Alteon配置样例ppt课件

Slide1,Slide1,AlteonVersion27.0Hand-OnTrainingNameTitle2011,Hand-OnLabAgenda,Layer4LBBasicL4ClientNAT(ProxyIP)SourceIPPersistencyLayer7LBURLUser-AgentHostHost+RegularExpressionOtherHTTPHeaderLayer7ContentModificationX-Forwarded-ForInsertionCookieInsertionErrorCodeModificationServerCloakingPagenameReplacementPagetypeReplacementHostReplacementPathInsertionAccelerationCompressionHTTPMultiplexingSSLOffload&Acceleration,One-ArmSLBRedundancyVRRPVRRP+Tracking(“IF”Interface)VRRP+Tracking(RealServer)BasicSLB+ServerOutboundNATFilter+PIP“Invert”Filter+PIP“ProxyIP”inFiltervADCRedundancyVRRP+SessionMirroringGSLB,BasicL4LB,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,BasicL4LBConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren,AlteonConfigDump“/cfg/dump”,Main#/cfg/dscriptstartAlteonApplicationSwitch44084/*DONOTEDITTHISLINE!/*Configurationdumptaken15:57:42FriJan21,2011/*Configurationlastappliedat15:40:01FriJan21,2011/*Configurationlastsaveat15:57:36FriJan21,2011/*Version27.0.0,BaseMACaddress00:03:b2:50:f9:80/cfg/l2/stg1/off/cfg/l3/if1enaipverv4addrmaskbroad55/cfg/slbon/cfg/slb/advdirectena/cfg/slb/real1enaipverv4rip01,-/cfg/slb/real2enaipverv4rip02/cfg/slb/group1ipverv4add1add2/cfg/slb/port1clientena/cfg/slb/port2serverena/cfg/slb/virt1enaipverv4vip00/cfg/slb/virt1/service80httpgroup1/scriptend/*DONOTEDITTHISLINE!,Sever&ServiceUpMessage,/i/slb/group1,/i/slb/vir1,/i/slb/sess/dump,/stat/slb/vir1,ClientNAT:ProxyIP,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,Phy.Port1:-ClientNATIP:23,2,1,SourceIP:8,SourceIP:23,ProxyIPConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/pip/typeport/cfg/slb/pip/add231/cfg/slb/port1/proxyen,Layer4LB:SourceIPPersistency,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,SourceIPPersistencyConfig,/c/l2/stg1/off/c/l3/if1/addr/mask/en/c/slb/on/c/slb/adv/directen/c/slb/r1/rip01/en/c/slb/r2/rip02/en/c/slb/gr1/add1/add2/c/slb/vir1/vip00/en/c/slb/vir1/service80/gr1/c/slb/port1/clienten/c/slb/port2/serveren/c/slb/group1/metricphash,L7LB:URL,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,1,00/index1.htm00/index2.htm,index1.htm,2,index2.htm,2,URLLBConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/slb/ren2index1.htm/cfg/slb/layer7/slb/ren3index2.htm/*/cfg/slb/layer7/slb/addstrindex1.htm/*/cfg/slb/layer7/slb/addstrindex2.htm/cfg/slb/real1/layer7/addlb2/cfg/slb/real2/layer7/addlb3/cfg/slb/virt1/service80/dbinden/cfg/slb/virt1/service80/http/httpslburlslb,HTTPURL/HeaderSLB,“/stat/slb/layer7/str”&“/stat/slb/virt1”,“/stat/slb/layer7/str”&“/stat/slb/virt1”,L7LB:User-Agent,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,1,00,1,2,00,00,2,00,User-AgentLBConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/slb/ren2Firefox/cfg/slb/layer7/slb/ren3MSIE/cfg/slb/real1/layer7/addlb2/cfg/slb/real2/layer7/addlb3/cfg/slb/virt1/service80/dbinden/cfg/slb/virt1/service80/http/httpslbbrowser,L7LB:Host,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,1,2,2,HostnameLBConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/slb/ren2/cfg/slb/layer7/slb/ren3/cfg/slb/real1/layer7/addlb2/cfg/slb/real2/layer7/addlb3/cfg/slb/virt1/service80/dbinden/cfg/slb/virt1/service80/http/httpslbhost,Layer7LB:Host+RegularExpression,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,1,00/index1.htm00/index2.htm,index1.htm,2,index2.htm,2,Host+RegularExpressionConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/slb/ren2/cfg/slb/layer7/slb//cfg/slb/real1/layer7/addlb2/cfg/slb/real2/layer7/addlb3/cfg/slb/virt1/service80/dbinden/cfg/slb/virt1/service80/http/httpslbhost,L7LB:OtherHTTPHeader,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,1,00,1,2,00,00,2,00,(Language:zh-HK),(Language:en-us),OtherHTTPHeaderLBConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/slb/ren2en-us/cfg/slb/layer7/slb/ren3zh-HK/cfg/slb/real1/layer7/addlb2/cfg/slb/real2/layer7/addlb3/cfg/slb/virt1/service80/dbinden/cfg/slb/virt1/service80/http/httpslbothersAccept-Language,Layer7Modification:X-Forwarded-ForInsertion,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,X-Forwarded-ForInsertionConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/virt1/service80/http/xforwarden,L7Modification:CookieInsertion,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,1,00,Set-Cookie:AlteonP=f4ecbbdaf4ecbbdbbaeehabf,2,2,Set-Cookie:AlteonP=f4ecbbdaf4ecbbd8baeebabc,CookieInsertionConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/virt1/service80/dbinden/cfg/slb/virt1/service80http/pbindcookieinsert,L7Modification:ErrorCodeModification,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,ReturnCode:200,ReturnCode:201,1,2,ErrorCodeModificationConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/slb/ren2en-us/cfg/slb/layer7/slb/ren3zh-HK/cfg/slb/real1/layer7/addlb2/cfg/slb/real2/layer7/addlb3/cfg/slb/virt1/service80/dbinden/cfg/slb/virt1/service80/http/httpslbothersAccept-Language/cfg/slb/virt1/service80http/http/errcodeenamatch_code=200nonredirect_code=201nonredirect_reason=Alteon-Modify,Original,AlteonModified,L7Modification:ServerCloaking,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,Server:Samber4.3,Server:WebServer,1,2,ServerCloakingConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/slb/ren2en-us/cfg/slb/layer7/slb/ren3zh-HK/cfg/slb/real1/layer7/addlb2/cfg/slb/real2/layer7/addlb3/cfg/slb/virt1/service80/dbinden/cfg/slb/virt1/service80/http/httpslbothersAccept-Language/cfg/slb/virt1/service80http/http/errcodeenamatch_code=200nonredirect_code=201nonredirect_reason=Alteon-Modify“/cfg/slb/virt1/ser80/http/cloaksrven,Original,AlteonModified,Layer7Modification:PagenameReplacement(request),8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,2,1,00/index1.htm,00/index2.htm,PagenameReplacementConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/httpmod1/ena/cfg/slb/layer7/httpmod1/rule1url/ena/cfg/slb/layer7/httpmod1/rule1url/directnreq/cfg/slb/layer7/httpmod1/rule1url/match/pagenameindex1/cfg/slb/layer7/httpmod1/rule1url/action/pagenameindex2/cfg/slb/virt1/service80http/http/httpmod1,Layer7Modification:PagetypeReplacement(request),8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,2,1,00/index1.html,00/index1.htm,PagetypeReplacement,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/httpmod1/ena/cfg/slb/layer7/httpmod1/rule1url/ena/cfg/slb/layer7/httpmod1/rule1url/directnreq/cfg/slb/layer7/httpmod1/rule1url/match/pagetypehtml/cfg/slb/layer7/httpmod1/rule1url/action/pagetypehtm/cfg/slb/virt1/service80http/http/httpmod1,Layer7Modification:HostReplacement(request),8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,2,1,HostReplacement,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/httpmod1/ena/cfg/slb/layer7/httpmod1/rule1url/ena/cfg/slb/layer7/httpmod1/rule1url/directnreq/cfg/slb/layer7/httpmod1/rule1url/match/hosteq/cfg/slb/layer7/httpmod1/rule1url/action/hostreplace/cfg/slb/virt1/service80http/http/httpmod1,Layer7Modification:HostReplacement(return&body),8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,1,2,HostReplacement(return&body),/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/httpmod1/ena/cfg/slb/layer7/httpmod1/rule1url/ena/cfg/slb/layer7/httpmod1/rule1url/directnresp/cfg/slb/layer7/httpmod1/rule1url/bodyinclude/cfg/slb/layer7/httpmod1/rule1url/match/hosteq/cfg/slb/layer7/httpmod1/rule1url/action/hostreplace/cfg/slb/virt1/service80http/http/httpmod1,Layer7Modification:PathInsertion(request),8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,2,1,PathInsertionConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/layer7/httpmod1/ena/cfg/slb/layer7/httpmod1/rule1url/ena/cfg/slb/layer7/httpmod1/rule1url/directnreq/cfg/slb/layer7/httpmod1/rule1url/match/patheqdir1/cfg/slb/layer7/httpmod1/rule1url/action/pathinsertinternal/before/cfg/slb/virt1/service80http/http/httpmod1,Acceleration:Compression,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,1,2,FileSize=1MB,FileSize=7KB(aftercompression),CompressionConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/accel/compress/on/cfg/slb/accel/compress/comppol1/minsize1024/cfg/slb/accel/compress/comppol1/ena/cfg/slb/virt1/service80http/http/comppol1,Acceleration:HTTPMultiplexing,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,2,1,ManySessionsAreGeneratedi.e.manySYNpackets,OneorveryfewSessionsAreAtServerSidei.e.1orseveralSYNpacketsony,HTTPMultiplexingConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren/cfg/slb/pip/typeport/cfg/slb/pip/add231/cfg/slb/port1/proxyen/cfg/slb/virt1/service80http/http/connmgtena20,Acceleration:SSLOffload&Acceleration,8,client,01(realserver1),02(realserver2),Phy.Port1(clientport),Phy.Port2(serverport),IF1:(Vlan1),VIP:00,PhysicalNetworkTopology,2,1,SSLTraffic(443port),HTTPTraffic(80port),Step1:BasicConfig,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/cfg/slb/real2/rip02/en/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port2/serveren,Step2:GenerateTestCertificate,/cfg/slb/ssl/certs/srvrcert1/generate,/cfg/slb/ssl/on/cfg/slb/ssl/sslpol1/en/cfg/slb/virt1/service443https/group1/cfg/slb/virt1/service443https/rport80/cfg/slb/virt1/service443https/ssl/srvrcert1/cfg/slb/virt1/service443https/ssl/sslpol1,Step3:SSLConfiguration,OneArmSLB,8,client,01GW:(realserver1),02GW:(realserver2),Phy.Port1(clientport,serverport),IF1:(Vlan1),VIP:00,OneArmTopology,IF2:(Vlan1),submacen,OneArmL4SLB,/cfg/l2/stg1/off/cfg/l3/if1/addr/mask/en/cfg/l3/if2/addr/mask/en/cfg/slb/on/cfg/slb/adv/directen/cfg/slb/real1/rip01/en/submacen/cfg/slb/real2/rip02/en/submacen/cfg/slb/group1/add1/add2/cfg/slb/virt1/vip00/en/cfg/slb/virt1/service80/group1/cfg/slb/port1/clienten/cfg/slb/port1/serveren,VRRP,802.1q(vlan-2,vlan-3),802.1q(vlan-2,vlan-3),IF1:56(Vlan2),IF2:(Vlan3),IF1:57(Vlan2),IF2:(Vlan3),PhyPort1:TagenableVlan2:port1Vlan3:port1,PhyPort1:TagenableVlan2:port1Vlan3:port1,VRRPVR-1:73VRRPVR-2:VRRPVR-3:74,VIP:74,VIP:74,192.168.22.xGw:73,client,WebServer,01Gw:,L2switch,Alteon-1(master),Alteon-2(backup),Physical,02Gw:,Telnetservice,vlan-2,vlan-3,192.168.22.xGw:73,client,WebServer,01Gw:,VLAN-3,VLAN-2,IF1:56,IF1:57,IF2:,IF2:,VLAN-3,VLAN-2,VIP:74,VIP:74,VRRPVR-1:73,VRRPVR-2:,Alteon-1(master),Alteon-2(backup),Logical,VRRPVR-3:74,Telnetservice,02