUMENTATION. REFERENCES TO CORPORATIONS, THEIR SERVICES AND PRODUCTS, ARE PROVIDED “AS IS”
WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED. IN NO EVENT SHALL SILVER PEAK SYSTEMS, INC.
BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT OR CONSEQUENTIAL DAMAGES OF ANY KIND, OR ANY DAMAGES
WHATSOEVER, INCLUDING, WITHOUT LIMITATION, THOSE RESULTING FROM LOSS OF USE, DATA OR PROFITS,
WHETHER OR NOT ADVISED OF THE POSSIBILITY OF DAMAGE, AND ON ANY THEORY OF LIABILITY, ARISING OUT OF OR
IN CONNECTION WITH THE USE OF THIS DOCUMENTATION. THIS DOCUMENTATION MAY INCLUDE TECHNICAL OR OTHER
INACCURACIES OR TYPOGRAPHICAL ERRORS. CHANGES ARE PERIODICALLY ADDED TO THE INFORMATION HEREIN;
THESE CHANGES WILL BE INCORPORATED IN NEW EDITIONS OF THE DOCUMENTATION. SILVER PEAK SYSTEMS, INC.
MAY MAKE IMPROVEMENTS AND/OR CHANGES IN THE PRODUCT(S) AND/OR THE PROGRAM(S) DESCRIBED IN THIS
DOCUMENTATION AT ANY TIME.
Silver Peak Systems, Inc.
2860 De La Cruz Boulevard, Suite 100
Santa Clara, CA 95050
1.877.210.7325 (toll-free in USA)
+1.408.935.1850
http://www.silver-peak.com/support
ii PN 200059-001 Rev L
Contents
Contents
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
Who Should Read This Manual?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
Manual Organization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . vii
Related Publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .viii
Technical Support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .viii
Chapter 1 Fundamentals of Deploying WAN Optimization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Definition of Terms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Using Physical and Virtual Appliances . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Ethernet Interfaces and IP Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Configuring the mgmt0 Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5
Choosing an Optimization Strategy for the Traffic Path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Determining the Need for Traffic Redirection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
When using subnet sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
When defaulting to TCP-based or IP-based auto-optimization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
When specifying a tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12
High Availability. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Auto-optimization or Explicit Route Maps?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Asymmetry Mitigation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
High Availability with Explicit Route-Maps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Considerations for Deployments. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Verifying Connectivity After Configuring Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
ping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
ping -r [or ping -R]: ping with Record Route option. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
traceroute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
Basic procedure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Chapter 2 In-Line Deployment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Network Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Summary of Initial Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Collecting the Necessary Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Using the Initial Config Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Verifying Appliance Connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
Creating Tunnels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
Verifying Traffic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Chapter 3 Out-of-Path with Policy-Based-Routing Redirection. . . . . . . . . . . . . . . . . . . . . . . . 33
SECTION 1: Using Subnet Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .34
Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Network Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Summary of Initial Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Collecting the Necessary Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
Using the Initial Config Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
PN 200059-001 Rev L iii
Silver Peak NX Series Appliances Network Deployment Guide
Verifying Appliance Connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Enabling Subnet Sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Creating Tunnels and Updating the Subnet Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
Configuring the Router to Redirect Traffic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Using a Cisco Router for Policy-Based Routing (PBR). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56
Using a Juniper Router for Filter-Based Forwarding (FBF). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Verifying Traffic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
SECTION 2: Using TCP/IP–based Auto-Optimization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .62
Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Network Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
Summary of Initial Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
Collecting the Necessary Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
Using the Initial Config Wizard with SiteA’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 67
Configuring the Router for Policy-Based Routing (PBR). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
Configuring a Tunnel to the Remote Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Configuring SiteB’s Appliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
Chapter 4 Out-of-Path with WCCP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Network Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
Summary of Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
Collecting the Necessary Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
Configuring the Site A Router for WCCP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Outbound Redirection and Enabling WCCP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84
Inbound Redirection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
Using the Initial Config Wizard with SiteA’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86
Configuring WCCP on A1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92
Using the Initial Config Wizard with Site B’s Appliance. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
Verifying Appliance Connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103
Enabling Subnet Sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105
Creating Tunnels and Updating the Subnet Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107
Verifying Traffic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111
Best Practices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
Tips for Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113
GRE and L2 Redirection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114
Chapter 5 Out-of-Path with VRRP Peering to a WAN Router . . . . . . . . . . . . . . . . . . . . . . . . . 115
Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Network Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 116
Summary of Initial Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118
Collecting the Necessary Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 119
Using the Initial Config Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120
Verifying Appliance Connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131
Enabling Subnet Sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 132
Creating Tunnels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 134
Configuring VRRP on a Cisco Router. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 136
Configuring VRRP on Silver Peak A1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
Managing the addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
Using VRRP with a single Silver Peak and a router or L3 switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137
Verifying Traffic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 139
iv PN 200059-001 Rev L
Contents
Chapter 6 Out-of-Path with PBR and VRRP Redundant Silver Peak Appliances. . . . . . . . 143
Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
Network Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144
Collecting the Necessary Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146
Summary of Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
Using the Initial Config Wizard for Site A. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148
Configuring VRRP on A1 and A2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161
Using VRRP with two Silver Peaks acting as Master and Backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 161
Configuring Flow Redirection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164
Using the Initial Config Wizard with Site B . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 168
Verifying Appliance Connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174
Enabling Subnet Sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177
Creating Tunnels and Updating the Subnet Table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179
Configuring A1 and A2 to Advertise Non-Local Subnets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 182
Configuring the Cisco Router for Policy-Based Routing (PBR). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 184
Verifying Traffic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185
Chapter 7 Out-of-Path with WCCP Redundant (Active/Active) Appliances. . . . . . . . . . . . . 189
Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190
WCCP at Site A. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 190
Network Diagram . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 191
Summary of Configuration Tasks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 193
Collecting the Necessary Information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 194
Configuring the Site A Router for WCCP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 195
An Alternative Practice . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 196
Using the Initial Config Wizard with A1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197
Configuring WCCP on A1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204
Using the Initial Config Wizard with A2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 209
Configuring WCCP on A2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 215
Configuring Flow Redirection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 216
Using the Initial Config Wizard with B . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 220
Verifying Appliance Connectivity. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 226
Enabling Subnet Sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 229
Creating Tunnels. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 231
Configuring A1 and A2 to Advertise Non-Local Subnets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 234
Verifying Traffic. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 236
Best Practices. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238
Tips for Deployment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 238
GRE and L2 Redirection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 239
PN 200059-001 Rev L v
Silver Peak NX Series Appliances Network Deployment Guide
vi PN 200059-001 Rev L
Preface
Welcome to the Silver Peak Network Deployment Guide. Read the Preface to understand the target
audience, the manual’s organization, related documents, and how to contact Customer Support.
Most deployments in this guide focus on using subnet sharing as the auto-optimization method for
routing flows. A smaller number demonstrate the use of TCP-based and IP-based auto-optimization.
Who Should Read This Manual?
This guide is written for network administrators who are familiar with administering and managing
networks.
Specifically, this guide provides an overview and summary of the most common deployment scenarios,
followed by detailed and illustrated procedures for configuring and verifying each deployment. Because
each enterprise’s network topologies and needs can differ, the network administrator needs to evaluate
the environment and choose the deployment that best serves their needs. Silver Peak Systems’ support
personnel are available to help you determine the best course of action.
Because of this focus, this manual assumes that you are already familiar with the material covered in the
Silver Peak Appliance Manager Operator’s Guide. This includes basic installation procedures and how
to use the Appliance Manager.
Manual Organization
This section outlines the chapters and summarizes their content.
To keep things simple, we illustrate the examples with the typical in-line deployment in Site B offices
and out-of-path deployment at Site A. However, Site B offices are not restricted to in-line deployment,
nor is Site A restricted to out-of-path deployments.
Chapter1, “Fundamentals of Deploying WAN Optimization,” describes some of the fundamental
concepts of deploying WAN acceleration in enterprise networks. It provides an overview and
introduction to common installation models, pros and cons of each, and recommendations.
Chapter2, “In-Line Deployment,” describes the procedures for an in-line deployment where the Silver
Peak Appliance sits between the WAN router and the Ethernet switch.
Chapter3, “Out-of-Path with Policy-Based-Routing Redirection,”, describes the procedures for a
scenario that deploys the Site B location in-line and the Site A network out-of-path with an available
spare router port and uses Policy-Based Routing (PBR) on the WAN router to redirect traffic to the Silver
Peak appliance.
Chapter4, “Out-of-Path with WCCP,” (Comparing Subnet Sharing & TCP/IP-based
Auto-Optimization), describes the procedures for setting up Web Cache Communications Protocol
(WCCP) service. The example uses a Cisco router paired with a single Silver Peak appliance deployed
out-of-path (Router mode). It also highlights the differences in traffic redirection required when using
subnet sharing, as opposed to TCP-based or IP-based auto-optimization.
PN 200059-001 Rev L vii
Silver Peak NX Series Appliances Network Deployment Guide Related Publications
Chapter5, “Out-of-Path with VRRP Peering to a WAN Router,” describes the procedures for a scenario
where the Silver Peak appliance uses the Virtual Router Redundancy Protocol (VRRP) to peer with the
existing router, when no spare router port is available.
Chapter6, “Out-of-Path with PBR and VRRP Redundant Silver Peak Appliances,” describes the
procedures for setting up high availability. In this example, Site A deploys a primary and a secondary
appliance out-of-path (Router mode), and the Site B location deploys the appliance in-line (Bridge
mode). Additionally, the peered Site A appliances use the Virtual Router Redundancy Protocol (VRRP)
to create and share a common IP address, called the Virtual IP address (VIP).
Chapter7, “Out-of-Path with WCCP Redundant (Active/Active) Appliances,” describes the procedures
for setting up high availability by using Web Cache Communications Protocol with a Cisco router and
redundant Silver Peak appliances in an out-of-path deployment.
Related Publications
 Release Notes provide information on new software features, system bugs, and software
compatibility.
 All user documentation is also available for download from http://www.silver-peak.com.
Technical Support
For product and technical support, contact Silver Peak Systems at either of the following:
• 1.877.210.7325 (toll-free in USA)
• +1.408.935.1850
• www.silver-peak.com/support
We’re dedicated to continually improving the usability of our products and documentation.
 If you have suggestions or feedback for our documentation, please send an e-mail to
[email protected].
 If you have comments or feedback about the GUI’s ease of use, please send an e-mail to
[email protected].
viii PN 200059-001 Rev L
CHAPTER 1
Fundamentals of Deploying WAN
Optimization
This chapter describes some of the fundamental concepts of deploying WAN acceleration in enterprise
networks.
In This Chapter
 Introduction See page2.
 Using Physical and Virtual Appliances See page4.
 Configuring the mgmt0 Interface See page5.
 Choosing an Optimization Strategy for the Traffic Path See page8.
 Determining the Need for Traffic Redirection See page9.
 High Availability See page13.
 Considerations for Deployments See page14.
 Verifying Connectivity After Configuring Deployment See page15.
PN 200059-001 Rev L 1
Silver Peak NX Series Appliances Network Deployment Guide Introduction
Introduction
Deploying WAN optimization in an enterprise network is similar to deploying other enterprise
networking technologies (for example, firewalls). There are, however, a few tenets to keep in mind:
1 Silver Peak appliances need to have visibility into any traffic that requires optimization.
As such, all traffic to be optimized must flow though the appliances. There are three ways to
accomplish this:
Server mode In this default configuration, the management path and the
[default] datapath both use the same interface and the same IP address.
Bridge mode Silver Peak appliances are deployed as a “bump in a wire” in
[in-line] between the LAN infrastructure and the WAN router.
Router mode Silver Peak appliances are deployed in “one-armed” (or
[out-of-path] “lollipop”) fashion with a single connection to the WAN router. A
redirection method (such as PBR or WCCP) is used to redirect
traffic to the appliance.
2 Silver Peak WAN acceleration is a “symmetric” solution. That is, to optimize the traffic on the link,
Silver Peak appliances are required on both ends of the WAN link.
3 Silver Peak’s Network Acceleration functions require that the appliances have visibility into both
the transmit and receive directions of a flow. If not, the flow is considered “asymmetric” and
Network Acceleration will be defeated although Network Integrity and Network Memory will
continue to provide benefit.
Definition of Terms
Following are the definitions for common terms used throughout the guide, listed alphabetically:
Term Definition
Acceleration Refers to techniques used to improve transmission of TCP protocols across a WAN. a
TCP Proxy session is created to reduce the impact of latency on a TCP flow.
Techniques such as local acknowledgements and window sizing are used to
accelerate TCP traffic.
Auto Optimized Traffic IP traffic that is automatically recognized by the Silver Peak appliances and
optimized accordingly, without the need for manually created Route Policies. This
is the default entry for the Route Policy if no entries are made, or for the last line in
the route map.
Bypass Bypass refers to hardware bypass. If there is a major problem with the appliance
hardware, software, or power, all traffic goes through the appliance without any
processing. Bypass mode can be enabled manually.
Silver Peak appliances can be installed in the data path (in-line) between an L2/L3
switch and the edge WAN router, with fail-to-wire in case of failure.
Bypass mode and Hardware Bypass both refer to the failover method, which is
Fail-to-Wire for copper interfaces, and Fail-to-Glass for fiber interfaces.
2 PN 200059-001 Rev L