Nortel Networks WEB OS 212777 Bedienungsanleitung

50 Great Oaks BoulevardSan Jose, California 95119408-360-5500 Main408-360-5501 Faxwww.nortelnetworks.comWeb OS Switch Software10.0 Application GuideP

Web OS 10.0 Application Guide10 Contents212777-A, February 2002Chapter 15: Content Intelligent Switching 371Overview 372Parsing Content 373HTTP Hea

Web OS 10.0 Application Guide100 Chapter 5: Secure Switch Management212777-A, February 2002Setting Allowable Source IP Address RangesThe allowable

Web OS 10.0 Application GuideChapter 5: Secure Switch Management 101212777-A, February 2002Secure Switch ManagementSecure switch management is need

Web OS 10.0 Application Guide102 Chapter 5: Secure Switch Management212777-A, February 2002RequirementsThe following components are required for au

Web OS 10.0 Application GuideChapter 5: Secure Switch Management 103212777-A, February 2002RADIUS Authentication and AuthorizationRADIUS is an acce

Web OS 10.0 Application Guide104 Chapter 5: Secure Switch Management212777-A, February 2002RADIUS Authentication Features in Web OSThe following Ra

Web OS 10.0 Application GuideChapter 5: Secure Switch Management 105212777-A, February 2002Web Switch User AccountsThe user accounts listed in Tabl

Web OS 10.0 Application Guide106 Chapter 5: Secure Switch Management212777-A, February 2002When the user logs in, the switch authenticates his/her

Web OS 10.0 Application GuideChapter 5: Secure Switch Management 107212777-A, February 2002Secure Shell and Secure Copy Although a remote network a

Web OS 10.0 Application Guide108 Chapter 5: Secure Switch Management212777-A, February 2002NOTE – There can be a maximum number of four simultaneou

Web OS 10.0 Application GuideChapter 5: Secure Switch Management 109212777-A, February 2002RSA Host and Server KeysTo support the SSH server featur

Web OS 10.0 Application GuideContents 11212777-A, February 2002Chapter 16: Persistence 421Overview of Persistence 422Using Source IP Address 422Usi

Web OS 10.0 Application Guide110 Chapter 5: Secure Switch Management212777-A, February 2002Radius AuthenticationSSH/SCP is integrated with RADIUS a

Web OS 10.0 Application GuideChapter 5: Secure Switch Management 111212777-A, February 2002Configuring SSH/SCPSSH/SCP parameters can be configured

Web OS 10.0 Application Guide112 Chapter 5: Secure Switch Management212777-A, February 2002To save the current configuration to FLASH, use this com

Web OS 10.0 Application GuideChapter 5: Secure Switch Management 113212777-A, February 2002Port MirroringPort mirroring is implemented to enhance t

Web OS 10.0 Application Guide114 Chapter 5: Secure Switch Management212777-A, February 2002NOTE – Port mirroring and bandwidth management cannot be

212777-A, February 2002115Part 2: Web Switching FundamentalsInternet traffic consists of myriad services and applications which use the Internet Proto

Web OS 10.0 Application Guide116 Web Switching Fundamentals212777-A, February 2002

212777-A, February 2002117CHAPTER 6Server Load BalancingServer Load Balancing (SLB) allows you to configure the Alteon Web switch to balance user sess

Web OS 10.0 Application Guide118 Chapter 6: Server Load Balancing212777-A, February 2002Understanding Server Load BalancingSLB benefits your networ

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 119212777-A, February 2002How Server Load Balancing WorksIn an average network that e

Web OS 10.0 Application Guide12 Contents212777-A, February 2002Configuring Bandwidth Management 454Additional Configuration Examples 457Preferentia

Web OS 10.0 Application Guide120 Chapter 6: Server Load Balancing212777-A, February 2002The Web switch, with SLB software, acts as a front-end to t

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 121212777-A, February 2002Implementing Basic Server Load BalancingConsider a situatio

Web OS 10.0 Application Guide122 Chapter 6: Server Load Balancing212777-A, February 2002All of the above issues can be addressed by adding an Alteo

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 123212777-A, February 2002n Some services require that a series of client requests go

Web OS 10.0 Application Guide124 Chapter 6: Server Load Balancing212777-A, February 2002Configuring Server Load BalancingThis section describes the

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 125212777-A, February 20022. Define an IP interface on the switch.The switch must hav

Web OS 10.0 Application Guide126 Chapter 6: Server Load Balancing212777-A, February 20025. Define a virtual server.All client requests will be addr

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 127212777-A, February 2002The ports are configured as follows:7. Enable, apply, and v

Web OS 10.0 Application Guide128 Chapter 6: Server Load Balancing212777-A, February 2002Additional Server Load Balancing OptionsIn the previous sec

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 129212777-A, February 2002Disabling and Enabling Real ServersIf you need to reboot a

212777-A, February 200213FiguresFigure 1-1: The Router Legacy Network 29Figure 1-2: Switch-Based Routing Topology 30Figure 1-3: iBGP and eBGP 37Figure

Web OS 10.0 Application Guide130 Chapter 6: Server Load Balancing212777-A, February 2002Health Checks for Real ServersDetermining health for each r

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 131212777-A, February 2002Metrics for Real Server GroupsMetrics are used for selectin

Web OS 10.0 Application Guide132 Chapter 6: Server Load Balancing212777-A, February 2002HashThe hash metric uses IP address information in the clie

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 133212777-A, February 2002Response TimeThe response metric uses real server response

Web OS 10.0 Application Guide134 Chapter 6: Server Load Balancing212777-A, February 2002Weights for Real ServersWeights can be assigned to each rea

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 135212777-A, February 2002Backup/Overflow ServersA real server can backup other real

Web OS 10.0 Application Guide136 Chapter 6: Server Load Balancing212777-A, February 2002Extending SLB TopologiesFor standard SLB, all client-to-ser

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 137212777-A, February 2002The following procedure can be used for configuring proxy I

Web OS 10.0 Application Guide138 Chapter 6: Server Load Balancing212777-A, February 20023. If the Virtual Matrix Architecture (VMA) feature is enab

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 139212777-A, February 2002Mapping PortsAn Alteon Web switch allows you to hide the id

Web OS 10.0 Application Guide14 Figures212777-A, February 2002Figure 6-1: Traditional Versus SLB Network Configurations 119Figure 6-2: Web Hosting

Web OS 10.0 Application Guide140 Chapter 6: Server Load Balancing212777-A, February 2002Consider the following network:Figure 6-6 Basic Virtual Po

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 141212777-A, February 2002Load Balancing MetricFor each service, a real server is sel

Web OS 10.0 Application Guide142 Chapter 6: Server Load Balancing212777-A, February 20024. Turn on multiple rport for Port 80.5. Add the ports to w

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 143212777-A, February 2002The sequence of steps that are executed in this scenario ar

Web OS 10.0 Application Guide144 Chapter 6: Server Load Balancing212777-A, February 2002Using Proxy IP AddressesProxy IP addresses are used primari

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 145212777-A, February 2002Monitoring Real ServersTypically, the management network is

Web OS 10.0 Application Guide146 Chapter 6: Server Load Balancing212777-A, February 2002Delayed BindingThe delayed binding feature on the switch pr

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 147212777-A, February 2002Figure 6-10 Repelling DoS SYN Attacks With Delayed Binding

Web OS 10.0 Application Guide148 Chapter 6: Server Load Balancing212777-A, February 2002Configuring Delayed BindingTo configure your switch for del

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 149212777-A, February 2002Load Balancing Special ServicesThis section discusses load

Web OS 10.0 Application GuideFigures 15212777-A, February 2002Figure 12-1: DNS Resolution with Global Server Load Balancing 291Figure 12-2: GSLB To

Web OS 10.0 Application Guide150 Chapter 6: Server Load Balancing212777-A, February 2002FTP Server Load BalancingAs defined in RFC 959, FTP uses tw

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 151212777-A, February 2002Domain Name Server (DNS) Load BalancingIn previous releases

Web OS 10.0 Application Guide152 Chapter 6: Server Load Balancing212777-A, February 2002Preconfiguration Tasks1. Enable server load balancing. 2. C

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 153212777-A, February 2002Configuring UDP-based DNS Load Balancing1. Configure and en

Web OS 10.0 Application Guide154 Chapter 6: Server Load Balancing212777-A, February 2002Configuring TCP-based DNS Load Balancing1. Configure and en

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 155212777-A, February 2002Real Time Streaming Protocol SLBReal Time Streaming Protoco

Web OS 10.0 Application Guide156 Chapter 6: Server Load Balancing212777-A, February 2002Corporation, and Quicktime Streaming Server marketed by the

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 157212777-A, February 2002Configuring RTSP Load BalancingBefore configuring your Web

Web OS 10.0 Application Guide158 Chapter 6: Server Load Balancing212777-A, February 2002Wireless Application Protocol SLBWireless Application Proto

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 159212777-A, February 2002TPCP is Alteon’s proprietary protocol that is used to estab

Web OS 10.0 Application Guide16 Figures212777-A, February 2002Figure 17-1: Bandwidth Management: How It Works 442Figure 17-2: Bandwidth Rate Limits

Web OS 10.0 Application Guide160 Chapter 6: Server Load Balancing212777-A, February 2002Using RADIUS SnoopingRadius snooping allows the Alteon Web

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 161212777-A, February 2002Preconfiguring WAP Server Load Balancingn Configure WAP ser

Web OS 10.0 Application Guide162 Chapter 6: Server Load Balancing212777-A, February 2002n If a session entry for a client cannot be added because o

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 163212777-A, February 2002Intrusion Detection System Server Load BalancingIntrusion D

Web OS 10.0 Application Guide164 Chapter 6: Server Load Balancing212777-A, February 2002Load Balancing Metrics for IDSThe following metrics are sup

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 165212777-A, February 20022. Create a group and add IDS servers to the group.Each IDS

Web OS 10.0 Application Guide166 Chapter 6: Server Load Balancing212777-A, February 2002WAN Link Load BalancingWide Area Networking (WAN) is a tele

Web OS 10.0 Application GuideChapter 6: Server Load Balancing 167212777-A, February 2002To configure the switch for WAN link load balancing:1. Defi

Web OS 10.0 Application Guide168 Chapter 6: Server Load Balancing212777-A, February 2002

212777-A, February 2002169CHAPTER 7FilteringThis chapter provides a conceptual overview of filters and includes configuration examples showing how fil

212777-A, February 200217TablesTable 1-1: Subnet Routing Example: IP Address Assignments 31Table 1-2: Subnet Routing Example: IP Interface Assignments

Web OS 10.0 Application Guide170 Chapter 7: Filtering212777-A, February 2002OverviewAlteon Web switches are used to deliver content efficiently and

Web OS 10.0 Application GuideChapter 7: Filtering 171212777-A, February 2002n proto: protocol number or name as shown in Table 7-1n sport: TCP/UDP

Web OS 10.0 Application Guide172 Chapter 7: Filtering212777-A, February 2002Stacking FiltersStacking filters are assigned and enabled on a per-port

Web OS 10.0 Application GuideChapter 7: Filtering 173212777-A, February 2002The Default FilterBefore filtering can be enabled on any given port, a

Web OS 10.0 Application Guide174 Chapter 7: Filtering212777-A, February 2002VLAN-based FilteringFilters are applied per switch, per port, or per VL

Web OS 10.0 Application GuideChapter 7: Filtering 175212777-A, February 2002Configuring VLAN-based Filtering1. Configure filter 2 to allow local cl

Web OS 10.0 Application Guide176 Chapter 7: Filtering212777-A, February 20023. Configure Filter 7 to deny traffic and then assign VLAN 70 to the fi

Web OS 10.0 Application GuideChapter 7: Filtering 177212777-A, February 2002Example: A network administrator has noticed a significant number of IC

Web OS 10.0 Application Guide178 Chapter 7: Filtering212777-A, February 2002IP Address RangesYou can specify a range of IP addresses for filtering

Web OS 10.0 Application GuideChapter 7: Filtering 179212777-A, February 2002TCP Rate LimitingWeb OS 10.0 allows you to prevent a client or a group

Web OS 10.0 Application Guide18 Tables212777-A, February 2002Table 12-1: GSLB Example: California Real Server IP Addresses 296Table 12-2: GSLB Exam

Web OS 10.0 Application Guide180 Chapter 7: Filtering212777-A, February 2002In Figure 7-5, the default filter 224 configured for Any is applied for

Web OS 10.0 Application GuideChapter 7: Filtering 181212777-A, February 20023. Set the timewin parameter and calculate the total time window in sec

Web OS 10.0 Application Guide182 Chapter 7: Filtering212777-A, February 2002TCP Rate Limiting Filter Based on Source IP AddressThis example shows h

Web OS 10.0 Application GuideChapter 7: Filtering 183212777-A, February 2002TCP Rate Limiting Filter Based on Virtual Server IP AddressThis example

Web OS 10.0 Application Guide184 Chapter 7: Filtering212777-A, February 2002All clients are limited to 100 new TCP connections/second to the server

Web OS 10.0 Application GuideChapter 7: Filtering 185212777-A, February 2002Filter-based SecurityThis section provides an example of configuring fi

Web OS 10.0 Application Guide186 Chapter 7: Filtering212777-A, February 2002Configuring a Filter-Based Security SolutionBefore you begin, you must

Web OS 10.0 Application GuideChapter 7: Filtering 187212777-A, February 20023. Create a filter that will allow external HTTP requests to reach the

Web OS 10.0 Application Guide188 Chapter 7: Filtering212777-A, February 20025. Create a filter that will allow local clients to browse the Web.The

Web OS 10.0 Application GuideChapter 7: Filtering 189212777-A, February 2002For UDP:Similarly, for TCP:>> Filter 5# ../filt 6 (Select the men

212777-A, February 200219New Features The following table lists the new features in Web OS 10.0 and the supported platforms:Feature Alteon Web Switche

Web OS 10.0 Application Guide190 Chapter 7: Filtering212777-A, February 20028. Assign the filters to the switch port that connects to the Internet.

Web OS 10.0 Application GuideChapter 7: Filtering 191212777-A, February 2002Network Address TranslationNetwork Address Translation (NAT) is an Inte

Web OS 10.0 Application Guide192 Chapter 7: Filtering212777-A, February 2002In this example, clients on the Internet require access to servers on t

Web OS 10.0 Application GuideChapter 7: Filtering 193212777-A, February 2002Note the following important points about this configuration:n Within e

Web OS 10.0 Application Guide194 Chapter 7: Filtering212777-A, February 2002Configuring Dynamic NATNOTE – The invert option in this example filter

Web OS 10.0 Application GuideChapter 7: Filtering 195212777-A, February 2002FTP Client NATAlteon Web switches provide NAT services to many clients

Web OS 10.0 Application Guide196 Chapter 7: Filtering212777-A, February 2002Configuring Active FTP Client NATNOTE – The passive mode does not need

Web OS 10.0 Application GuideChapter 7: Filtering 197212777-A, February 2002Matching TCP FlagsWeb OS supports packet filtering based on any of the

Web OS 10.0 Application Guide198 Chapter 7: Filtering212777-A, February 2002In this network, the Web servers inside the LAN must be able to transfe

Web OS 10.0 Application GuideChapter 7: Filtering 199212777-A, February 20022. A filter that allows SMTP traffic from the Internet to pass through

Web OS 10.0 Application Guide2212777-A, February 2002Copyright 2002 Nortel Networks, Inc., 50 Great Oaks Boulevard, San Jose, California 95119, USA.

Web OS 10.0 Application Guide20 New Features212777-A, February 2002Hash on any HTTP header Yes YesIncrease support of 16 rport to vport No YesIncre

Web OS 10.0 Application Guide200 Chapter 7: Filtering212777-A, February 20025. A default filter is required to deny all other traffic.6. Apply the

Web OS 10.0 Application GuideChapter 7: Filtering 201212777-A, February 2002Matching ICMP Message TypesInternet Control Message Protocol (ICMP) is

Web OS 10.0 Application Guide202 Chapter 7: Filtering212777-A, February 2002The command to enable or disable ICMP message type filtering is entered

212777-A, February 2002203CHAPTER 8Application RedirectionApplication Redirection improves network bandwidth and provides unique network solutions. Fi

Web OS 10.0 Application Guide204 Chapter 8: Application Redirection212777-A, February 2002OverviewMost of the information downloaded from the Inter

Web OS 10.0 Application GuideChapter 8: Application Redirection 205212777-A, February 2002The network needs a solution that addresses the following

Web OS 10.0 Application Guide206 Chapter 8: Application Redirection212777-A, February 2002Web Cache Configuration ExampleThe following is required

Web OS 10.0 Application GuideChapter 8: Application Redirection 207212777-A, February 20022. Install transparent Web cache software on all three We

Web OS 10.0 Application Guide208 Chapter 8: Application Redirection212777-A, February 20026. Set the real server group metric to minmisses.This set

Web OS 10.0 Application GuideChapter 8: Application Redirection 209212777-A, February 20029. Create a default filter.In this case, the default filt

212777-A, February 200221PrefaceThis Application Guide describes how to configure and use the Web OS software on the Alteon Web switches. For document

Web OS 10.0 Application Guide210 Chapter 8: Application Redirection212777-A, February 200213. Save your new configuration changes.14. Check the SLB

Web OS 10.0 Application GuideChapter 8: Application Redirection 211212777-A, February 2002RTSP Web Cache RedirectionWeb OS 10.0 supports Web Cache

Web OS 10.0 Application Guide212 Chapter 8: Application Redirection212777-A, February 20023. Configure an RTSP redirection filter to cache data and

Web OS 10.0 Application GuideChapter 8: Application Redirection 213212777-A, February 2002IP Proxy Addresses for NATTransparent proxies provide the

Web OS 10.0 Application Guide214 Chapter 8: Application Redirection212777-A, February 2002The following commands can be used to configure the addit

Web OS 10.0 Application GuideChapter 8: Application Redirection 215212777-A, February 2002Excluding Noncacheable SitesSome Web sites provide conten

Web OS 10.0 Application Guide216 Chapter 8: Application Redirection212777-A, February 2002

212777-A, February 2002217CHAPTER 9Virtual Matrix ArchitectureVirtual Matrix Architecture (VMA) is a hybrid architecture that takes full advantage of

Web OS 10.0 Application Guide218 Chapter 9: Virtual Matrix Architecture212777-A, February 2002Frames ingressing a port that has been configured wit

212777-A, February 2002219CHAPTER 10Health CheckingContent intelligent Web switches allow Web masters to customize server health checks to ver-ify con

Web OS 10.0 Application Guide22 Preface212777-A, February 2002n Chapter 5, “Secure Switch Management,” describes how to manage the switch using spe

Web OS 10.0 Application Guide220 Chapter 10: Health Checking212777-A, February 2002“FTP Server Health Checks” on page 234. This section describes h

Web OS 10.0 Application GuideChapter 10: Health Checking 221212777-A, February 2002Real Server Health ChecksAlteon Web switches running Server Load

Web OS 10.0 Application Guide222 Chapter 10: Health Checking212777-A, February 2002DSR Health ChecksDirect Server Return (DSR) health checks are us

Web OS 10.0 Application GuideChapter 10: Health Checking 223212777-A, February 2002Link Health ChecksLink health check is performed at the Layer 1

Web OS 10.0 Application Guide224 Chapter 10: Health Checking212777-A, February 2002TCP Health ChecksTCP health checks are useful in verifying user-

Web OS 10.0 Application GuideChapter 10: Health Checking 225212777-A, February 2002Script-Based Health ChecksThe “send/expect” script-based health

Web OS 10.0 Application Guide226 Chapter 10: Health Checking212777-A, February 2002Script FormatThe general format for health-check scripts is show

Web OS 10.0 Application GuideChapter 10: Health Checking 227212777-A, February 2002Scripting Guidelinesn Use generic result codes that are standard

Web OS 10.0 Application Guide228 Chapter 10: Health Checking212777-A, February 2002Script Example 2: GSLB URL Health CheckIn earlier Web OS release

Web OS 10.0 Application GuideChapter 10: Health Checking 229212777-A, February 2002Script-based health checking is intelligent in that it will only

Web OS 10.0 Application GuidePreface 23212777-A, February 2002Typographic ConventionsThe following table describes the typographic styles used in t

Web OS 10.0 Application Guide230 Chapter 10: Health Checking212777-A, February 2002Application-Specific Health ChecksApplication-specific health ch

Web OS 10.0 Application GuideChapter 10: Health Checking 231212777-A, February 2002HTTP Health ChecksHTTP-based health checks can include the hostn

Web OS 10.0 Application Guide232 Chapter 10: Health Checking212777-A, February 2002Health check is performed using:GET /index.html HTTP/1.1Host: ja

Web OS 10.0 Application GuideChapter 10: Health Checking 233212777-A, February 2002UDP-Based DNS Health Checks Web OS 10.0 supports UDP-based healt

Web OS 10.0 Application Guide234 Chapter 10: Health Checking212777-A, February 2002FTP Server Health ChecksThe Internet File Transfer Protocol (FTP

Web OS 10.0 Application GuideChapter 10: Health Checking 235212777-A, February 2002POP3 Server Health ChecksThe Post Office Protocol - Version 3 (P

Web OS 10.0 Application Guide236 Chapter 10: Health Checking212777-A, February 2002SMTP Server Health ChecksSimple Mail Transfer Protocol is a prot

Web OS 10.0 Application GuideChapter 10: Health Checking 237212777-A, February 2002IMAP Server Health ChecksInternet Message Access Protocol (IMAP)

Web OS 10.0 Application Guide238 Chapter 10: Health Checking212777-A, February 2002NNTP Server Health ChecksNet News Transfer Protocol (NNTP) is a

Web OS 10.0 Application GuideChapter 10: Health Checking 239212777-A, February 2002RADIUS Server Health ChecksThe Remote Authentication Dial-In Use

Web OS 10.0 Application Guide24 Preface212777-A, February 2002Contacting UsFor complete product support and sales information, visit the Nortel Net

Web OS 10.0 Application Guide240 Chapter 10: Health Checking212777-A, February 2002Configuring the Switch for RADIUS Secret and PasswordRADIUS is s

Web OS 10.0 Application GuideChapter 10: Health Checking 241212777-A, February 2002WSP Content Health ChecksWireless Session Protocol content healt

Web OS 10.0 Application Guide242 Chapter 10: Health Checking212777-A, February 20024. Enter the WSP port.5. Set the offset value.6. Because WAP gat

Web OS 10.0 Application GuideChapter 10: Health Checking 243212777-A, February 2002Configuring the Switch for WTLS Health Checks1. Select the group

Web OS 10.0 Application Guide244 Chapter 10: Health Checking212777-A, February 2002Configuring the Switch for LDAP Health ChecksConfigure the switc

Web OS 10.0 Application GuideChapter 10: Health Checking 245212777-A, February 2002ARP Health ChecksAddress Resolution Protocol (ARP) is the TCP/IP

Web OS 10.0 Application Guide246 Chapter 10: Health Checking212777-A, February 2002Failure TypesService FailureIf a certain number of connection re

212777-A, February 2002247CHAPTER 11High AvailabilityAlteon Web switches support high-availability network topologies through an enhanced imple-mentat

Web OS 10.0 Application Guide248 Chapter 11: High Availability212777-A, February 2002VRRP OverviewIn a high-availability network topology, no devic

Web OS 10.0 Application GuideChapter 11: High Availability 249212777-A, February 2002Virtual Router MAC AddressThe VRID is used to build the virtua

212777-A, February 200225Part 1: Basic Switching & RoutingThis section discusses basic Layer 1 through Layer 3 switching and routing functions. In

Web OS 10.0 Application Guide250 Chapter 11: High Availability212777-A, February 2002The Alteon Web switches in Figure 11-1 have been configured as

Web OS 10.0 Application GuideChapter 11: High Availability 251212777-A, February 2002VRRP OperationThe host shown in Figure 11-1 is configured with

Web OS 10.0 Application Guide252 Chapter 11: High Availability212777-A, February 2002Active-Standby FailoverThe previous text described the use of

Web OS 10.0 Application GuideChapter 11: High Availability 253212777-A, February 2002Failover MethodsWith service availability becoming a major con

Web OS 10.0 Application Guide254 Chapter 11: High Availability212777-A, February 2002Active-Standby RedundancyIn an active-standby configuration, s

Web OS 10.0 Application GuideChapter 11: High Availability 255212777-A, February 2002Active-Active RedundancyIn an active-active configuration, two

Web OS 10.0 Application Guide256 Chapter 11: High Availability212777-A, February 2002Hot-Standby RedundancyIn a hot-standby configuration, Spanning

Web OS 10.0 Application GuideChapter 11: High Availability 257212777-A, February 2002Virtual Router GroupThe virtual router group ties all of the v

Web OS 10.0 Application Guide258 Chapter 11: High Availability212777-A, February 2002When the hotstan option (/cfg/slb/port x/hotstan) is enabled a

Web OS 10.0 Application GuideChapter 11: High Availability 259212777-A, February 2002Web OS Extensions to VRRPThis section describes the following

Web OS 10.0 Application Guide26 Basic Switching & Routing212777-A, February 2002

Web OS 10.0 Application Guide260 Chapter 11: High Availability212777-A, February 2002Sharing/Active-Active FailoverWeb OS supports sharing of inter

Web OS 10.0 Application GuideChapter 11: High Availability 261212777-A, February 2002When sharing is enabled, the master election process still occ

Web OS 10.0 Application Guide262 Chapter 11: High Availability212777-A, February 2002Each tracked parameter has a user-configurable weight associat

Web OS 10.0 Application GuideChapter 11: High Availability 263212777-A, February 2002High Availability ConfigurationsAlteon Web switches offer flex

Web OS 10.0 Application Guide264 Chapter 11: High Availability212777-A, February 2002To implement the active-standby example, perform the following

Web OS 10.0 Application GuideChapter 11: High Availability 265212777-A, February 2002Active-Active VIR and VSR ConfigurationFigure 11-9 two Alteon

Web OS 10.0 Application Guide266 Chapter 11: High Availability212777-A, February 2002To implement this example, configure the switches as follows:1

Web OS 10.0 Application GuideChapter 11: High Availability 267212777-A, February 2002Active/Active Server Load Balancing ConfigurationIn this examp

Web OS 10.0 Application Guide268 Chapter 11: High Availability212777-A, February 20022. Define the VLANs.In this configuration, set up two VLANs: O

Web OS 10.0 Application GuideChapter 11: High Availability 269212777-A, February 2002Task 2: SLB Configuration1. Define the Real Servers.The real s

212777-A, February 200227CHAPTER 1Basic IP RoutingThis chapter provides configuration background and examples for using the Alteon Web switch to perfo

Web OS 10.0 Application Guide270 Chapter 11: High Availability212777-A, February 20023. Define the virtual servers.After defining the virtual serve

Web OS 10.0 Application GuideChapter 11: High Availability 271212777-A, February 2002Task 3: Virtual Router Redundancy Configuration1. Configure vi

Web OS 10.0 Application Guide272 Chapter 11: High Availability212777-A, February 20023. Set the renter priority for each virtual router.Since you w

Web OS 10.0 Application GuideChapter 11: High Availability 273212777-A, February 2002Task 4: Configuring Switch 2Use the following procedure to dum

Web OS 10.0 Application Guide274 Chapter 11: High Availability212777-A, February 20023. Scroll to the bottom of the text file and delete anything p

Web OS 10.0 Application GuideChapter 11: High Availability 275212777-A, February 2002VRRP-Based Hot-Standby ConfigurationA hot-standby configuratio

Web OS 10.0 Application Guide276 Chapter 11: High Availability212777-A, February 2002By reducing complexity to a single subnet and not requiring ro

Web OS 10.0 Application GuideChapter 11: High Availability 277212777-A, February 2002Virtual Router Deployment ConsiderationsReview the following i

Web OS 10.0 Application Guide278 Chapter 11: High Availability212777-A, February 2002Eliminating Loops with STP and VLANsVRRP active/active failove

Web OS 10.0 Application GuideChapter 11: High Availability 279212777-A, February 2002Using Spanning Tree Protocol to Eliminate LoopsVRRP generally

Web OS 10.0 Application Guide28 Chapter 1: Basic IP Routing212777-A, February 2002IP Routing BenefitsThe Alteon Web switch uses a combination of co

Web OS 10.0 Application Guide280 Chapter 11: High Availability212777-A, February 2002Assigning VRRP Virtual Router IDDuring the software upgrade pr

Web OS 10.0 Application GuideChapter 11: High Availability 281212777-A, February 2002If one server attached to Web switch 1 fails, then Web switch

Web OS 10.0 Application Guide282 Chapter 11: High Availability212777-A, February 2002Synchronizing ConfigurationsAs noted above, each VRRP-capable

Web OS 10.0 Application GuideChapter 11: High Availability 283212777-A, February 2002Stateful Failover of Layer 4 and Layer 7 Persistent SessionsWe

Web OS 10.0 Application Guide284 Chapter 11: High Availability212777-A, February 2002What Happens When a Switch FailsAssume that the user performin

Web OS 10.0 Application GuideChapter 11: High Availability 285212777-A, February 2002Stateful Failover Configuration ExampleAfter the VRRP setup, p

Web OS 10.0 Application Guide286 Chapter 11: High Availability212777-A, February 2002Viewing Statistics on Persistent Port SessionsYou can view sta

212777-A, February 2002287Part 3: Advanced Web SwitchingWeb OS can parse requests and classify flows using URLs, host tags, and cookies so that each r

Web OS 10.0 Application Guide288 Advanced Web Switching212777-A, February 2002

212777-A, February 2002289CHAPTER 12Global Server Load BalancingThis chapter provides information for configuring Global Server Load Balancing (GSLB)

Web OS 10.0 Application GuideChapter 1: Basic IP Routing 29212777-A, February 2002For example, consider the following topology migration:Figure 1-1

Web OS 10.0 Application Guide290 Chapter 12: Global Server Load Balancing212777-A, February 2002GSLB OverviewGSLB allows balancing server traffic l

Web OS 10.0 Application GuideChapter 12: Global Server Load Balancing 291212777-A, February 2002How GSLB WorksGSLB is based on the Domain Name Syst

Web OS 10.0 Application Guide292 Chapter 12: Global Server Load Balancing212777-A, February 20024. The California Web switch responds to the DNS re

Web OS 10.0 Application GuideChapter 12: Global Server Load Balancing 293212777-A, February 2002Configuring GSLBConfiguring GSLB is simply an exten

Web OS 10.0 Application Guide294 Chapter 12: Global Server Load Balancing212777-A, February 2002Example GSLB TopologyConsider the following example

Web OS 10.0 Application GuideChapter 12: Global Server Load Balancing 295212777-A, February 2002Task 1: Configure the Basics at the California Site

Web OS 10.0 Application Guide296 Chapter 12: Global Server Load Balancing212777-A, February 2002Task 2: Configure the California Switch for Standar

Web OS 10.0 Application GuideChapter 12: Global Server Load Balancing 297212777-A, February 20024. On the California switch, define a virtual serve

Web OS 10.0 Application Guide298 Chapter 12: Global Server Load Balancing212777-A, February 2002Task 3: Configure the California Site for GSLB1. On

Web OS 10.0 Application GuideChapter 12: Global Server Load Balancing 299212777-A, February 20023. On the California switch, define the domain name

212777-A, February 20023ContentsPreface 21Who Should Use This Guide 21What You’ll Find in This Guide 21Typographic Conventions 23Contacting Us 24Part

Web OS 10.0 Application Guide30 Chapter 1: Basic IP Routing212777-A, February 2002Take a closer look at the Alteon Web switch in the following conf

Web OS 10.0 Application Guide300 Chapter 12: Global Server Load Balancing212777-A, February 20022. On the Denver switch, define an IP interface.3.

Web OS 10.0 Application GuideChapter 12: Global Server Load Balancing 301212777-A, February 20023. On the Denver switch, define a real server group

Web OS 10.0 Application Guide302 Chapter 12: Global Server Load Balancing212777-A, February 2002Task 6: Configure the Denver Site for GSLBFollowing

Web OS 10.0 Application GuideChapter 12: Global Server Load Balancing 303212777-A, February 2002For example:NOTE – Take care to note where each con

Web OS 10.0 Application Guide304 Chapter 12: Global Server Load Balancing212777-A, February 2002IP Proxy for Non-HTTP RedirectsTypically, client re

Web OS 10.0 Application GuideChapter 12: Global Server Load Balancing 305212777-A, February 2002Table 12-5 explains the packet -flow process in det

Web OS 10.0 Application Guide306 Chapter 12: Global Server Load Balancing212777-A, February 2002The following procedure explains the three-way hand

Web OS 10.0 Application GuideChapter 12: Global Server Load Balancing 307212777-A, February 2002Configuring Proxy IP AddressesRefer to the example

Web OS 10.0 Application Guide308 Chapter 12: Global Server Load Balancing212777-A, February 2002Verifying GSLB Operationn Use your browser to reque

Web OS 10.0 Application GuideChapter 12: Global Server Load Balancing 309212777-A, February 2002Figure 12-5 illustrates GSLB proximity tables. The

Web OS 10.0 Application GuideChapter 1: Basic IP Routing 31212777-A, February 2002Example of Subnet RoutingPrior to configuring, you must be connec

Web OS 10.0 Application Guide310 Chapter 12: Global Server Load Balancing212777-A, February 2002Client A, with a source IP address of 205.178.13.10

Web OS 10.0 Application GuideChapter 12: Global Server Load Balancing 311212777-A, February 2002Use the following commands to configure a proximity

Web OS 10.0 Application Guide312 Chapter 12: Global Server Load Balancing212777-A, February 2002Using Border Gateway Protocol for GSLBBorder Gatewa

212777-A, February 2002313CHAPTER 13Firewall Load BalancingFirewall Load Balancing (FWLB) with Alteon Web switches allows multiple active firewalls to

Web OS 10.0 Application Guide314 Chapter 13: Firewall Load Balancing212777-A, February 2002Firewall OverviewFirewall devices have become indispensa

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 315212777-A, February 2002Alteon Web switches support the following methods of FWL

Web OS 10.0 Application Guide316 Chapter 13: Firewall Load Balancing212777-A, February 2002Basic FWLBThe basic FWLB method uses a combination of st

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 317212777-A, February 2002Basic FWLB ImplementationIn this example, traffic is loa

Web OS 10.0 Application Guide318 Chapter 13: Firewall Load Balancing212777-A, February 20024. The firewalls decide if they should allow the packets

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 319212777-A, February 2002Configuring Basic FWLBThe steps for configuring basic FW

Web OS 10.0 Application Guide32 Chapter 1: Basic IP Routing212777-A, February 2002IP interfaces are configured using the following commands at the

Web OS 10.0 Application Guide320 Chapter 13: Firewall Load Balancing212777-A, February 20023. Configure the clean-side IP interface as if they were

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 321212777-A, February 20028. Create a filter to allow local subnet traffic on the

Web OS 10.0 Application Guide322 Chapter 13: Firewall Load Balancing212777-A, February 2002Configure the Clean-Side Web Switch1. Define the clean-s

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 323212777-A, February 20024. Set the health check type for the real server group t

Web OS 10.0 Application Guide324 Chapter 13: Firewall Load Balancing212777-A, February 200210. Place the real servers into a real server group.11.

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 325212777-A, February 200215. Add the filters to the ingress ports for the outboun

Web OS 10.0 Application Guide326 Chapter 13: Firewall Load Balancing212777-A, February 2002Four-Subnet FWLBThe four-subnet FWLB method is often dep

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 327212777-A, February 2002As shown in Figure 13-5, the network is divided into fou

Web OS 10.0 Application Guide328 Chapter 13: Firewall Load Balancing212777-A, February 20021. Incoming traffic converges on the primary dirty-side

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 329212777-A, February 2002Configuring Four-Subnet FWLBAn example network for four-

Web OS 10.0 Application GuideChapter 1: Basic IP Routing 33212777-A, February 2002Using VLANs to Segregate Broadcast DomainsIn the previous example

Web OS 10.0 Application Guide330 Chapter 13: Firewall Load Balancing212777-A, February 2002Configure the RoutersThe routers must be configured with

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 331212777-A, February 2002Configure Connectivity for the Primary Dirty-Side Web Sw

Web OS 10.0 Application Guide332 Chapter 13: Firewall Load Balancing212777-A, February 20024. Configure static routes on the primary dirty-side Web

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 333212777-A, February 2002Configure Connectivity for the Secondary Dirty-Side Web

Web OS 10.0 Application Guide334 Chapter 13: Firewall Load Balancing212777-A, February 2002Configure Connectivity for the Primary Clean-Side Web Sw

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 335212777-A, February 20024. Configure static routes on the primary clean-side Web

Web OS 10.0 Application Guide336 Chapter 13: Firewall Load Balancing212777-A, February 20022. Configure IP interfaces on the secondary clean-side W

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 337212777-A, February 2002Verify Proper ConnectivityTo verify proper configuration

Web OS 10.0 Application Guide338 Chapter 13: Firewall Load Balancing212777-A, February 2002Complete the Configuration of the Primary Dirty-Side Web

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 339212777-A, February 20022. Create the FWLB filters.Three filters are required on

Web OS 10.0 Application Guide34 Chapter 1: Basic IP Routing212777-A, February 2002Each time you add a port to a VLAN, you may get the following pro

Web OS 10.0 Application Guide340 Chapter 13: Firewall Load Balancing212777-A, February 20023. Configure VRRP on the primary dirty-side Web switch.V

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 341212777-A, February 2002Complete the Configuration of the Primary Clean-Side Web

Web OS 10.0 Application Guide342 Chapter 13: Firewall Load Balancing212777-A, February 20022. Create an SLB real server group on the primary clean-

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 343212777-A, February 20023. Create the FWLB filters on the primary clean-side Web

Web OS 10.0 Application Guide344 Chapter 13: Firewall Load Balancing212777-A, February 20024. Configure VRRP on the primary clean-side Web switch.V

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 345212777-A, February 20025. Configure the peer on the primary clean-side Web swit

Web OS 10.0 Application Guide346 Chapter 13: Firewall Load Balancing212777-A, February 2002Advanced FWLB ConceptsFree-Metric FWLBFree-metric FWLB a

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 347212777-A, February 20023. On the dirty-side Web switch, set the FWLB metric.Any

Web OS 10.0 Application Guide348 Chapter 13: Firewall Load Balancing212777-A, February 2002To use free-metric FWLB in this network, the following c

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 349212777-A, February 2002Adding a Demilitarized Zone (DMZ)Implementing a DMZ in c

Web OS 10.0 Application GuideChapter 1: Basic IP Routing 35212777-A, February 2002Defining IP Address Ranges for the Local Route CacheA local route

Web OS 10.0 Application Guide350 Chapter 13: Firewall Load Balancing212777-A, February 2002You could add the filters required for the DMZ (to each

Web OS 10.0 Application GuideChapter 13: Firewall Load Balancing 351212777-A, February 2002Firewall Health ChecksBasic FWLB health checking is auto

Web OS 10.0 Application Guide352 Chapter 13: Firewall Load Balancing212777-A, February 2002Using HTTP Health ChecksFor those firewalls that do not

212777-A, February 2002353CHAPTER 14Virtual Private Network Load BalancingThe VPN (Virtual Private Network) load balancing feature in Web OS 10.0 allo

Web OS 10.0 Application Guide354 Chapter 14: Virtual Private Network Load Balancing212777-A, February 2002OverviewVirtual Private NetworksA VPN is

Web OS 10.0 Application GuideChapter 14: Virtual Private Network Load Balancing 355212777-A, February 2002Figure 14-1 Basic Network Frame Flow and

Web OS 10.0 Application Guide356 Chapter 14: Virtual Private Network Load Balancing212777-A, February 2002VPN Load-Balancing ConfigurationRequireme

Web OS 10.0 Application GuideChapter 14: Virtual Private Network Load Balancing 357212777-A, February 2002Configure the First Clean-Side Switch (CA

Web OS 10.0 Application Guide358 Chapter 14: Virtual Private Network Load Balancing212777-A, February 2002One static route is required for each VPN

Web OS 10.0 Application GuideChapter 14: Virtual Private Network Load Balancing 359212777-A, February 20027. Enable Server Load Balancing (SLB) on

Web OS 10.0 Application Guide36 Chapter 1: Basic IP Routing212777-A, February 2002Border Gateway Protocol (BGP)Border Gateway Protocol (BGP) is an

Web OS 10.0 Application Guide360 Chapter 14: Virtual Private Network Load Balancing212777-A, February 2002Configure the Second Clean-Side Switch (C

Web OS 10.0 Application GuideChapter 14: Virtual Private Network Load Balancing 361212777-A, February 20026. Configure Virtual Router Redundancy Pr

Web OS 10.0 Application Guide362 Chapter 14: Virtual Private Network Load Balancing212777-A, February 200211. Enable filter processing on the serve

Web OS 10.0 Application GuideChapter 14: Virtual Private Network Load Balancing 363212777-A, February 20026. Configure VRRP for virtual routers 1 a

Web OS 10.0 Application Guide364 Chapter 14: Virtual Private Network Load Balancing212777-A, February 200210. Configure the filters to allow local

Web OS 10.0 Application GuideChapter 14: Virtual Private Network Load Balancing 365212777-A, February 2002Configure the Second Dirty-Side WebSwitch

Web OS 10.0 Application Guide366 Chapter 14: Virtual Private Network Load Balancing212777-A, February 20026. Configure VRRP for virtual routers 1 a

Web OS 10.0 Application GuideChapter 14: Virtual Private Network Load Balancing 367212777-A, February 200210. Configure the filters to allow local

Web OS 10.0 Application Guide368 Chapter 14: Virtual Private Network Load Balancing212777-A, February 2002Test Configurations and General TopologyT

Web OS 10.0 Application GuideChapter 14: Virtual Private Network Load Balancing 369212777-A, February 2002Test the VPN1. Launch the SecuRemote clie

Web OS 10.0 Application GuideChapter 1: Basic IP Routing 37212777-A, February 2002Figure 1-3 iBGP and eBGPTypically, an AS has one or more multipl

Web OS 10.0 Application Guide370 Chapter 14: Virtual Private Network Load Balancing212777-A, February 20027. You will see a message verifying that

212777-A, February 2002371CHAPTER 15Content Intelligent SwitchingThis chapter discusses advanced load balancing solutions utilizing Layer 7 content sw

Web OS 10.0 Application Guide372 Chapter 15: Content Intelligent Switching212777-A, February 2002OverviewAlteon Web switches performs content intel

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 373212777-A, February 2002Parsing ContentExamining session content places he

Web OS 10.0 Application Guide374 Chapter 15: Content Intelligent Switching212777-A, February 2002HTTP Header InspectionContent intelligent switchin

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 375212777-A, February 2002Content Intelligent Server Load BalancingWeb OS al

Web OS 10.0 Application Guide376 Chapter 15: Content Intelligent Switching212777-A, February 2002Figure 15-2 URL-Based Server Load BalancingConfig

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 377212777-A, February 20022. Define the string(s) to be used for URL load ba

Web OS 10.0 Application Guide378 Chapter 15: Content Intelligent Switching212777-A, February 20023. Apply and save your configuration changes.4. Id

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 379212777-A, February 20027. Enable SLB on the switch.8. Enable DAM on the s

Web OS 10.0 Application Guide38 Chapter 1: Basic IP Routing212777-A, February 2002As shown in Figure 1-4, the switch is connected to ISP 1 and ISP

Web OS 10.0 Application Guide380 Chapter 15: Content Intelligent Switching212777-A, February 2002Virtual HostingWeb OS allows individuals and compa

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 381212777-A, February 2002Virtual Hosting Configuration OverviewThe sequence

Web OS 10.0 Application Guide382 Chapter 15: Content Intelligent Switching212777-A, February 2002Configuring the “Host” Header for Virtual HostingT

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 383212777-A, February 2002Cookie-Based Preferential Load BalancingCookies ca

Web OS 10.0 Application Guide384 Chapter 15: Content Intelligent Switching212777-A, February 2002Configuring Cookie-Based Preferential Load Balanci

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 385212777-A, February 2002Example:n Real Server 1: “Gold” handles gold reque

Web OS 10.0 Application Guide386 Chapter 15: Content Intelligent Switching212777-A, February 2002Browser-Smart Load BalancingHTTP requests can be d

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 387212777-A, February 2002URL Hashing for Server Load BalancingBy default, h

Web OS 10.0 Application Guide388 Chapter 15: Content Intelligent Switching212777-A, February 2002To configure URL hashing, perform the following pr

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 389212777-A, February 2002Header Hash Load BalancingWeb OS allows you to has

Web OS 10.0 Application GuideChapter 1: Basic IP Routing 39212777-A, February 20022. Define the VLANs.For simplicity, both default gateways are con

Web OS 10.0 Application Guide390 Chapter 15: Content Intelligent Switching212777-A, February 2002DNS Load BalancingThe Internet name registry has b

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 391212777-A, February 2002To configure the switch for DNS load balancing, pe

Web OS 10.0 Application Guide392 Chapter 15: Content Intelligent Switching212777-A, February 2002Number of entries: five7. Add the defined string I

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 393212777-A, February 2002To configure RTSP load balancing using pattern mat

Web OS 10.0 Application Guide394 Chapter 15: Content Intelligent Switching212777-A, February 2002Content Intelligent Web Cache RedirectionWeb OS al

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 395212777-A, February 2002URL-Based Web Cache RedirectionURL parsing for Web

Web OS 10.0 Application Guide396 Chapter 15: Content Intelligent Switching212777-A, February 2002The switch is preconfigured with a list of 13 nonc

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 397212777-A, February 2002Network Address Translation OptionsURL-based WCR s

Web OS 10.0 Application Guide398 Chapter 15: Content Intelligent Switching212777-A, February 20023. Configure the parameters and file extensions th

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 399212777-A, February 20024. Define the string(s) to be used for Web cache S

Web OS 10.0 Application Guide4 Contents212777-A, February 2002VLANs and Spanning Tree Protocol 49Bridge Protocol Data Units (BPDUs) 50Multiple Span

Web OS 10.0 Application Guide40 Chapter 1: Basic IP Routing212777-A, February 20025. Configure BGP peer router 1 and 2.Peer 1 is the primary gatewa

Web OS 10.0 Application Guide400 Chapter 15: Content Intelligent Switching212777-A, February 20025. Apply and save your configuration changes.6. Id

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 401212777-A, February 20029. Configure a filter to support basic WCR.The fil

Web OS 10.0 Application Guide402 Chapter 15: Content Intelligent Switching212777-A, February 200212. Create a default filter for noncached traffic

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 403212777-A, February 2002HTTP Header-Based Web Cache RedirectionTo configur

Web OS 10.0 Application Guide404 Chapter 15: Content Intelligent Switching212777-A, February 20027. Configure the real server(s) to handle the appr

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 405212777-A, February 2002Browser-Based Web Cache RedirectionBrowser-based W

Web OS 10.0 Application Guide406 Chapter 15: Content Intelligent Switching212777-A, February 20027. Add the defined string IDs to configure the rea

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 407212777-A, February 20022. Turn on URL parsing for the filter.3. Enable ha

Web OS 10.0 Application Guide408 Chapter 15: Content Intelligent Switching212777-A, February 2002Figure 15-6 URL Hashing for WCRExample 2: Hashing

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 409212777-A, February 2002Layer 7 RTSP Streaming Cache Redirection This sect

Web OS 10.0 Application GuideChapter 1: Basic IP Routing 41212777-A, February 2002DHCP RelayDynamic Host Configuration Protocol (DHCP) is a transpo

Web OS 10.0 Application Guide410 Chapter 15: Content Intelligent Switching212777-A, February 2002Exclusionary String Matching for Real ServersURL-b

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 411212777-A, February 2002For information on how to configure your network f

Web OS 10.0 Application Guide412 Chapter 15: Content Intelligent Switching212777-A, February 2002Regular Expression MatchingRegular expressions are

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 413212777-A, February 2002n Size of the regular expression structure after c

Web OS 10.0 Application Guide414 Chapter 15: Content Intelligent Switching212777-A, February 2002Content Precedence LookupThe Layer 7 Precedence Lo

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 415212777-A, February 2002Requirementsn Enable Direct Access Mode (DAM), or

Web OS 10.0 Application Guide416 Chapter 15: Content Intelligent Switching212777-A, February 2002Assigning Multiple StringsFigure 15-8 shows an exa

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 417212777-A, February 2002When a client request is received with www.a.com i

Web OS 10.0 Application Guide418 Chapter 15: Content Intelligent Switching212777-A, February 2002Configuring a Layer 7 Deny Filter1. Before you can

Web OS 10.0 Application GuideChapter 15: Content Intelligent Switching 419212777-A, February 20027. Enable the Layer 7 deny option.8. Assign the UR

Web OS 10.0 Application Guide42 Chapter 1: Basic IP Routing212777-A, February 2002respond as a a UDP Unicast message back to the switch, with the d

Web OS 10.0 Application Guide420 Chapter 15: Content Intelligent Switching212777-A, February 2002

212777-A, February 2002421CHAPTER 16PersistenceThe Web OS persistence feature ensures that all connections from a specific client session reach the sa

Web OS 10.0 Application Guide422 Chapter 16: Persistence212777-A, February 2002Overview of PersistenceIn a typical SLB environment, traffic comes f

Web OS 10.0 Application GuideChapter 16: Persistence 423212777-A, February 2002Using CookiesCookies are strings passed via HTTP from servers to bro

Web OS 10.0 Application Guide424 Chapter 16: Persistence212777-A, February 2002Cookie-Based PersistenceCookies are a mechanism for maintaining stat

Web OS 10.0 Application GuideChapter 16: Persistence 425212777-A, February 2002The following topics discussing cookie-based persistence are detaile

Web OS 10.0 Application Guide426 Chapter 16: Persistence212777-A, February 2002Cookie PropertiesCookies are configured on the Web switch by definin

Web OS 10.0 Application GuideChapter 16: Persistence 427212777-A, February 2002Cookie Modes of OperationWeb OS supports the following modes of oper

Web OS 10.0 Application Guide428 Chapter 16: Persistence212777-A, February 2002Passive Cookie ModeIn Passive Cookie mode, when the client first mak

Web OS 10.0 Application GuideChapter 16: Persistence 429212777-A, February 2002Rewrite Cookie Mode In rewrite cookie mode, the Web switch generates

212777-A, February 200243CHAPTER 2VLANsThis chapter describes network design and topology considerations for using Virtual Local Area Networks (VLANs)

Web OS 10.0 Application Guide430 Chapter 16: Persistence212777-A, February 2002Configuring Cookie-Based Persistence1. Before you can configure cook

Web OS 10.0 Application GuideChapter 16: Persistence 431212777-A, February 20024. Select the appropriate load-balancing metric for the real server

Web OS 10.0 Application Guide432 Chapter 16: Persistence212777-A, February 2002n Set multiple response countThis parameter is set for passive mode

Web OS 10.0 Application GuideChapter 16: Persistence 433212777-A, February 2002Example 1: Setting the Cookie LocationIn this example, the client re

Web OS 10.0 Application Guide434 Chapter 16: Persistence212777-A, February 2002Example 2: Parsing the CookieThis example shows three configurations

Web OS 10.0 Application GuideChapter 16: Persistence 435212777-A, February 2002Example 4: Using Rewrite Cookie Moden Rewrite server cookie with the

Web OS 10.0 Application Guide436 Chapter 16: Persistence212777-A, February 2002Server-Side Multi-Response Cookie SearchCookie-based persistence req

Web OS 10.0 Application GuideChapter 16: Persistence 437212777-A, February 2002SSL Session ID-Based PersistenceSSL is a set of protocols built on t

Web OS 10.0 Application Guide438 Chapter 16: Persistence212777-A, February 2002Figure 16-5 illustrates persistence based on SSL session ID as follo

Web OS 10.0 Application GuideChapter 16: Persistence 439212777-A, February 2002Configuring SSL Session ID-Based PersistenceTo configure session ID-

Web OS 10.0 Application Guide44 Chapter 2: VLANs212777-A, February 2002VLAN ID NumbersWeb OS supports up to 246 VLANs per switch. Even though the m

Web OS 10.0 Application Guide440 Chapter 16: Persistence212777-A, February 2002

212777-A, February 2002441CHAPTER 17Bandwidth ManagementBandwidth Management (BWM) enables Web site managers to allocate a certain portion of the avai

Web OS 10.0 Application Guide442 Chapter 17: Bandwidth Management212777-A, February 2002OverviewTo manage bandwidth, create one or more bandwidth m

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 443212777-A, February 2002n When Virtual Matrix Architecture (VMA) is not enabled, ba

Web OS 10.0 Application Guide444 Chapter 17: Bandwidth Management212777-A, February 2002Bandwidth PoliciesBandwidth policies are bandwidth limitati

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 445212777-A, February 2002Rate LimitsA bandwidth policy specifies three limits, liste

Web OS 10.0 Application Guide446 Chapter 17: Bandwidth Management212777-A, February 2002Data PacingThe mechanism used to keep the individual traffi

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 447212777-A, February 2002Classification CriteriaThe frames associated with a particu

Web OS 10.0 Application Guide448 Chapter 17: Bandwidth Management212777-A, February 2002CombinationsCombinations of classifications are limited to

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 449212777-A, February 2002Frame DiscardWhen packets in a contract queue have not yet

Web OS 10.0 Application GuideChapter 2: VLANs 45212777-A, February 2002VLANs and the IP InterfacesCarefully consider how you create VLANs within th

Web OS 10.0 Application Guide450 Chapter 17: Bandwidth Management212777-A, February 2002Figure 17-4 URL-Based Bandwidth ManagementFigure 17-5 URL

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 451212777-A, February 2002HTTP Header-Based Bandwidth ManagementHTTP header-based BWM

Web OS 10.0 Application Guide452 Chapter 17: Bandwidth Management212777-A, February 2002Bandwidth Statistics and HistoryStatistics are maintained i

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 453212777-A, February 2002Packet Coloring (TOS bits) for Burst LimitWhenever the soft

Web OS 10.0 Application Guide454 Chapter 17: Bandwidth Management212777-A, February 2002Configuring Bandwidth ManagementThe following procedure pro

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 455212777-A, February 20025. (Optional) Set the TOS byte value, between 0-255, for th

Web OS 10.0 Application Guide456 Chapter 17: Bandwidth Management212777-A, February 20029. (Optional) Enable TOS overwriting for the BWM contract.1

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 457212777-A, February 2002Additional Configuration ExamplesExamples are provided for

Web OS 10.0 Application Guide458 Chapter 17: Bandwidth Management212777-A, February 20023. On the switch, select a BWM contract and name the contra

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 459212777-A, February 200211. Assign the BWM contracts to different switch ports.Phys

Web OS 10.0 Application Guide46 Chapter 2: VLANs212777-A, February 2002Example 1: Multiple VLANS with Tagging AdaptersFigure 2-1 Example 1: Multip

Web OS 10.0 Application Guide460 Chapter 17: Bandwidth Management212777-A, February 2002Preferential Services ExamplesBWM can be used to provide pr

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 461212777-A, February 20025. Set the bandwidth policy for this contract.Each BWM cont

Web OS 10.0 Application Guide462 Chapter 17: Bandwidth Management212777-A, February 200212. Create a virtual server that will be used to classify t

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 463212777-A, February 2002URL-Based Bandwidth Management ExampleIn this example, you

Web OS 10.0 Application Guide464 Chapter 17: Bandwidth Management212777-A, February 20023. Configure a real server to handle the URL request. To ad

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 465212777-A, February 20025. Turn on URL-based server load balancing on the virtual s

Web OS 10.0 Application Guide466 Chapter 17: Bandwidth Management212777-A, February 20022. Allocate bandwidth for each string.To do this, assign a

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 467212777-A, February 2002Scenario 2: In this scenario, the Web site has multiple vir

Web OS 10.0 Application Guide468 Chapter 17: Bandwidth Management212777-A, February 2002Security Management ExampleBWM can be used to prevent Denia

Web OS 10.0 Application GuideChapter 17: Bandwidth Management 469212777-A, February 20026. Set the bandwidth policy for the contract.Each BWM contr

Web OS 10.0 Application GuideChapter 2: VLANs 47212777-A, February 2002NOTE – VLAN tagging is required only on ports that are connected to other Al

Web OS 10.0 Application Guide470 Chapter 17: Bandwidth Management212777-A, February 2002

212777-A, February 2002471GlossaryDIP (Destination IP Address)The destination IP address of a frame.Dport (Destination Port)The destination port (appl

Web OS 10.0 Application Guide472 Glossary212777-A, February 2002SIP (Source IP Address)The source IP address of a frame.SPort (Source Port) The sou

Web OS 10.0 Application GuideGlossary 473212777-A, February 2002VRRP (Virtual Router Redundancy Protocol)A protocol that acts very similarly to Cis

Web OS 10.0 Application Guide474 Glossary212777-A, February 2002

212777-A, February 2002475IndexSymbols[ ]... 23Numerics80 (port) ...

Web OS 10.0 Application Guide476 Index212777-A, February 2002configuringcookie-based persistence...430FTP Server Load Ba

Web OS 10.0 Application GuideIndex 477212777-A, February 2002Ggateway. See default gateway.Gigabit adaptersjumbo frames ...

Web OS 10.0 Application Guide478 Index212777-A, February 2002IP routing ...123cross-subnet e

Web OS 10.0 Application GuideIndex 479212777-A, February 2002Nname servers, Global SLB configuration example.291Network Address Translation (NAT)..

Web OS 10.0 Application Guide48 Chapter 2: VLANs212777-A, February 2002Example 2: Parallel Links with VLANsFigure 2-2 Example 2: Parallel Links wi

Web OS 10.0 Application Guide480 Index212777-A, February 2002real servers ...122backup/overflo

Web OS 10.0 Application GuideIndex 481212777-A, February 2002service ports... 128, 171setting multiple r

Web OS 10.0 Application Guide482 Index212777-A, February 2002VLANsbroadcast domains...33, 43, 45, 48default PVID...

Web OS 10.0 Application GuideChapter 2: VLANs 49212777-A, February 2002VLANs and Spanning Tree ProtocolSpanning Tree Protocol (STP) detects and eli

Web OS 10.0 Application GuideContents 5212777-A, February 2002OSPF Configuration Examples 83Example 1: Simple OSPF Domain 84Example 2: Virtual Link

Web OS 10.0 Application Guide50 Chapter 2: VLANs212777-A, February 2002Bridge Protocol Data Units (BPDUs)To create a Spanning Tree, the Web switch

Web OS 10.0 Application GuideChapter 2: VLANs 51212777-A, February 2002Multiple Spanning TreesWeb OS 10.0 supports up to 16 instances of Spanning T

Web OS 10.0 Application Guide52 Chapter 2: VLANs212777-A, February 2002Example of a Four-Switch Topology with a Single Spanning TreeIn the four-swi

Web OS 10.0 Application GuideChapter 2: VLANs 53212777-A, February 2002Example of a Four-Switch Topology with Multiple Spanning TreesIf multiple Sp

Web OS 10.0 Application Guide54 Chapter 2: VLANs212777-A, February 2002Switch-Centric Spanning Tree ProtocolIn Figure 2-5 on page 53, VLAN 2 is sha

Web OS 10.0 Application GuideChapter 2: VLANs 55212777-A, February 2002VLAN Participation in Spanning Tree GroupsThe VLAN participation for each Sp

Web OS 10.0 Application Guide56 Chapter 2: VLANs212777-A, February 2002Configuring Multiple Spanning Tree GroupsThis configuration shows how to con

Web OS 10.0 Application GuideChapter 2: VLANs 57212777-A, February 20023. Configure the following on Web switch C: Add port 8 to VLAN 3 and define

Web OS 10.0 Application Guide58 Chapter 2: VLANs212777-A, February 2002VLANs and Default GatewaysWeb OS allows you to assign different default gate

Web OS 10.0 Application GuideChapter 2: VLANs 59212777-A, February 2002In the example shown in Figure 2-6, if default gateways 5 or 6 fail, then tr

Web OS 10.0 Application Guide6 Contents212777-A, February 2002Load Balancing Special Services 149IP Server Load Balancing 149FTP Server Load Balanc

Web OS 10.0 Application Guide60 Chapter 2: VLANs212777-A, February 2002Configuring the Local NetworkTo completely segregate VLAN traffic to its own

Web OS 10.0 Application GuideChapter 2: VLANs 61212777-A, February 20023. Configure the default gateways.Configuring default gateways 5 and 6 for V

Web OS 10.0 Application Guide62 Chapter 2: VLANs212777-A, February 20026. (Optional) Configure the local networks to ensure that the VLANs use the

Web OS 10.0 Application GuideChapter 2: VLANs 63212777-A, February 2002VLANs and Jumbo FramesTo reduce host frame processing overhead, Gigabit netw

Web OS 10.0 Application Guide64 Chapter 2: VLANs212777-A, February 2002Figure 2-7 Jumbo Frame VLANsRouting Jumbo Frames to Non-Jumbo Frame VLANsWh

212777-A, February 200265CHAPTER 3Port TrunkingTrunk groups can provide super-bandwidth, multi-link connections between Alteon Web switches or other t

Web OS 10.0 Application Guide66 Chapter 3: Port Trunking212777-A, February 2002Statistical Load DistributionNetwork traffic is statistically load b

Web OS 10.0 Application GuideChapter 3: Port Trunking 67212777-A, February 2002Port Trunking ExampleIn the example below, three ports will be trunk

Web OS 10.0 Application Guide68 Chapter 3: Port Trunking212777-A, February 20023. Repeat the process on Web switch 2.Trunk group 1 (on Web switch 1

212777-A, February 200269CHAPTER 4OSPFWeb OS 10.0 supports the Open Shortest Path First (OSPF) routing protocol. The Web OS implementation conforms to

Web OS 10.0 Application GuideContents 7212777-A, February 2002Chapter 8: Application Redirection 203Overview 204Web Cache Redirection Environment 2

Web OS 10.0 Application Guide70 Chapter 4: OSPF212777-A, February 2002Types of OSPF AreasAn AS can be broken into logical units known as areas. In

Web OS 10.0 Application GuideChapter 4: OSPF 71212777-A, February 2002Types of OSPF Routing DevicesAs shown in Figure 4-2, OSPF uses the following

Web OS 10.0 Application Guide72 Chapter 4: OSPF212777-A, February 2002Neighbors and AdjacenciesIn areas with two or more routing devices, neighbors

Web OS 10.0 Application GuideChapter 4: OSPF 73212777-A, February 2002The Shortest Path First TreeThe routing devices use a link-state algorithm (D

Web OS 10.0 Application Guide74 Chapter 4: OSPF212777-A, February 2002OSPF Implementation in Web OSWeb OS 10.0 supports a single instance of OSPF a

Web OS 10.0 Application GuideChapter 4: OSPF 75212777-A, February 2002Defining AreasIf you are configuring multiple areas in your OSPF domain, one

Web OS 10.0 Application Guide76 Chapter 4: OSPF212777-A, February 2002Using the Area ID to Assign the OSPF Area NumberThe OSPF area number is defin

Web OS 10.0 Application GuideChapter 4: OSPF 77212777-A, February 2002Interface CostThe OSPF link-state algorithm (Dijkstra’s algorithm) places eac

Web OS 10.0 Application Guide78 Chapter 4: OSPF212777-A, February 2002Default RoutesWhen an OSPF routing device encounters traffic for a destinatio

Web OS 10.0 Application GuideChapter 4: OSPF 79212777-A, February 2002Virtual LinksUsually, all areas in an OSPF AS are physically connected to the

Web OS 10.0 Application Guide8 Contents212777-A, February 2002Chapter 11: High Availability 247VRRP Overview 248VRRP Components 248VRRP Operation 2

Web OS 10.0 Application Guide80 Chapter 4: OSPF212777-A, February 2002Router IDRouting devices in OSPF areas are identified by a router ID. The rou

Web OS 10.0 Application GuideChapter 4: OSPF 81212777-A, February 2002To configure OSPF passwords on the Web switches shown in Figure 4-4 use the f

Web OS 10.0 Application Guide82 Chapter 4: OSPF212777-A, February 2002Host Routes for Load BalancingWeb OS 10.0 implementation of OSPF includes hos

Web OS 10.0 Application GuideChapter 4: OSPF 83212777-A, February 2002OSPF Configuration ExamplesA summary of the basic steps for configuring OSPF

Web OS 10.0 Application Guide84 Chapter 4: OSPF212777-A, February 2002Example 1: Simple OSPF DomainIn this example, two OSPF areas are defined—one

Web OS 10.0 Application GuideChapter 4: OSPF 85212777-A, February 20023. Define the backbone.The backbone is always configured as a transit area us

Web OS 10.0 Application Guide86 Chapter 4: OSPF212777-A, February 2002Example 2: Virtual LinksIn the example shown in Figure 4-6, area 2 is not phy

Web OS 10.0 Application GuideChapter 4: OSPF 87212777-A, February 20024. Define the backbone.5. Define the transit area.The area that contains the

Web OS 10.0 Application Guide88 Chapter 4: OSPF212777-A, February 2002Configuring OSPF for a Virtual Link on Switch #21. Configure IP interfaces on

Web OS 10.0 Application GuideChapter 4: OSPF 89212777-A, February 20026. Define the stub area.7. Attach the network interface to the backbone.8. At

Web OS 10.0 Application GuideContents 9212777-A, February 2002Part 3: Advanced Web SwitchingChapter 12: Global Server Load Balancing 289GSLB Overvi

Web OS 10.0 Application Guide90 Chapter 4: OSPF212777-A, February 2002Example 3: Summarizing RoutesBy default, ABRs advertise all the network addre

Web OS 10.0 Application GuideChapter 4: OSPF 91212777-A, February 20023. Define the backbone.4. Define the stub area.5. Attach the network interfac

Web OS 10.0 Application Guide92 Chapter 4: OSPF212777-A, February 2002Example 4: Host RoutesThe Web OS 10.0 implementation of OSPF includes host ro

Web OS 10.0 Application GuideChapter 4: OSPF 93212777-A, February 2002Configuring OSPF for Host Routes on Web Switch #11. Configure basic SLB param

Web OS 10.0 Application Guide94 Chapter 4: OSPF212777-A, February 20025. Configure the backup virtual server.Alteon Web switch # 1 will act as a ba

Web OS 10.0 Application GuideChapter 4: OSPF 95212777-A, February 200210. Attach the network interface to the backbone.11. Attach the network inter

Web OS 10.0 Application Guide96 Chapter 4: OSPF212777-A, February 2002Configuring OSPF for Host Routes on Web Switch 21. Configure basic SLB parame

Web OS 10.0 Application GuideChapter 4: OSPF 97212777-A, February 20024. Enable OSPF on Web switch #2.5. Define the backbone.6. Define the stub are

Web OS 10.0 Application Guide98 Chapter 4: OSPF212777-A, February 20029. Configure host routes.Host routes are configured just like those on Web sw

212777-A, February 200299CHAPTER 5Secure Switch ManagementThis chapter discusses the use of secure tunnels so that the data on the network is encrypte