Welcome .............................. 7 Document conventions......................7 Safety guidelines........................8 Documentation and release notes ................... 8 Contacting Riverbed ........................ 8 1 - SteelHead SD Overview ........................ 11 Introducing SteelHead SD ..................... 11 SteelHead SD software architecture ..................13 SteelHead SD port mapping between the VMs and physical ports........13 Transforming your SteelHead network...................
Page 4
Contents 4 - Upgrading the SteelHead Appliance Memory ................31 Upgrading the appliance memory ..................31 Prerequisites and requirements ..................31 Adding DIMMs to the SteelHead CX570 appliance ..............32 Adding a DIMM to the SteelHead CX770 appliance ..............34 Adding a DIMM to the SteelHead CX3070 appliance ..............
Page 5
Contents Upgrade failed......................... 69 If the appliance doesn’t come online ................69 License server errors ....................... 69 The certificate from license server doesn’t match the private key ........69 Cannot log in after converting the appliances..............70 A - SteelHead SD Technical Specifications..................71 SteelHead SD 570-SD and 770-SD appliance specifications ..........
This guide is written for storage and network administrators who are familiar with administering and managing WANs. This guide includes information relevant to these products and product features: Riverbed SteelHead SD (SteelHead SD) Riverbed SteelHead (SteelHead) Riverbed SteelConnect (SteelConnect) ...
Safety and Compliance Guide. Before you install, operate, or service the Riverbed products, you must be familiar with the safety information. Refer to the Safety and Compliance Guide if you don’t clearly understand the safety information provided in the product documentation.
Page 9
Welcome Professional services - Need help with planning a migration or implementing a custom design solution? Contact Riverbed Professional Services. Email proserve@riverbed.com or go to https:// www.riverbed.com/services/index.htm. Documentation - Have suggestions about Riverbed’s online documentation or printed materials? ...
Introducing SteelHead SD SteelHead SD combines SD-WAN and cloud networking capabilities (powered by SteelConnect) with Riverbed WAN optimization (powered by RiOS) into a single appliance. SteelHead SD seamlessly integrates advanced SD-WAN functionality with industry-leading WAN optimization, security, and visibility services all in one streamlined appliance. SteelHead SD WAN optimization reduces bandwidth utilization and accelerates application delivery and performance, while providing SteelConnect integration in the SteelOS environment.
Page 12
SteelHead SD Overview Introducing SteelHead SD Typically, SteelHead SD appliances and the SteelConnect SDI-2030 gateway are located in the branch office in conjunction with SteelConnect SDI-5030 gateways at the data center. The SteelConnect SDI- 2030 gateway can also be deployed inline as a 1-Gbps data center gateway with active-active HA. The SteelConnect SDI-2030 gateway can also serve as a very large branch office box with high throughput requirements.
SteelHead SD software architecture SteelHead SD Overview SteelHead SD software architecture SteelHead SD is based on the SteelOS infrastructure. It separates the control and data planes with internal virtual machine (VM) chaining, which provides management-plane autorecovery. Figure 1-2. SteelHead SD software architecture SteelHead SD provides a flexible service platform, consisting of: Routing virtual machine (RVM) - The RVM is the control plane for all the underlay routing.
SteelHead SD Overview Transforming your SteelHead network The SteelHead SD AUX, LAN (LAN0_0, LAN0_1 or on the CX3070 LAN3_0, LAN3_1), and WAN (WAN0_0, WAN0_1 or on the CX3070 WAN3_0, WAN3_1) ports are connected to the SVM and RVM. Basically, there is a Layer 3 edge router on all of these ports.
WAN, Layer 3 hops with the gateway, WAN uplinks, SD-WAN features, SCM cloud management, and high availability (HA). We recommend that you contact Riverbed sales engineering before you begin the in-field upgrade process so that they can assist you with designing and deploying your SD-WAN network.
SteelHead SD Overview SteelHead features changed after upgrading to SteelHead SD SteelHead feature Feature after upgrading to SteelHead SD Caching DNS service SteelHead SD supports the SteelHead caching DNS service. With the caching DNS service, because the AUX port isn’t available to the virtual SteelHead, caching DNS is limited to the primary interface only.
Page 17
Sites supported on SteelHead SD 570-SD, 770-SD, 3070-SD, and SDI-2030 appliances. Consult with your Riverbed sales engineer or Riverbed Professional Services at http://www.riverbed.com/services/index.html. Redirection of UDP traffic Redirection of UDP traffic through the virtual SteelHead is not supported in through the virtual SteelHead SteelHead SD 2.0.
Page 18
SteelHead SD Overview SteelHead features changed after upgrading to SteelHead SD SteelHead feature Feature after upgrading to SteelHead SD Source NAT on underlay traffic Source NAT on underlay traffic is not supported on SteelHead SD 570-SD, 770-SD, 3070-SD, and SDI-2030. SteelHead SD appliances do not perform source NATing on underlay traffic exiting via the Internet uplink if it is destined for a private address, regardless of the configured outbound NAT setting.
Interface behavior before and after upgrading SteelHead SD Overview Interface behavior before and after upgrading Interface attribute Before upgrade (SteelHead) After upgrade (SteelHead SD) Appliance management SteelHead Management Console Primary port interface SteelHead management via The virtual SteelHead instance within the ...
SteelHead SD Overview SteelHead SD and SteelConnect feature compatibility by model SteelHead SD and SteelConnect feature compatibility by model Feature SteelHead SDI- SDI-130 SDI-330 SDI-1030 SDI- Virtual GW Cloud GW 570-SD, 2030 5030 770-SD, 3070-SD eBGP iBGP OSPF — single area OSPF —...
Page 21
SteelHead SD and SteelConnect feature compatibility by model SteelHead SD Overview Feature SteelHead SDI- SDI-130 SDI-330 SDI-1030 SDI- Virtual GW Cloud GW 570-SD, 2030 5030 770-SD, 3070-SD Brownfield transit for (As an (As an (As an (As an (As an internet- edge edge...
SteelHead SD Overview Hardware and software requirements Hardware and software requirements Riverbed component Hardware and software requirements SteelHead SD appliance The SteelHead SD 570-SD and 770-SD appliances are desktop models. The SteelHead SD 3070-SD appliance requires a 19-inch (483 mm) four-post rack. For details, see the Rack Installation Guide.
NIC support SteelHead SD Overview Ethernet network compatibility The SteelHead SD appliance supports these Ethernet networking standards. Ethernet standard IEEE standard Ethernet Logical Link Control (LLC) IEEE 802.2 - 1998 Fast Ethernet 100BASE-TX IEEE 802.3 - 2008 Gigabit Ethernet over Copper 1000BASE-T (All copper interfaces are autosensing for IEEE 802.3 - 2008 speed and duplex.) Gigabit Ethernet over Fiber 1000BASE-SX (LC connector)
SteelHead SD Overview Before you begin contains 1GB NICs that can be used for uplinks if capacity planning doesn't mandate 10-GB. You can buy or exchange the 10-GB bypass NIC with a 10-GB nonbypass NIC prior to upgrading if you prefer. For details on NICs, see the Network and Storage Card Installation Guide.
2.11 image. For details, see “SteelConnect SD-WAN service licensing” on page If you didn’t receive this email, contact your sales representative or Riverbed Support at https:// support.riverbed.com. 2. Write down the SteelConnect serial The first email that you receive contains the SteelConnect number beginning with XN.
Page 26
In-Field Upgrade Workflow Workflow for performing an in-field upgrade Task Reference 6. Add dual in-line memory modules (DIMMs) For details, see “Upgrading the appliance memory” on to upgrade your SteelHead appliance to a page SteelHead SD appliance. 7. Add and register the appliances in For details, see the “Adding and Registering Appliances in SteelConnect Manager (SCM).
SteelHead SD Licensing This chapter describes the procedures for obtaining licenses for the SteelHead SD. It includes these sections: “SteelConnect SD-WAN service licensing” on page 27 “SteelHead WAN optimization service licensing” on page 30 SteelConnect SD-WAN service licensing The SteelConnect SD-WAN service requires a gateway management subscription license that is managed by SCM.
Page 28
SteelHead SD Licensing SteelConnect SD-WAN service licensing Figure 3-1. Example of first email containing link to downloadSteelHead SD software Note: The email you receive may differ slightly from this example. Important: Write down the SteelConnect serial number that starts with XN. You will need the serial number to register your SteelHead SD appliances.
Page 29
2. Connect to SteelConnect Manager. The default login is admin, and the default password is pppp. Note: You should receive an email from the Riverbed Cloud Operations team that contains the URL for connecting to the SteelConnect Manager instance and login information. If you haven’t received this email, contact your sales representative or Riverbed Support at https://support.riverbed.com.
SteelHead WAN optimization service licensing The SteelHead WAN optimization service requires an MSPEC license. Once you connect the SteelHead SD to the network, the system automatically contacts the Riverbed Licensing Portal to retrieve and install license keys for the WAN optimization service.
Check the serial number of the appliance to make sure it is eligible for upgrade. Refer to the first email from Riverbed—all SteelHead serial numbers slated for upgrade are listed in that email. For details regarding the emails you will receive, see “SteelConnect SD-WAN service licensing”...
Upgrading the SteelHead Appliance Memory Adding DIMMs to the SteelHead CX570 appliance Back up your configuration on the SCC or SteelHead Management Console. For details, see “Backing up your SteelHead configuration” on page If you have the Two-Port 10-GbE Fiber SR NIC (410-00302-03/NIC-1-010G-2SR-BP) installed on ...
Page 33
Adding DIMMs to the SteelHead CX570 appliance Upgrading the SteelHead Appliance Memory 3. Slide the cover back and lift upward. The DIMMs are shown in Figure 4-2. Figure 4-2. Locating the DIMM slots 4. Add the three 2-GB DIMMs to fill all the slots. Make sure you align the memory-module edge connector with the slot alignment keys and insert it into the slot.
Upgrading the SteelHead Appliance Memory Adding a DIMM to the SteelHead CX770 appliance 7. To replace the chassis cover, place the top cover on the appliance and slide it toward the front of the chassis until the recessed front edge fits smoothly under the chassis edge. Figure 4-4.
Page 35
Adding a DIMM to the SteelHead CX770 appliance Upgrading the SteelHead Appliance Memory 2. To remove the chassis cover, unscrew the screws as shown in Figure 4-5. Figure 4-5. Removing the chassis cover 3. Slide the cover back and lift upward. The DIMMs are shown in Figure 4-6.
Page 36
Upgrading the SteelHead Appliance Memory Adding a DIMM to the SteelHead CX770 appliance 5. Add the new 8-GB DIMM in slot A1. Make sure you align the memory-module edge connector with the slot alignment keys and insert it into the slot. The module slot has two alignment keys that allow you to install the module in only one direction.
Adding a DIMM to the SteelHead CX3070 appliance Upgrading the SteelHead Appliance Memory 12. Connect to the SteelHead Management Console and choose Reports > Diagnostics: System Details. Under Memory, the status states OK. 13. Under Memory, click the right arrow (>) to expand the page. The installed and available memory is listed.
Page 38
Upgrading the SteelHead Appliance Memory Adding a DIMM to the SteelHead CX3070 appliance 3. Slide the cover back and lift upward (letter B). 4. Locate the air duct and lift straight up. Figure 4-11. Removing the air duct 5. If you have the Two-Port 10-GbE Fiber SR NIC (410-00302-03/NIC-1-010G-2SR-BP) installed, you must remove the card before you begin the in-field upgrade.
Page 39
Adding a DIMM to the SteelHead CX3070 appliance Upgrading the SteelHead Appliance Memory 8. Ensure that all ejector tabs are in the upright locked position. If the ejector tabs aren’t in the upright locked position, the memory might not be recognized when you reboot the appliance. 9.
Upgrading the SteelHead Appliance Memory Troubleshooting 16. Under Memory, click the right arrow (>) to expand the page. The installed and available memory is listed. If the screen doesn’t show OK or if the memory listed is incorrect, open the appliance and make sure that each memory module is seated firmly in the slots and that the white ejector tabs are in the upright locked position.
To register SteelHead appliances that you are converting, you will need the SteelHead SD serial number that was sent via email by Riverbed. The SteelConnect serial number starts with XN. Make sure you register your appliances using the SteelConnect serial number. If you don’t, the SCM won’t autodetect the appliances when you register them.
The email contains the URL for connecting to SCM and the default login and password: admin and pppp. This email is requested by the sales team and sent by the Riverbed Cloud Operations team. For details on configuring SD-WAN settings, see “Quick Start” and “Designing a Network,” in the SteelConnect Manager User Guide.
Defining an organization Adding and Registering Appliances in SCM Defining an organization The first task is to define an organization. SCM uses these terms to describe your company: Organization - A company representing an end customer. You can assign administrative rights to ...
Adding and Registering Appliances in SCM Adding zones All internet connections, or uplinks, are automatically created when you set up your sites. By default, all uplinks use DHCP; however, SteelConnect also supports static IPs and PPPoE with authentication. For details, see “Creating uplinks” in the SteelConnect Manager User Guide. To add sites 1.
Adding shadow appliances Adding and Registering Appliances in SCM You can add zones to any sites or any organization. A zone belongs to a site, but it can also belong to multiple sites. A site is a location like an office building, a hosting center, or a cloud location. Every site has at least one internet uplink and one local network zone.
Page 46
Registering SteelHead SD appliances To register appliances 1. Locate the SteelConnect serial number either from the email that you received from Riverbed or from the appliance label. The SteelConnect serial number starts with XN. Figure 5-4. Locating the serial number that starts with XN 2.
Recabling the appliance Adding and Registering Appliances in SCM After AutoVPN establishes the tunnels, you can view the dashboard map to see a visible representation of the network. Click a site marker to verify that the locations are completely connected with a full- mesh VPN.
Adding and Registering Appliances in SCM Recabling the appliance Port Description WANX_X WAN ports function as uplinks for internet service providers that connect to the internet. Connect the WAN port to a WAN router using a straight-through cable. For SteelHead SD 570-SD and 770-SD appliances, the default internet access port is WAN0_0 or WAN0_1.
Page 49
Recabling the appliance Adding and Registering Appliances in SCM For example, on a 570-SD or 770-SD appliance, use a straight-through cable to connect the WAN0_0 or WAN0_1 port to an internet uplink or to an MPLS uplink for back-hauled internet traffic. On a 3070-SD appliance, connect either the WAN3_0 or WAN3_1 port to a WAN router.
Page 50
Adding and Registering Appliances in SCM Recabling the appliance SteelHead SD In-Field Upgrade Guide...
Upgrading the SteelHead Software This chapter describes how to install the software image to upgrade your SteelHead appliance to a SteelHead SD appliance. It includes these sections: “Requirements and prerequisite tasks prior to upgrading” on page 51 “DHCP versus static IP” on page 53 ...
Page 52
The SteelConnect serial number always begins with the prefix XN. The serial numbers are in the email from Riverbed that you received when your sales order was confirmed. For details, see “SteelConnect SD-WAN service licensing” on page Your SteelHead configuration must be backed up or saved and copied to an external machine, ...
DHCP to obtain the system primary IP address. After the new image is downloaded and reflashed, the appliance reboots and acquires a temporary WAN IP address via DHCP for communication over the internet. It then contacts SCM and the Riverbed licensing servers to download certificates and complete the installation as a SteelHead SD appliance.
“Configuring WAN optimization on the virtual SteelHead” in the SteelHead SD Installation Guide. 3. After completing the in-field upgrade, you must make a LAN router change that can be performed remotely that is minimally disruptive and low risk. For details, consult with your Riverbed sales engineer or Riverbed Professional Services at http://www.riverbed.com/services/index.html.
The virtual SteelHead should perform autolicensing after the upgrade, if it doesn’t either push the policy you created or go to the Riverbed Licensing Portal at https:// licensing.riverbed.com/ and follow the instructions for retrieving your licenses.
Upgrading the SteelHead Software Upgrading software using the SCC To save your configuration using the SteelHead Management Console To save your SteelHead configurations from the SteelHead Management Console, choose Administration > System Settings to save and copy your configuration to a local machine. For details, see “Managing configuration files”...
Page 57
Upgrading software using the SCC Upgrading the SteelHead Software To install your software using the SCC 1. Choose Manage > Upgrades > In-Field Upgrades to display the Upgrade SteelHead to SteelHead SD page. Figure 6-4. Upgrade SteelHead to SteelHead SD page 2.
Page 58
Upgrading the SteelHead Software Upgrading software using the SCC 3. Click Select the appliances to display the Launching SteelHead SD upgrade job page. Figure 6-6. Selecting the target version and appliances 4. Choose the SteelHead SD target image from the drop-down list. If there are no target images available, you are directed to the Local Images page to install the software image.
Page 59
Upgrading software using the SCC Upgrading the SteelHead Software 8. Click Summary to display the upgrade summary page. Figure 6-8. Displaying summary information 9. Click Upgrade to begin the upgrade operation and display the Exit page, which displays exit information including the time for the upgrade process. Figure 6-9.
Upgrading the SteelHead Software Upgrading software using the SteelHead Management Console 11. After installing the software, connect to SCM and choose Appliances > Overview. You will see the new SteelHead SD listed with status Firmware Upgrade. After the system finishes the upgrade process, the status changes to Online.
Upgrading software using the SteelHead Management Console Upgrading the SteelHead Software If you use the SteelHead CLI to download and install the image, you can download the image, save it, and install it later. If you use the SteelHead Management Console GUI to download and install the image, we recommend you install the image using the secure copy protocol (SCP).
Page 62
Upgrading the SteelHead Software Upgrading software using the SteelHead Management Console 3. Type SHSD_STATIC in the MOTD text box and click Apply. Figure 6-12. Adding a string to the MOTD 4. Click Apply to apply your changes to the running configuration. 5.
Page 63
Upgrading software using the SteelHead Management Console Upgrading the SteelHead Software 2. To configure the DNS name server, choose Networking > Networking: Host Settings. Figure 6-13. Configuring DNS 3. Under DNS Settings, complete the configuration as described in this table. Control Description Primary DNS Server...
Page 64
Upgrading the SteelHead Software Upgrading software using the SteelHead Management Console You configure the in-path default gateway to point to the zone gateway IP address in SteelConnect. An in-path interface that isn’t configured will result in the corresponding uplink being configured as DHCP in SCM.
Upgrading software using the SteelHead Management Console Upgrading the SteelHead Software 5. Click Apply to apply your changes to the running configuration. 6. Click Save to Disk to save your settings permanently. Installing the image using the SteelHead Management Console If you are using the to SteelHead Management Console install the image, we recommend you install the image using SCP.
Page 66
Upgrading the SteelHead Software Upgrading software using the SteelHead Management Console 4. Type the SCP URL in the From URL text box in the format scp://username:password@host/path. You must use SCP to download the image. The download can take up to 3.5 hours. Figure 6-15.
“What’s next” on page 67 To install the image using the CLI 1. Log in to the CLI. For details, see the Riverbed Command-Line Interface Reference Manual. 2. Enter configuration mode. For details, see the Riverbed Command-Line Interface Reference Manual.
SteelHead SD installer failure If a failure happens after the system has already booted to the SteelHead SD installer and the partitioning has been done, the appliance will have to be USB remanufactured. Contact Riverbed Support at https://support.riverbed.com. Can’t generate config error Typically, this error occurs when assignments are missing in SteelConnect.
status, make sure you have connectivity to the internet. If you have internet connectivity and automatic licensing continues to fail, go to the Riverbed Licensing Portal at https:// licensing.riverbed.com/ and follow the instructions for retrieving your licenses. If you have a successful HTTP status but an error is returned in the serial number query. This error ...
Upgrading the SteelHead Software Troubleshooting Cannot log in after converting the appliances After upgrading, SteelHead SD appliances will be set to the default admin password (password). You must reconfigure the admin password for the virtual SteelHead and update the stored password on the SCC.
SteelHead SD Technical Specifications This appendix describes the status lights, ports, and technical and environmental specifications for SteelHead SD 570-SD, 770-SD, and 3070-SD appliances. It includes these sections: “SteelHead SD 570-SD and 770-SD appliance specifications” on page 71 “SteelHead SD 3070-SD appliance specifications” on page 73 ...
SteelHead SD Technical Specifications SteelHead SD 570-SD and 770-SD appliance specifications This table summarizes the system LEDs. Status System Healthy = Blue Degraded = Yellow Critical = Red Power Off = None Power Button LED System Off = No Light Standby Mode = Yellow Power On = Blue Hard Drive LED...
SteelHead SD 3070-SD appliance specifications SteelHead SD Technical Specifications Specification 570-SD desktop L-M-H 770-SD desktop L-M-H Data store 70 GB SSD 150 GB SSD Dimensions 13 x 8 x 1.73 in. 13 x 8 x 1.73 in. (LxWxH) (330 x 204 x 44 mm) (330 x 204 x 44 mm) Weight 5.5 lb...
SteelHead SD Technical Specifications SteelHead SD 3070-SD appliance specifications Status lights and ports Figure A-3. SteelHead SD 3070-SD appliance front panel with LEDs and buttons Figure A-4. SteelHead SD 3070-SD appliance back panel Note: On the SteelHead SD 3070-SD appliance, the appliance uses the NIC in slot 3 for the default interface names so the ports are labeled WAN3_0 and WAN3_1.
Page 75
SteelHead SD 3070-SD appliance specifications SteelHead SD Technical Specifications This table summarizes the appliance LEDs and buttons. Reference LED/button Description System ID Button with Maintenance = Blue Integrated LED Toggles the integrated ID LED and the blue server board ID LED on and off.
SteelHead SD Technical Specifications SteelHead SD 3070-SD appliance specifications Reference LED/button Description LEDs on Default 4-Port Link/Activity LED Copper Bypass Card Link = Green Activity = Blinks Green Speed/Bypass/Disconnect LED 1000 Mbps = Yellow 100 Mbps = Green 10 Mbps = Off Bypass = Blinks Green Disconnect = Blinks Yellow LEDs on Power Supply...
SteelHead SD 3070-SD appliance specifications SteelHead SD Technical Specifications Power requirements and consumption This table summarizes the power specifications for the appliances. The appliances are rated at the following power characteristics when operating at nominal AC input voltages (120 V and 230 V). System 3070-SD 3070-SD...
SteelHead SD Port Mappings This chapter summarizes the port mappings for the SteelHead SD 570-SD, 770-SD, and 3070-SD appliances. It includes these sections: “Port mapping between the VMs and physical ports” on page 79 “SteelHead SD 570-SD and 770-SD appliances” on page 80 ...
SteelHead SD Port Mappings SteelHead SD 570-SD and 770-SD appliances SteelHead SD 570-SD and 770-SD appliances Physical ports The SteelHead SD 570-SD and 770-SD appliances have these ports: AUX, PRI, LAN0_0, WAN0_0, LAN0_1, WAN0_1 CVM ports The CVM has these ports: knet2, knet3, knet4, knet5, knet6, knet7 ...
SteelHead SD Port Mappings SteelHead SD 3070-SD appliance CVM ports The CVM has these ports: knet2, knet3, knet4, knet5, knet6, knet7 These ports are present only if you have installed an add-on NIC: knet8, knet9, knet10, knet11 Physical port to flows port mapping Physical port Primary LAN3_0...
<hostname> should be the same as what appears in the URL for SCM. For example, if your SCM is testcompany.riverbed.cc, then you would use testcompany for the <hostname>. The API port is listed as port 3900. In most cases, it is 3900. This can be verified by performing a DNS query for _cc._tcp.<hostname>.riverbed.cc.
Need help?
Do you have a question about the SteelHead 570-SD and is the answer not in the manual?
Questions and answers