Riverbed 200 Installation And Configuration Manual

Riverbed 200 Installation And Configuration Manual

Steelhead appliance
Table of Contents

Advertisement

Steelhead Appliance
Installation and Configuration Guide
Version 5.5.4
July 2009

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 200 and is the answer not in the manual?

Questions and answers

Summary of Contents for Riverbed 200

  • Page 1 Steelhead Appliance Installation and Configuration Guide Version 5.5.4 July 2009...
  • Page 2 Technical Support site at https://support.riverbed.com. Certain libraries were used in the development of this software, licensed under GNU Lesser General Public License, Version 2.1, February 1999. For a list of libraries, see the Riverbed Technical Support at https://support.riverbed.com. You must log in to the support site to request modified source code.
  • Page 3: Table Of Contents

    Hardware and Software Dependencies......................8 Ethernet Network Compatibility.........................9 SNMP-Based Management Compatibility....................9 Antivirus Compatibility..........................9 Additional Resources ..........................10 Online Notes............................10 Riverbed Documentation and the Support Knowledge Base ............10 Related Reading ............................10 Safety Guidelines ............................11 Contacting Riverbed............................11 Internet ..............................11 Technical Support ..........................11 Professional Services ..........................11 Documentation............................12...
  • Page 4 Contents Technical Specifications ..........................22 Series 250, 550, 1050, 2050, 5050, 6050....................23 Model 50, 100, 200, and 300.........................24 Model 520, 1020, 1520, 2020, 3020, 3520, 5520, 6020, and 6120............24 Model 500, 510, 1000, 1010, 2000, 2010, 3000, 3010, 3510, 5000, and 5010........26 Environmental Specifications ........................27 Series xx50 Status Lights and Ports......................29 Series 250 and 550 ..........................29...
  • Page 5 Contents Configuring In-Path Steelhead Appliances .....................57 Avoiding Duplex Mismatch ........................57 The Configuration Wizard ........................57 Connecting the Steelhead Appliance to Your Network ..............61 Verifying Your Connections ........................62 Connecting to the Management Console ..................64 Verifying Your Configuration ......................65 Configuring Out-of-Path Steelhead Appliances ..................66 Before You Begin...........................66 Connecting the Steelhead Appliance to Your Network ..............69 Configuring the Client-Side Appliance.....................69...
  • Page 6 Contents Steelhead Appliance Installation and Configuration Guide...
  • Page 7: Introduction

    “SNMP-Based Management Compatibility” on page 9 “Antivirus Compatibility” on page 9 “Additional Resources” on page 10 “Safety Guidelines” on page 11 “Contacting Riverbed” on page 11 About This Guide The Steelhead Appliance Installation and Configuration Guide describes how to install and configure the Steelhead appliance.
  • Page 8: Document Conventions

    {delete <filename> | upload <filename> Hardware and Software Dependencies The following table summarizes the hardware and software requirements for the Steelhead appliance. Riverbed Component Hardware and Software Requirements Steelhead Appliance 19 inch (483 mm) two or four-post rack. (The Model 50, 100, 200, 250, 300, 550 does not require a rack.)
  • Page 9: Ethernet Network Compatibility

    SNMP-Based Management Compatibility The Steelhead appliance supports a proprietary Riverbed MIB accessible through SNMP. Both SNMP v1 (RFCs 1155, 1157, 1212, and 1215) and SNMP v2c (RFCs 1901, 2578, 2579, 2580, 3416, 3417, and 3418) are supported, although some MIB items can only be accessible through SNMPv2.
  • Page 10: Additional Resources

    Steelhead appliance. Riverbed Documentation and the Support Knowledge Base For a complete list and the most current version of Riverbed documentation log in to the Riverbed Technical Support Web site located at https://support.riverbed.com. The Riverbed Knowledge Base is a database of known issues, how-to documents, system requirements, and common error messages.
  • Page 11: Safety Guidelines

    Safety and Compliance Guide. Before you install, operate, or service the Riverbed products, you must be familiar with the safety information. Refer to the Safety and Compliance Guide if you do not clearly understand the safety information provided in this guide.
  • Page 12: Documentation

    Contacting Riverbed Documentation We continually strive to improve the quality and usability of our documentation. We appreciate any suggestions you may have about our online documentation or printed materials. Send documentation comments to techpubs@riverbed.com. Steelhead Appliance Installation and Configuration Guide...
  • Page 13: Chapter 1 - Overview Of The Steelhead Appliance

    Overview of the Steelhead Appliance CHAPTER 1 This chapter provides an overview of common terms, new features, upgrade instructions, technical and environmental specifications, and a description of the status lights for the system. This chapter includes the following sections: “Overview of the Steelhead Appliance,” next “New Features in Version 5.5”...
  • Page 14 65% to 98% for TCP-based applications using Data Streamlining. In addition to traditional techniques like data compression, RiOS also uses a Riverbed proprietary algorithm called Scalable Data Referencing (SDR). SDR breaks up TCP data streams into unique data chunks that are stored in the hard disk (data store) of the device running RiOS (a Steelhead appliance or Steelhead Mobile host system).
  • Page 15: The Auto-Discovery Process

    Steelhead appliances running the original auto-discovery protocol. Configuring Optimization You configure optimization of traffic using the Management Console or the Riverbed CLI. You configure what traffic a Steelhead appliance optimizes and specify the type of action it performs using: In-Path rules.
  • Page 16: Fail-To-Wire (Bypass) Mode

    Overview of the Steelhead Appliance Overview of the Steelhead Appliance Deny. Drop the SYN packet and send a message back to its source. Discard. Drop the SYN packet silently. Peering rules. Peering rules determine how a Steelhead appliance reacts when it sees a probe query. Peering rules are an ordered list of fields a Steelhead appliance uses to match with incoming SYN packet fields (for example, source or destination subnet, IP address, VLAN, or TCP port) as well as the IP address of the probing Steelhead appliance.
  • Page 17: Fail-To-Block (Disconnect) Mode

    Steelhead appliance blocks it. Note: You can use this with connection forwarding, the allow-failure CLI command, and an additional Steelhead appliance on another path to the WAN to achieve redundancy. For more information, see the Riverbed Command- Line Interface Reference Manual.
  • Page 18: New Features In Version 5.5

    For a description of the fail-to-block limitations per NIC on systems running software versions prior to RiOS v5.0, see the Network Interface Card Installation Guide. You set fail-to-block mode in the Steelhead CLI. For detailed information, see the Riverbed Command-Line Interface Reference Manual and the Network Interface Card Installation Guide.
  • Page 19 New Features in Version 5.5 Overview of the Steelhead Appliance Data Protection (backup and disaster recovery). The new data protection features in RiOS v5.5.x further improve the throughput of Steelhead appliances resulting in improved recovery point and backup times. A combination of multi-core balancing, enhanced adaptive data streamlining modes, and adaptive compression are all geared towards further improving throughput for data center workloads and data protection scenarios.
  • Page 20: Upgrading Rios To Version 5.5.4

    Overview of the Steelhead Appliance Upgrading RiOS to Version 5.5.4 Upgrading RiOS to Version 5.5.4 RiOS 5.5 is backward compatible with previous RiOS versions. However, to obtain the full benefits of the new features in RiOS 5.5, you need to upgrade the client-side and server-side Steelhead appliances on any given WAN link.
  • Page 21: Upgrading Rios Software

    Upgrading RiOS to Version 5.5.4 Overview of the Steelhead Appliance All subsequent v4.1.x and v5.0.x releases allow for a normal upgrade to v5.5. Upgrading RiOS Software Follow these steps to upgrade your RiOS software. These instructions assume you are familiar with the Steelhead appliance, the CLI, and the Management Console.
  • Page 22: Downgrading The Software

    Technical Specifications To upgrade RiOS software 1. Download the software image from the Riverbed Technical Support to a location such as your desktop. 2. Log in to the Management Console using the Administrator account (admin). 3. Navigate to the Configure - Maintenance - Software Upgrade page and choose one of the following options: –...
  • Page 23: Series 250, 550, 1050, 2050, 5050, 6050

    Technical Specifications Overview of the Steelhead Appliance Series 250, 550, 1050, 2050, 5050, 6050 The following table summarizes the physical and power specifications for the latest hardware platform for the Steelhead appliance. Bypass Power (W) Height, Weight Data Voltage Ports/ Series Hard Disk Width,...
  • Page 24: Model 50, 100, 200, And 300

    Overview of the Steelhead Appliance Technical Specifications Model 50, 100, 200, and 300 The following table summarizes the physical and power specifications for the desktop Steelhead appliances. Volts Power Height, Voltage Power Hard Data Power Model Amperes Factor Width, Weight Amperes Disk Store...
  • Page 25 Technical Specifications Overview of the Steelhead Appliance Height, Volts Power Voltage Power Amperes Hard Data Width, Model Amperes Factor Weight Disk Store (V*A) (W/VA) Frequency Depth 2020 2 x 250 1.69 x 17.6 26 lb. 100-240 V Single (1U) x 21.5 in 12 kg 345 W 50-60 Hz...
  • Page 26: Model 500, 510, 1000, 1010, 2000, 2010, 3000, 3010, 3510, 5000, And 5010

    Overview of the Steelhead Appliance Technical Specifications Model 500, 510, 1000, 1010, 2000, 2010, 3000, 3010, 3510, 5000, and 5010 The following table summarizes the physical and power specifications for the x00, x10, xx00, and xx10 Steelhead appliances. Typical Height, Power Current Hard...
  • Page 27: Environmental Specifications

    Environmental Specifications Overview of the Steelhead Appliance Typical Height, Power Current Hard Data Voltage and Model Power Width, Weight and Load Disk Store Frequency Draw and Depth 5000 2 x 460 8A-4 A 1569 6 x 200 5.2 x 16.9 x 67 lb.
  • Page 28 Overview of the Steelhead Appliance Environmental Specifications Temperature Temperature Model Relative Humidity Storage Humidity Operating Altitude (Operating) (Storage) 0º - 50º C -20º - 70º C 20% - 80% 5% - 95% Up to 10,000 ft. 32° - 122º F -4º...
  • Page 29: Series Xx50 Status Lights And Ports

    Series xx50 Status Lights and Ports Overview of the Steelhead Appliance Series xx50 Status Lights and Ports This section describes the Series xx50 status lights and ports. Series 250 and 550 The following figure illustrates the Series 250 and 550 status light and port locations. Figure 1-2.
  • Page 30: Series 1050 And 2050

    Overview of the Steelhead Appliance Series xx50 Status Lights and Ports Series 1050 and 2050 The following figure illustrates the Series 1050 and 2050 status light and port locations. Figure 1-4. Front Panel Figure 1-5. Back Panel The following table summarizes the system LEDs. Healthy = Blue SYSTEM LEDs Degraded = Yellow...
  • Page 31: Series 5050 And 6050

    LED to solid orange. A log entry of this predictive-fail can be viewed using the show hardware error-log all command in the Riverbed Command-Line Interface. No LED= No AC power connected. Series 5050 and 6050 The following figure illustrates the Series 5050 and 6050 status light and port locations.
  • Page 32 Overview of the Steelhead Appliance Series xx50 Status Lights and Ports Figure 1-7. Back Panel Healthy = Blue SYSTEM LEDs Degraded = Yellow Critical = Red System Boot = Yellow Link = Solid Blue NETWORK STATUS LEDs Activity = Blinking Blue Normal = No Light BYP/BLK (Bypass or Block (Disconnect) Mode)
  • Page 33: Series Xx00 And Xx10 Status Lights And Ports

    LED to solid orange. A log entry of this predictive-fail can be viewed using the show hardware error-log all command in the Riverbed Command-Line Interface. No LED= No AC power connected. Series xx00 and xx10 Status Lights and Ports This section describes the status lights and ports for the Model xx00 and xx10.
  • Page 34: Model 500, 510, 1000, 1010, 2001, And 2010

    Overview of the Steelhead Appliance Series xx00 and xx10 Status Lights and Ports The following table summarizes the LED descriptions for the Model 50, 100, 200, and 300. LED Button Color Condition Description Power Green System On Green Linked Amber FLASHING WAN Port Activity Green...
  • Page 35: Model 3000, 3010, 5000, And 5010

    Series xx20 Rev-A and Rev-B Status Lights and Ports Overview of the Steelhead Appliance Model 3000, 3010, 5000, and 5010 The following figure illustrates the Model 3000, 3010, 5000, and 5010. Figure 1-12. Front Panel Figure 1-13. Back Panel Series xx20 Rev-A and Rev-B Status Lights and Ports This section describes the status lights and ports for the Model xx20 Rev-A and Rev-B platform.
  • Page 36: Model 520, 1020, 1520, And 2020 Rev-A

    Overview of the Steelhead Appliance Series xx20 Rev-A and Rev-B Status Lights and Ports Model 520, 1020, 1520, and 2020 Rev-A The following figure illustrates the Model 520, 1020, 1520, and 2020 Rev-A. Figure 1-14. Front Panel Figure 1-15. Back Panel Model 520, 1020, 1520, and 2020 Rev-B The following figure illustrates the Model 520, 1020, 1520, and 2020 Rev-B.
  • Page 37: Model 3020, 3520, 5520, 6020, And 6120

    Series xx20 Rev-A and Rev-B Status Lights and Ports Overview of the Steelhead Appliance The following table summarizes the LED descriptions for the Model 520, 1020, 1520, and 2020 Rev-A and Rev-B. LED Indicator Description Blue/amber system status indicator The blue system status indicator lights up during normal system operation.
  • Page 38 Overview of the Steelhead Appliance Series xx20 Rev-A and Rev-B Status Lights and Ports LED Button Color Condition Description Power Green System On System Off Hard Disk Drive Amber FLASHING Hard Disk Drive Activity No Activity Network Green Linked FLASHING LAN Activity Disconnected Overheat...
  • Page 39: Bypass Card Status Lights

    Bypass Card Status Lights Overview of the Steelhead Appliance Bypass Card Status Lights The Steelhead appliance is equipped with one of the following types of bypass interfaces depending on your order. For adding and replacing bypass cards, see the Network Interface Card Installation Guide. Bypass Cards Series xx50 Status Lights The following section describes the status lights for the bypass cards supported on Series xx50 platforms.
  • Page 40: Four-Port Copper Gigabit-Ethernet Pci-E Bypass Card

    Overview of the Steelhead Appliance Bypass Card Status Lights Four-Port Copper Gigabit-Ethernet PCI-E Bypass Card The following section describes the Four-Port Copper Gigabit-Ethernet PCI-E Bypass (Four-Port Copper Gig-E PCI-E Bypass) card (410-00103-01) status lights. Figure 1-20. Four-Port Copper Gig-E PCI-E Bypass Card The following table describes the Four-Port Copper Gigabit-Ethernet PCI-E Bypass card status and LED lights.
  • Page 41: Four-Port Sx Fiber Gigabit-Ethernet Pci-E Bypass Card

    Bypass Card Status Lights Overview of the Steelhead Appliance Condition Blinks green on activity. Activity Solid green in bypass mode. Solid yellow in Bypass/Fail-to-Block (Disconnect) disconnect mode. Four-Port SX Fiber Gigabit-Ethernet PCI-E Bypass Card The following section describes the Four-Port SX Fiber Gigabit-Ethernet PCI-E Bypass (Four-Port SX Fiber Gig-E PCI-E Bypass) card (410-00102-01) status lights.
  • Page 42: Four-Port Lx Fiber Gigabit-Ethernet Pci-E Bypass Card

    Overview of the Steelhead Appliance Bypass Card Status Lights The following table describes the Two-Port LX Fiber Gigabit-Ethernet PCI-E Bypass card status and LED lights. Condition Solid yellow on link. Link Blinks green on activity. Activity Solid green in bypass mode. Solid yellow in Bypass/Fail-to-Block (Disconnect) disconnect mode.
  • Page 43: Bypass Card Manufacturing Numbers Series Xx00, Xx10, And Xx20

    Bypass Card Status Lights Overview of the Steelhead Appliance Bypass Card Manufacturing Numbers Series xx00, xx10, and xx20 The following section describes the bypass card manufacturing part numbers. To determine the manufacturing part number for your bypass card, run the show hardware command in the CLI. Description Old Manufacturing New Manufacturing...
  • Page 44: Two-Port Copper Gigabit-Ethernet Bypass Card-A

    Overview of the Steelhead Appliance Bypass Card Status Lights To validate a Two-Port Copper Fast-Ethernet Bypass Card (150-00001) For the Two-Port Copper Fast-Ethernet Bypass card (150-00001), the links are indicated by four status lights: The bottom two amber lights indicate the card is not in bypass mode. The top two green LEDs are lit if there is link.
  • Page 45: Two-Port Copper Gigabit-Ethernet Bypass Card-B

    Bypass Card Status Lights Overview of the Steelhead Appliance Status Left LED Right LED SOLID 100 Mbps Link (100 Base T) FLASHING Active FLASHING SOLID 1000 Mbps Link (1000 Base T) FLASHING FLASHING Active To validate a Two-Port Copper Gigabit-Ethernet Bypass Card (150-00004) For the Two-Port Copper Gigabit-Ethernet Bypass card (150-00004), the links are indicated by the following status lights: Flashing green LEDs on the ports.
  • Page 46: Four-Port Copper Gigabit-Ethernet Bypass Card

    Overview of the Steelhead Appliance Bypass Card Status Lights Four-Port Copper Gigabit-Ethernet Bypass Card The following section describes the Four-Port Copper Gigabit-Ethernet Bypass (Four-Port Copper Gig-E Bypass) card (150-00006) status lights. Figure 1-28. Four-Port Copper Gig-E Bypass Card The following table describes the Four-Port Copper Gig-E Bypass card status and LED lights. Interface Interface Bypass...
  • Page 47: Six-Port Copper Gigabit-Ethernet Bypass Card

    Bypass Card Status Lights Overview of the Steelhead Appliance Six-Port Copper Gigabit-Ethernet Bypass Card The following section describes the Six-Port Copper Gigabit-Ethernet Bypass (Six-Port Copper Gig-E Bypass) card (150-00011) status lights. The Six-Port Copper Gig-E Bypass card has full fail-to-block support. Figure 1-30.
  • Page 48: Four-Port Sx Fiber Gigabit-Ethernet Bypass Card

    Overview of the Steelhead Appliance Bypass Card Status Lights Four-Port SX Fiber Gigabit-Ethernet Bypass Card The following section describes the Four-Port SX Fiber Gigabit-Ethernet Bypass (Four-Port SX Fiber Gig-E Bypass) card (150-00010) status lights. Figure 1-32. Four-Port SX Fiber Gig-E Bypass Card The Bypass LED is ON (Green) if the Four-Port Copper Gig-E Bypass card is in bypass mode;...
  • Page 49: Chapter 2 - Installing And Configuring The Steelhead Appliance

    Installing and Configuring the CHAPTER 2 Steelhead Appliance This chapter describes how to install and configure the Steelhead appliance. This chapter includes the following sections: “Choosing a Network Deployment,” next “Checking Your Inventory” on page 52 “Preparing Your Site for Installation” on page 52 “Completing the Configuration Checklist”...
  • Page 50: Choosing A Network Deployment

    Installing and Configuring the Steelhead Appliance Choosing a Network Deployment For optimal performance, you should seek to minimize latency between Steelhead appliances and their respective clients and servers. Steelhead appliances should be as close as possible to your network end points (client-side Steelhead appliances should be as close to your clients as possible and server-side Steelhead appliances should be as close to your servers as possible).
  • Page 51 Choosing a Network Deployment Installing and Configuring the Steelhead Appliance Out-of-Path. In an out-of-path deployment, the Steelhead appliance is not in the direct path between the client and the server. In an out-of-path deployment, the Steelhead appliance acts as a proxy. This type of deployment might be suitable for locations where physical in-path or virtual in-path configurations are not possible.
  • Page 52: Checking Your Inventory

    A clean power source dedicated to computer devices and other electronic equipment. A standard 19-inch Telco-type mounting rack. Note: Riverbed recommends you use a four-post mounting rack for the 3U systems. Steelhead Appliance Installation and Configuration Guide...
  • Page 53: Completing The Configuration Checklist

    Completing the Configuration Checklist Installing and Configuring the Steelhead Appliance Caution:The Model 50, 100, 200, and 300 is designed for the desktop. If you install the Model 50, 100, 200, or 300 in a rack, do not place equipment on top of the unit; it causes restricted airflow and can damage the equipment or reduce performance.
  • Page 54: Steelhead Appliance Ports

    Installing and Configuring the Steelhead Appliance Completing the Configuration Checklist half-duplex. This duplex mismatch passes traffic, but it causes late collisions and results in degraded optimization. To achieve maximum optimization set the network devices to 100 and full. Steelhead Appliance Ports The following table summarizes the ports used to connect the Steelhead appliance to your network.
  • Page 55: Powering On The Steelhead Appliance

    Powering On the Steelhead Appliance Installing and Configuring the Steelhead Appliance Powering On the Steelhead Appliance The following section describes how to connect the AC power and how to power on the system. Caution:In European electrical environments you must ground (earth) the Green/Yellow tab on the power cord. If you do not ground the Green/Yellow tab, it can cause an electrical shock.
  • Page 56: Connecting To The Steelhead Appliance

    Note: If you are using the Steelhead appliance with a terminal server, the terminal server must use hardware flow control for the port connected to the Steelhead appliance. Tip: Riverbed recommends you connect the console port to a device that logs output. Although this is not a requirement, it can help you to identify problems with the system.
  • Page 57: Configuring In-Path Steelhead Appliances

    Configuring In-Path Steelhead Appliances Installing and Configuring the Steelhead Appliance Configuring In-Path Steelhead Appliances In a physical in-path deployment, the Steelhead appliance is physically in the direct path between clients and servers. The clients and servers continue to see client and server IP addresses. Physical in-path configurations are suitable for any location where the total bandwidth is within the limits of the installed Steelhead appliance.
  • Page 58 # configure terminal (config) # configuration jump-start For detailed information about the CLI, see the Riverbed Command-Line Interface Reference Manual. To configure the Steelhead appliance in an in-path deployment 1. If you have a Steelhead Central Management Console (CMC) appliance installed in your network to manage multiple Steelhead appliances you can use it to automatically configure them.
  • Page 59 Installing and Configuring the Steelhead Appliance Wizard Prompt Description Example Step 8: Admin password? Riverbed strongly recommends that Step 8: Admin password? xxxyyy you change the default administrator password at this time. The password must be a minimum of 6 characters.
  • Page 60 Installing and Configuring the Steelhead Appliance Configuring In-Path Steelhead Appliances Wizard Prompt Description Example Step 19: Set the in-path: WAN Enter the in-path, WAN interface Step 19: Set the in-path: WAN interface speed? speed. Make sure this value matches interface speed? [auto] auto the settings on your router or switch.
  • Page 61: Connecting The Steelhead Appliance To Your Network

    Configuring In-Path Steelhead Appliances Installing and Configuring the Steelhead Appliance Connecting the Steelhead Appliance to Your Network You use CAT-5E straight-through and cross-over cables to connect to your network in an in-path configuration. Make sure you use the correct cables to establish your network connections: Straight-through cables.
  • Page 62: Verifying Your Connections

    Installing and Configuring the Steelhead Appliance Configuring In-Path Steelhead Appliances 4. Using the provided cross-over cable, plug the cable into the WAN port of the Steelhead appliance and the WAN router. This must be a cross-over cable. Figure 2-9. Connecting the WAN Port to the WAN Router Note: If you have a four or six-port bypass card, repeat Step 1 through...
  • Page 63 Configuring In-Path Steelhead Appliances Installing and Configuring the Steelhead Appliance Figure 2-10. Resolving IP Connectivity Steelhead Appliance Installation and Configuration Guide...
  • Page 64: Connecting To The Management Console

    Installing and Configuring the Steelhead Appliance Configuring In-Path Steelhead Appliances Connecting to the Management Console After you configure the Steelhead appliance, you can check and modify your configuration settings and view performance reports and system logs in the Management Console. You can connect to the Management Console through any supported Web browser.
  • Page 65: Verifying Your Configuration

    Configuring In-Path Steelhead Appliances Installing and Configuring the Steelhead Appliance 2. In the Account text box, type the user login: admin, monitor, a login from a RADIUS, or a TACACS+ database. The default login is admin. Users with administrator (admin) privileges can configure and administer the Steelhead appliance. Users with monitor (monitor) privileges can view connected Steelhead appliances, reports, and system logs.
  • Page 66: Configuring Out-Of-Path Steelhead Appliances

    Installing and Configuring the Steelhead Appliance Configuring Out-of-Path Steelhead Appliances Configuring Out-of-Path Steelhead Appliances In an out-of-path deployment, the Steelhead appliance is not in the direct path between the client and the server. Servers see the IP address of the server-side Steelhead appliance rather than the client-side IP address.
  • Page 67 DHCP to automatically assign an IP address to the primary interface for the Steelhead appliance. Riverbed recommends that you do not set DHCP. The default value is no. Step 3: Primary IP address? Enter the IP address for the Steelhead...
  • Page 68 Installing and Configuring the Steelhead Appliance Configuring Out-of-Path Steelhead Appliances Wizard Prompt Description Example Step 12: Set the primary interface Enter the duplex mode on the primary Step 12: Set the primary duplex? interface, type a value at the system interface duplex? [auto] auto prompt.
  • Page 69: Connecting The Steelhead Appliance To Your Network

    For detailed information about the Management Console, see the Steelhead Management Console User’s Guide. For detailed information about the CLI, see the Riverbed Command-Line Interface Reference Manual. The following procedures describe how to configure in-path rules using the Management Console.
  • Page 70 Installing and Configuring the Steelhead Appliance Configuring Out-of-Path Steelhead Appliances 3. Navigate to the Setup: Optimization Service - In-Path Rules page. Figure 2-13. Setup: Service - In-Path Rules Page 4. Under In-path Rules, select Add a New In-Path Rule to display the in-path rule configuration options. 5.
  • Page 71: Disabling Smb Signing

    “Disabling SMB Signing Using the Secure-CIFS Feature,” next “Disabling SMB Signing Using Active Directory” on page 73 Important: Riverbed recommends you disable SMB signing using the Security Signatures feature. If you still experience problems, disable SMB signing using the procedures described in “Disabling SMB Signing Using Active Directory”...
  • Page 72 Installing and Configuring the Steelhead Appliance Disabling SMB Signing The Secure-CIFS feature automatically stops Windows SMB signing. SMB signing prevents the Steelhead appliance from applying full optimization on CIFS connections and significantly reduces the performance gain from a Steelhead deployment (SMB-signed sessions support compression and SDR, but render latency optimization (read-ahead, write-behind unavailable).
  • Page 73: Disabling Smb Signing Using Active Directory

    Disabling SMB Signing Installing and Configuring the Steelhead Appliance Important: If your deployment requires SMB signing, you can optimize signed CIFS messages by selecting Enable SMB Signing in the Optimization - CIFS page. Before you enable SMB Signing, make sure you disable Optimize Connections with Security Signatures.
  • Page 74 Installing and Configuring the Steelhead Appliance Disabling SMB Signing The following table lists the complete matrix for SMB registry parameters that ensure full optimization (that is, bandwidth and latency optimization) using the Steelhead appliance. Number Parameters on Parameters on Result Workstation Server SSReq...
  • Page 75 Disabling SMB Signing Installing and Configuring the Steelhead Appliance The following procedures assume that you have installed and configured the Steelhead appliances in your network. To disable SMB signing on Windows 2000 Domain Controllers, member servers, and clients 1. Open Active Directory Users and Computers on the Domain Controller. 2.
  • Page 76 Installing and Configuring the Steelhead Appliance Disabling SMB Signing 3. Click the Group Policy tab. 4. Click Default Domain Controllers Policy and select Edit. 5. Click Default Domain Controllers Policy/Computer Configuration/Windows Settings/Security Settings/Local Policies/Security Options. 6. Reboot all the Domain Controllers and member servers that you want to optimize. Steelhead Appliance Installation and Configuration Guide...
  • Page 77 Disabling SMB Signing Installing and Configuring the Steelhead Appliance To verify that SMB signing has been disabled 1. Copy some files from the server to the client through the Steelhead appliances. 2. To check for protocol errors, click Reports to display the Reports: Bandwidth Optimization page. 3.
  • Page 78 Installing and Configuring the Steelhead Appliance Disabling SMB Signing Steelhead Appliance Installation and Configuration Guide...
  • Page 79: Chapter 3 - Troubleshooting

    The following tables describes solutions using the CLI. It assumes you are connected to the CLI and in configuration mode. For detailed information about connecting to the CLI, see the Riverbed Command-Line Interface Reference Manual. You can also consult the Riverbed Knowledge Base for solutions to common installation problems located at https://support.riverbed.com.
  • Page 80 3. Look for positive values for: Discards, Errors, Overruns, Frame, Carrier counts, and Collisions. The values are zero (0) on a healthy network unless you have set half- duplex, which Riverbed does not recommend. To test duplex settings perform a flood ping ping –f –I {in-path-ip} –s 1400 {clientIP}...
  • Page 81 Common Problems Troubleshooting Checkpoint Checklist Appliance SMB Signing. SMB signing prevents the Steelhead appliance from applying full Configuration optimization on CIFS connections and significantly reduces the performance gain from a Steelhead deployment. The most common symptoms are: • File access does not speed up •...
  • Page 82 Troubleshooting Common Problems Checkpoint Checklist IP addresses. To verify the IP address has been configured correctly: Ensure the Steelhead appliances are reachable via the IP address. For instance, use the Steelhead CLI command ping Verify that the server-side Steelhead appliance is visible to the client-side Steelhead appliance.
  • Page 83 For information about configuring fixed-target rules in the Management Console, see the Steelhead Management Console User’s Guide. For information about configuring fixed-target rules in the CLI, see the Riverbed Command-Line Interface Reference Manual. Auto-discovery can fail with certain satellite links and firewalls. For example, Cisco PIX Firewall IOS 7.0 can block the auto-discover probe.
  • Page 84: Specific Problems

    (turned on). The power light on a Steelhead Contact Riverbed Technical Support at https://support.riverbed.com because appliance model 510, 1010, or 2010 it is possible the appliance has a defective power supply that needs to be comes on for less than one second, replaced.
  • Page 85 12. When the command prompt displays, you are in single user mode. If the problem does not occur in single user mode, upgrade the Steelhead appliance software to v2.1 or higher. If the problem occurs in single user mode, contact Riverbed Technical Support at https://support.riverbed.com. Steelhead Appliance Installation and Configuration Guide...
  • Page 86 Support at https://support.riverbed.com. If the beeping and failure to boot are not caused by a RAID error, they could be due to a defective power supply. For assistance, contact Riverbed Technical Support at https://support.riverbed.com. Steelhead Appliance Installation and Configuration Guide...
  • Page 87: Beeping Noises

    Model Beeping Noise Possible Causes 50, 100, 200, 300 None expected 500, 510, 1000, Low constant beep Suspected heat sink failure. Please contact Riverbed Technical 1010, 2000, 2001, Support at https://support.riverbed.com. 2010, 2011, CMC 520, 1020, 1520, None expected 2020...
  • Page 88 Common case: on first arrival, one or more disks came unseated during shipping. Solution: for out-of-box issues turn appliance off, re-seat disks, and restart appliance. For other cases, run the CLI command show raid diagram and contact Riverbed Technical Support at https://support.riverbed.com. 3020, 3520, 5520, Loud, periodic beep Indicates a RAID issue.
  • Page 89: Acronyms And Abbreviations

    Acronyms and Abbreviations AAA. Authentication, Authorization, and Accounting. ACL. Access Control List. ACK. Acknowledgment Code. ACS. (Cisco) Access Control Server. AD. Active Directory. ADS. Active Directory Services. AES. Advanced Encryption Standard. APT. Advanced Packaging Tool. AR. Asymmetric Routing. ARP. Address Resolution Protocol. BDP.
  • Page 90 Acronyms and Abbreviations CRM. Customer Relationship Management. CSR. Certificate Signing Request. CSV. Comma-Separated Value. DC. Domain Controller. DES. Data Encryption Standard. DID. Deployment ID. DMZ. Demilitarized Zone. DER. Distinguished Encoding Rules. DES. Data Encryption Standard. DHCP. Dynamic Host Configuration Protocol. DNS.
  • Page 91 Acronyms and Abbreviations HSRP. Hot Standby Routing Protocol. HSTCP. High-Speed Transmission Control Protocol. HTTP. HyperText Transport Protocol. HTTPS. HyperText Transport Protocol Secure. ICA. Independent Computing Architecture. ICMP. Internet Control Message Protocol. ID. Identification Number. IETF. Internet Engineering Task Force. IGP. Interior Gateway Protocol. IOS.
  • Page 92 Acronyms and Abbreviations MS GPO. Microsoft Group Policy Object. MS SMS. Microsoft Systems Management Server. MS-SQL. Microsoft Structured Query Language. MSFC. Multilayer Switch Feature Card. MSI Package. Microsoft Installer Package. MTU. Maximum Transmission Unit. MX-TCP. Max-Speed TCP. NAS. Network Attached Storage. NAT.
  • Page 93 Acronyms and Abbreviations RCU. Riverbed Copy Utility. ROFS. Read-Only File System. RPC. Remote Procedure Call. RSA. Rivest-Shamir-Adleman Encryption Method by RSA Security. RSP. Riverbed Services Platform. SA. Security Association. SAP. System Application Program. SCP. Secure Copy Program. SCPS. Space Communications Protocol Standards.
  • Page 94 Acronyms and Abbreviations TTL. Time to Live. ToS. Type of Service. U. Unit. UDP. User Diagram Protocol. UNC. Universal Naming Convention. URL. Uniform Resource Locator. UTC. Universal Time Code. VGA. Video Graphics Array. VLAN. Virtual Local Area Network. VoIP. Voice over IP. VWE.
  • Page 95: Glossary

    Glossary Acceleration Policy. An acceleration policy contains optimization rules for accelerating the WAN traffic for endpoint clients. An acceleration policy is required for optimization to occur. ACK. A packet message used in the TCP to acknowledge receipt of a packet. ARP.
  • Page 96 Glossary Deployment ID. The deployment ID (DID) is used to apply policies and policy updates to groups of endpoint clients. The DID is associated with the endpoint client upon installation of a MSI package. The Steelhead Mobile Controller uses the DID to identify the client and provide their assigned policies and policy updates.
  • Page 97 Glossary Heuristic. A method of problem solving using exploration and trial and error methods. Heuristic program design provides a framework for solving the problem in contrast with a fixed set of algorithmic rules that cannot vary. Host. A computer or other computing device that resides on a network. Host address.
  • Page 98 Glossary Layer-4. A communications protocol (called the transport layer) responsible for establishing a connection and ensuring that all data has arrived safely. The application delivers its data to the communications system by passing a stream of data bytes to the transport layer along with the socket (the IP address of the station and a port number) of the destination machine.
  • Page 99 Glossary Packet. A unit of information transmitted, as a whole, from one device to another on a network. Policy. Routing and Quality of Service (QoS) scheme that forwards data packets to network interfaces based on user-configured parameters. Port. A pathway into and out of the computer or a network device such as a hub, switch, or router. On network devices, the ports are for communications, typically connecting Ethernet cables or other network devices.
  • Page 100 Glossary SYN-ACK. To establish a connection TCP uses a three-way handshake. Before a client attempts to connect with a server, the server must first bind to a port to open it for connections (a passive open). After the passive open is established, a client can initiate an active open. To establish a connection, the three-way handshake occurs: 1) the active open is performed by the client sending a SYN to the server, 2) in response, the server replies with a SYN-ACK, 3) finally, the client sends an ACK back to the server.
  • Page 101: Index

    Index Numerics configuration jump-start command, 1/0 button restarting the wizard Configuration wizard about AC power, connecting restarting Appliance Configuration, verifying connecting to Connecting installing LAN switch to LAN port, illustration powering on Appliance ports, definitions of Primary port to LAN switch, illustra- Application Streamlining, overview of tion of Auto-Discovery process, overview of...
  • Page 102 Index Interface naming convention Peering rules, overview of IP addresses, troubleshooting Physical in-path deployment, diagram Physical in-path, overview of Known issues Ports, definitions of Power light Preparing your site LAN and WAN bandwidth, Primary port, connecting troubleshooting Primary port, definition of LAN and WAN connections, Product inventory troubleshooting...
  • Page 103 Index Two-Port Fiber Gig-E Bypass card CMP-00062, illustration of Two-Port Gig-E Bypass card-A CMP-00053, illustration of Two-Port Gig-E Bypass card-B CMP-00028, illustration of Virtual in-path deployments, overview of WAN and LAN connections, troubleshooting WAN port, connecting WAN port, definition of WAN router, disconnecting Windows 2000, disabling SMB signing Windows 2003, disabling SMB signing...
  • Page 104 Index Steelhead Appliance Installation and Configuration Guide...

Table of Contents