WAAS测试设备配置文档.doc

WAAS 测试设备配置文档测试设备配置文档 一 一 WCCP 旁路配置设置 旁路配置设置 1 1 初始参数记录初始参数记录 1 2 网络物理配置网络物理配置 You must set the port to which the WAE is connected to full duplex 1 3 IP 地址分配地址分配 Central Manager 内网可路由的一个IP地址 不用单独一个网段 管理用 总部总部WAE 可连接单独路由器以太口 也可以用路由器内网以太网口的子接口 注意使用和内部 不同的单独网段 分支分支WAE 可连接单独路由器以太口 也可以用路由器内网以太网口的子接口 注意使用和内部 不同的单独网段 1 4 配置配置 WAAS Central Manager 通过 Console 口连接 使用 Setup 命令 Please choose an interface to configure from the following list 1 GigabitEthernet 1 0 2 GigabitEthernet 2 0 Enter choice Press the ESC key at any time to quit this session Enter choice 1 Do you want to enable DHCP on this interface y n n n Do you want to apply the configurations y n y y 指定指定 Central Manager 的管理地址的管理地址 例如例如 10 10 10 10 分配主要接口 primary interface 为gigabitEthernet 1 0 指定device mode 为 central manager 保存配 置 重启设备 waas cm configure terminal waas cm config waas cm config primary interface gigabitEthernet 1 0 waas cm config device mode central manager waas cm config exit waas cm copy run start waas cm reload Proceed with reload confirm y Shutting down all services will Reload requested by CLI ttyS0 Restarting system Username admin Password System Initialization Finished 指定此设备作为指定此设备作为primary WAAS Central Manager waas cm config central manager role primary 生成并初始化管理数据库生成并初始化管理数据库 management database 并使能管理服务并使能管理服务 waas cm config cms enable The following message appears Generating new RPC certificate key pair Restarting RPC services Creating database backup file emerg debug db 01 25 2006 15 31 dump Registering Wide Area Central Manager Registration complete Please preserve running configuration using copy running config startup config Otherwise management service will not be started on reload and node will be shown offline in Wide Area Central Manager UI management services enabled Save the configuration on this WAAS Central Manager waas cm config exit waas cm copy run start 1 5 配置总部配置总部 WAE You must set the port to which the WAE is connected to full duplex Console 口连接 使用 Setup 命令 输入基本网络配置 指定primary interface为 gigabitEthernet 1 0 并并 指定指定device mode 为application accelerator Core WAE1 configure terminal Core WAE1 config Core WAE1 config primary interface gigabitEthernet 1 0 Core WAE1 config device mode application accelerator 指定WAAS Central Manager的IP地址 Core WAE1 config central manager address 10 10 10 10 生成并初始化管理数据库生成并初始化管理数据库 management database 并使能管理服务并使能管理服务 Core WAE1 config cms enable The following message appears Generating new RPC certificate key pair Restarting RPC services Registering Wide Area Application Engine Registration complete Please preserve running configuration using copy running config startup config Otherwise management service will not be started on reload and node will be shown offline in Wide Area Central Manager UI management services enabled Save the configuration on Core WAE1 Core WAE1 config end Core WAE1 copy run start 1 6 配置分支配置分支 WAE You must set the port to which the WAE is connected to full duplex Console 口连接 使用 Setup 命令 输入基本网络配置 指定primary interface为 gigabitEthernet 1 0 并并 指定指定device mode 为application accelerator Edge WAE1 configure terminal Edge WAE1 config Edge WAE1 config primary interface gigabitEthernet 1 0 Edge WAE1 config device mode application accelerator 指定WAAS Central Manager的IP地址 Edge WAE1 config central manager address 10 10 10 10 生成并初始化管理数据库生成并初始化管理数据库 management database 并使能管理服务并使能管理服务 Edge WAE1 config cms enable Registration complete Please preserve running configuration using copy running config startup config Otherwise management service will not be started on reload and node will be shown offline in Wide Area Central Manager UI management services enabled Save the configuration on Edge WAE1 Edge WAE1 config end Edge WAE1 copy run start 1 7 在总部路由器上配置在总部路由器上配置 WCCP Step 1 Core Router1 configure terminal Step 2 Enable WCCP Version 2 and WCCP services 61 and 62 TCP promiscuous mode on Core Router1 Core Router1 config ip wccp version 2 Core Router1 config ip wccp 61 Core Router1 config ip wccp 62 Step 3 配置重定向的配置重定向的LAN接口 这个接口是流量离开数据中心到广域网时被拦截的接口接口 这个接口是流量离开数据中心到广域网时被拦截的接口 Core Router1 config interface fa1 0 40 Core Router1 config subif Step 4 Enable WCCP service 61 on the inbound direction of fa1 0 40 Core Router1 config subif ip wccp 61 redirect in Core Router1 config subif exit Step 5 配置重定向的配置重定向的WAN接口 这个接口是流量从广域网进入数据中心时被拦截的接口接口 这个接口是流量从广域网进入数据中心时被拦截的接口 Core Router1 config interface serial0 Step 6 Enable WCCP service 62 on the inbound direction of serial0 Core Router1 config if ip wccp 62 redirect in Core Router1 config if exit Step 7 为了避免重定向环路 配置一个子接口用于为了避免重定向环路 配置一个子接口用于Core WAE1连接 Core Router1 为了避免路由环路 为了避免路由环路 Core Router1上连接上连接Core WAE1的子接口必须与重定向的子接口不在一个子的子接口必须与重定向的子接口不在一个子 网上 网上 Segment To avoid a routing loop Core WAE1 must not be attached to the same segment subnet as the interface on Core Router1 that is performing the redirection Make sure that you have a tertiary interface a separate physical interface or a subinterface off the router s LAN port from which Core WAE1 connects In the following example a subinterface is being used Core Router1 config interface fa1 0 41 Step 8 After you create the subinterface enter the ip wccp redirect exclude in command to specify that Core Router1 should not repeatedly redirect the same traffic to the local WAE Core WAE1 Core Router1 config subif ip wccp redirect exclude in Step 9 Exit subinterface configuration mode Core Router1 config subif exit Core Router1 config Step 10 Enable Cisco Express Forwarding CEF on Core Router1 Core Router1 config ip cef Core Router1 config end Core Router1 Note CEF is not required but it is recommend for improved performance WCCP can use IP CEF if CEF is enabled on the router Step 11 Save the configuration changes that you just made by writing the running configuration to nonvolatile memory Core Router1 write memory Building configuration Core Router1 Step 12 Verify the new configuration for Core Router1 Core Router1 show running configuration The configuration of WCCP on the core router is completed The next step is to configure WCCP on the Core WAE See the next section for details 1 8 总部总部 WAE 配置配置 WCCP Step 1 Core WAE1 configure terminal Step 2 Enable WCCP Version 2 on Core WAE1 Core WAE1 config wccp version 2 Step 3 Configure a WCCP router list for the TCP promiscuous mode service WCCP services 61 and 62 The following example shows how to configure router list 1 for Core Router1 that has an IP address of 2 2 2 1 Core WAE1 config wccp router list 1 2 2 2 1 2 2 2 1是连接的总部路由器的子接口地址 也就是总部是连接的总部路由器的子接口地址 也就是总部WAE的缺的缺 省网关地址省网关地址 To create a router list on a WAE use the wccp router list global configuration command Enter the IP address of every WCCP enabled router that will support a particular WCCP service for example the TCP promiscuous mode service for the WAE If different routers will be used for different WCCP services you must create more than one router list Each router list command can contain up to six routers Multiple router list commands may be used for the same list to specify up to 32 routers A router list must be contain at least one IP address Step 4 On Core WAE1 turn on the TCP promiscuous mode service and associate this WCCP service with the WCCP router list that you just created router list number 1 The routers in the list are informed that Core WAE1 is accepting TCP promiscuous mode service requests Core WAE1 config wccp tcp promiscuous router list num 1 WCCP configuration for TCP Promiscuous service 61 succeeded WCCP configuration for TCP Promiscuous service 62 succeeded Please remember to configure WCCP service 61 and 62 on the corresponding router Step 5 Exit global configuration mode Core WAE1 config exit Core WAE1 Step 6 Save the configuration changes that you just made by writing the running configuration to nonvolatile memory Core WAE1 write memory Core WAE1 Step 7 Verify the new configuration for Core WAE1 Core WAE1 show running configuration The configuration of WCCP on the Core WAE is completed The next step is to configure WCCP on the branch router See the next section for details 1 9 配置分支路由器上配置分支路由器上 WCCP 配置同总部路由器配置配置同总部路由器配置 1 10 配置分支配置分支 WAE 上上 WCCP 配置同总部配置同总部 WAE 配置 注意配置 注意 router list 配置配置 1 11 激活激活 WAE 并使能应用加速策略并使能应用加速策略 Step1 使用 使用 Central Manager 的的 GUI https IP address of WAAS Central Manager 8443 Step2 approve all WAEs that are being added to the WAAS network In the WAAS Central Manager GUI choose Devices Devices In the taskbar click the Activate all inactive WAEs icon to activate the two inactive WAEs Core WAE1 and the Edge WAE1 Step 3 Enable the predefined application policies and classifications on Edge WAE1 as follows a Click the Edit icon next to Edge WAE1 The Device Home window for this Edge WAE appears It indicates that there are not any policies or applications currently enabled on this device b In the taskbar click the Restore default Application policy settings icon c When a dialog box appears prompting you to confirm that you want to restore the default application policy settings click Yes d To save the changes click Submit e To view the application policy settings that are currently applied to Edge WAE1 choose Acceleration Policies in the Contents pane f To view the application classifiers that are currently applied to Edge WAE1 choose Acceleration Classifiers in the Contents pane 1 12 效验命令效验命令 show statistics tfo savings 和 show statistics dre 二 二 Inline 配置方式配置方式 2 1 网络物理配置网络物理配置 CONFIGURING NETWORK INTERCEPTION Network interception must be configured for each WAE that will be participating in optimization For devices deployed physically inline this involves disconnecting the WAN router from the LAN switch and inserting the WAE into the middle of this connection In this case the WAE WAN 0 port should connect to the router and the LAN 0 port should connect to the LAN switch For Gigabit Ethernet installations use two straight through cables For Fast Ethernet installations use a straight through cable from the LAN switch to the WAE LAN 0 port and a crossover cable from the WAE WAN 0 port to the router After cabling verify interface speed and duplex on the router the switch as well as the WAE using the following commands pod1 dc wae show interface inlineport 1 0 lan pod1 dc wae show interface inlineport 1 0 wan Verify that the inline group is operating in intercept mode by using the command pod1 dc wae show interface inlinegroup 1 0 If the interface is in bypass execute no shut on the inlinegroup 1 0 interface using the CLI 2 2 IP 地址分配地址分配 Central Manager 内网可路由的一个IP地址 不用单独一个网段 管理用 总部总部WAE 只配置Administration Port地址 可使用内网可路由的一个IP地址 分支分支WAE 只配置Administration Port地址 可使用内网可路由的一个IP地址 2 3 配置配置 WAAS Central Manager 同 1 4 2 4 配置总部配置总部 WAE 如 InLine 卡是 shutdown 并且 bypass 模式 waas core configure waas core config interface inlinegroup 1 0 waas core config if no shut waas core config if exit waas core 以下步骤同 1 5 2 5 配置分支配置分支 WAE 如 InLine 卡是 shutdown 并且 bypass 模式 waas edge configure waas edge config interface inlinegroup 1 0 waas edge config if no shut waas edge config if exit waas edge 以下步骤同 1 6 2 6 Inline 卡卡 TroubleShooting 验看验看 Inline group 设置是否在设置是否在 intercept operating mode waas edge sh int inlinegroup 1 0 Interface is in intercept op