Alteon配置样例.ppt

1、Slide 1,Slide 1,Alteon Version 27.0 Hand-On Training Name Title 2011,Hand-On Lab Agenda,Layer 4 LB Basic L4 Client NAT (Proxy IP) Source IP Persistency Layer 7 LB URL User-Agent Host Host + Regular Expression Other HTTP Header Layer 7 Content Modification X-Forwarded-For Insertion Cookie Insertion E

2、rror Code Modification Server Cloaking Pagename Replacement Pagetype Replacement Host Replacement Path Insertion Acceleration Compression HTTP Multiplexing SSL Offload & Acceleration,One-Arm SLB Redundancy VRRP VRRP + Tracking (“IF” Interface) VRRP + Tracking (Real Server) Basic SLB + Server Outboun

3、d NAT Filter + PIP “Invert” Filter + PIP “ProxyIP” in Filter vADC Redundancy VRRP + Session Mirroring GSLB,Basic L4 LB,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network

4、 Topology,Basic L4 LB Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cf

5、g/slb/port 1/client en /cfg/slb/port 2/server en,Alteon Config Dump “/cfg/dump”, Main# /cfg/d script start Alteon Application Switch 4408 4 /* DO NOT EDIT THIS LINE! /* Configuration dump taken 15:57:42 Fri Jan 21, 2011 /* Configuration last applied at 15:40:01 Fri Jan 21, 2011 /* Configuration last

6、 save at 15:57:36 Fri Jan 21, 2011 /* Version 27.0.0, Base MAC address 00:03:b2:50:f9:80 /cfg/l2/stg 1/off /cfg/l3/if 1 ena ipver v4 addr mask broad 55 /cfg/slb on /cfg/slb/adv direct ena /cfg/slb/real 1 ena ipver v4 rip 01,- /cfg/slb/real 2 ena ipver v4 rip 10

7、.1.1.102 /cfg/slb/group 1 ipver v4 add 1 add 2 /cfg/slb/port 1 client ena /cfg/slb/port 2 server ena /cfg/slb/virt 1 ena ipver v4 vip 00 /cfg/slb/virt 1/service 80 http group 1 / script end /* DO NOT EDIT THIS LINE!,Sever & Service Up Message,/i/slb/group 1,/i/slb/vir 1,/i/slb/sess/dump,/sta

8、t/slb/vir 1,Client NAT : Proxy IP,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,Phy. Port 1 : - Client NAT IP : 23,2,1,Source IP : 8,Source

9、 IP : 23,Proxy IP Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1

10、 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/pip/type port /cfg/slb/pip/add 23 1 /cfg/slb/port 1/proxy en,Layer 4 LB : Source IP Persistency,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : 10.1

11、.1.1 (Vlan 1),VIP : 00,Physical Network Topology,Source IP Persistency Config,/c/l2/stg 1/off /c/l3/if 1/addr /mask /en /c/slb/on /c/slb/adv/direct en /c/slb/r 1/rip 01/en /c/slb/r 2/rip 02/en /c/slb/gr 1/add 1/add 2 /c/slb/vir 1/vip 00/en /c/slb/

12、vir 1/service 80/gr 1 /c/slb/port 1/client en /c/slb/port 2/server en /c/slb/group 1/metric phash,L7 LB : URL,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology

13、,1,00/index1.htm 00/index2.htm,index1.htm,2,index2.htm,2,URL LB Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /c

14、fg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/layer7/slb/ren 2 index1.htm /cfg/slb/layer7/slb/ren 3 index2.htm /* /cfg/slb/layer7/slb/addstr index1.htm /* /cfg/slb/layer7/slb/addstr index2.htm /cfg/slb/real 1/layer7/ad

15、dlb 2 /cfg/slb/real 2/layer7/addlb 3 /cfg/slb/virt 1/service 80/dbind en /cfg/slb/virt 1/service 80/http/httpslb urlslb,HTTP URL/ Header SLB,“/stat/slb/layer7/str” & “/stat/slb/virt 1”,“/stat/slb/layer7/str” & “/stat/slb/virt 1”,L7 LB : User-Agent,8,client,01 (real server 1),

16、02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,1,00,1,2,00,00,2,00,User-Agent LB Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /

17、en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/layer7/slb/ren 2 Firefox /cfg/slb/l

18、ayer7/slb/ren 3 MSIE /cfg/slb/real 1/layer7/addlb 2 /cfg/slb/real 2/layer7/addlb 3 /cfg/slb/virt 1/service 80/dbind en /cfg/slb/virt 1/service 80/http/httpslb browser,L7 LB : Host,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server por

19、t),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,1, ,2,2,Hostname LB Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /cf

20、g/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/layer7/slb/ren 2 /cfg/slb/layer7/slb/ren 3 /cfg/slb/real 1/layer7/addlb 2 /cfg/slb/real 2/layer7/addlb 3 /cfg/slb/virt 1/service 80/dbind en /cfg/slb/virt 1/service 80/http/

21、httpslb host,Layer 7 LB : Host + Regular Expression,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,1,00/index1.htm 00/index2.htm

22、,index1.htm,2,index2.htm,2,Host + Regular Expression Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/sl

23、b/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/layer7/slb/ren 2 /cfg/slb/layer7/slb/ren 3 /cfg/slb/real 1/layer7/addlb 2 /cfg/slb/real 2/layer7/addlb 3 /cfg/slb/virt 1/service 80/dbind en /cfg/slb/virt 1/service 80/http/httpslb host,L7 LB : Oth

24、er HTTP Header,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,1,00,1,2,00,00,2,00,(Language : zh-HK)

25、,(Language : en-us),Other HTTP Header LB Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/ser

26、vice 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/layer7/slb/ren 2 en-us /cfg/slb/layer7/slb/ren 3 zh-HK /cfg/slb/real 1/layer7/addlb 2 /cfg/slb/real 2/layer7/addlb 3 /cfg/slb/virt 1/service 80/dbind en /cfg/slb/virt 1/service 80/http/httpslb others Accept-Language,Layer 7

27、 Modification : X-Forwarded-For Insertion,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,X-Forwarded-For Insertion Config,/cfg/l2/stg 1/off /cfg/l3/if 1/add

28、r /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/virt

29、1/service 80/http/xforward en,L7 Modification : Cookie Insertion,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,1,00,Set-Cookie: AlteonP=f4ecb

30、bdaf4ecbbdbbaeehabf,2,2,Set-Cookie: AlteonP=f4ecbbdaf4ecbbd8baeebabc,Cookie Insertion Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb

31、/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/virt 1/service 80/dbind en /cfg/slb/virt 1/service 80 http/pbind cookie insert,L7 Modification : Error Code Modification,8,client,01 (real server 1),02 (r

32、eal server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,Return Code : 200,Return Code : 201,1,2,Error Code Modification Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/dir

33、ect en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/layer7/slb/ren 2 en-us /cfg/slb/layer7/slb/ren 3 zh-HK /cfg/slb/re

34、al 1/layer7/addlb 2 /cfg/slb/real 2/layer7/addlb 3 /cfg/slb/virt 1/service 80/dbind en /cfg/slb/virt 1/service 80/http/httpslb others Accept-Language /cfg/slb/virt 1/service 80 http/http/errcode ena match_code=200 nonredirect_code=201 nonredirect_reason=Alteon-Modify,Original,Alteon Modified,L7 Modi

35、fication : Server Cloaking,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,Server : Samber 4.3,Server : Web Server,1,2,Server Cloaking Config,/cfg/l2/stg 1/o

36、ff /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/serve

37、r en /cfg/slb/layer7/slb/ren 2 en-us /cfg/slb/layer7/slb/ren 3 zh-HK /cfg/slb/real 1/layer7/addlb 2 /cfg/slb/real 2/layer7/addlb 3 /cfg/slb/virt 1/service 80/dbind en /cfg/slb/virt 1/service 80/http/httpslb others Accept-Language /cfg/slb/virt 1/service 80 http/http/errcode ena match_code=200 nonred

38、irect_code=201 nonredirect_reason=Alteon-Modify“ /cfg/slb/virt 1/ser 80/http/cloaksrv en,Original,Alteon Modified,Layer 7 Modification : Pagename Replacement (request),8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : 10

39、.1.1.1 (Vlan 1),VIP : 00,Physical Network Topology,2,1,00/index1.htm,00/index2.htm,Pagename Replacement Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/r

40、ip 02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/layer7/httpmod 1/ena /cfg/slb/layer7/httpmod 1/rule 1 url/ena /cfg/slb/layer7/httpmod 1/rule 1 url/directn req /cfg/slb/laye

41、r7/httpmod 1/rule 1 url/match/pagename index1 /cfg/slb/layer7/httpmod 1/rule 1 url/action/pagename index2 /cfg/slb/virt 1/service 80 http/http/httpmod 1,Layer 7 Modification : Pagetype Replacement (request),8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client po

42、rt),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,2,1,00/index1.html,00/index1.htm,Pagetype Replacement,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/ri

43、p 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/layer7/httpmod 1/ena /cfg/slb/layer7/httpmod 1/rule 1 url/ena /cfg/slb/layer7/httpmod 1/rul

44、e 1 url/directn req /cfg/slb/layer7/httpmod 1/rule 1 url/match/pagetype html /cfg/slb/layer7/httpmod 1/rule 1 url/action/pagetype htm /cfg/slb/virt 1/service 80 http/http/httpmod 1,Layer 7 Modification : Host Replacement (request),8,client,01 (real server 1),02 (real server 2

45、),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,2,1,Host Replacement,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 1

46、02/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/layer7/httpmod 1/ena /cfg/slb/layer7/httpmod 1/rule 1 url/ena /cfg/slb/layer7/httpmod 1/rule 1 url/directn req /cfg/slb/layer7/h

47、ttpmod 1/rule 1 url/match/host eq /cfg/slb/layer7/httpmod 1/rule 1 url/action/host replace /cfg/slb/virt 1/service 80 http/http/httpmod 1,Layer 7 Modification : Host Replacement (return & body),8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port

48、 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,1,2,Host Replacement (return & body),/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb

49、/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/layer7/httpmod 1/ena /cfg/slb/layer7/httpmod 1/rule 1 url/ena /cfg/slb/layer7/httpmod 1/rule 1 url/directn resp /cfg/slb/layer7/httpmod 1/rule 1 url/

50、body include /cfg/slb/layer7/httpmod 1/rule 1 url/match/host eq /cfg/slb/layer7/httpmod 1/rule 1 url/action/host replace /cfg/slb/virt 1/service 80 http/http/httpmod 1,Layer 7 Modification : Path Insertion (request),8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (

51、client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,2,1,Path Insertion Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/

52、en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/layer7/httpmod 1/ena /cfg/slb/layer7/httpmod 1/rule 1 url/ena /cfg/slb/layer7/httpmod 1/rule 1 url/directn req /cfg/slb/layer7/httpmod 1/r

53、ule 1 url/match/path eq dir1 /cfg/slb/layer7/httpmod 1/rule 1 url/action/path insert internal/ before /cfg/slb/virt 1/service 80 http/http/httpmod 1,Acceleration : Compression,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),I

54、F 1 : (Vlan 1),VIP : 00,Physical Network Topology,1,2,File Size = 1MB,File Size = 7KB (after compression),Compression Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 10

55、.1.1.102/en /cfg/slb/group 1/add 1/add 2 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/accel/compress/on /cfg/slb/accel/compress/comppol 1/minsize 1024 /cfg/slb/accel/compress/comppol 1/ena /cfg/slb/virt 1/service 80

56、 http/http/comppol 1,Acceleration : HTTP Multiplexing,8,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,2,1,Many Sessions Are Generated i.e. many SYN packets,O

57、ne or very few Sessions Are At Server Side i.e. 1 or several SYN packets ony,HTTP Multiplexing Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/real 1/rip 01/en /cfg/slb/real 2/rip 02/en /cfg/slb/group 1/add 1/add 2

58、 /cfg/slb/virt 1/vip 00/en /cfg/slb/virt 1/service 80/group 1 /cfg/slb/port 1/client en /cfg/slb/port 2/server en /cfg/slb/pip/type port /cfg/slb/pip/add 23 1 /cfg/slb/port 1/proxy en /cfg/slb/virt 1/service 80 http/http/connmgt ena 20,Acceleration : SSL Offload & Acceleration,10.1.1

59、.88,client,01 (real server 1),02 (real server 2),Phy. Port 1 (client port),Phy. Port 2 (server port),IF 1 : (Vlan 1),VIP : 00,Physical Network Topology,2,1,SSL Traffic (443 port),HTTP Traffic (80 port),Step 1 : Basic Config,/cfg/l2/stg 1/off /cfg/l3/if 1/addr /mask /en /cfg/slb/on /cfg/slb/adv/direct en /cfg/slb/re