waas configuration guide (version 1.0) · 2. accelerator wae configuration 1) ip address, default...


Index

1. TEST Topology

2. WAAS Basic Configuration

3. Traffic Intercept Configuration

4. CIFS Configuration

5. CIFS PrePosition Configuration

6. WAN Emulation (WAN-Bridge) Configuration

7. WAAS OS Upgrade

8. CIFS를위한Windows2003 AD 설정변경


TEST Topology


0/5~0/6

192.168.30.11 192.168.30.10

Net:172.16.3.0/24Gw:172.16.3.1

0/9

Net:192.168.30.0/24Gw:192.168.30.1

Net:192.168.1.0/24Gw:192.168.1.1

0/1

192.168.1.65AD, File SrvWeb, FTP,DNS Srv

WAN Emulation(WAN Bridge)

0/5 0/6

CM(WAE-612)

Center(WAE-512)

DataCenter

Cat3560 3.10

Network Diagram

Branch

Net:192.168.100.0/24Gw:192.168.100.1

Net:192.168.101.0/24Gw:192.168.101.1NM-WAE:192.168.101.10

192.168.100.100

0/00/1

Branch-2(NME-WAE)

Net:172.16.3.0/24Gw:172.16.3.2

NTP Server


V30

192.168.30.11 192.168.30.10

V10V2


0/5 0/6

CM(WAE-612)

Center(WAE-512)

DataCenter

Cat3560 3.10

Network Diagram (WCCP)

Branch

Net:192.168.100.0/24Gw:192.168.100.1

Net:192.168.101.0/24Gw:192.168.101.1NM-WAE:192.168.101.10

192.168.100.100

0/00/1

ISR2800(NME-WAE)

Net:172.16.3.0/24Gw:172.16.3.2

WCCP62 WCCP61 WCCP62 WCCP61


NTP Server


V30

192.168.30.11 192.168.30.10

V10V2


0/5 0/6

CM(WAE-612)

Center(WAE-512)

DataCenter

Cat3560 3.10

Network Diagram (PBR)

Branch

Net:192.168.100.0/24Gw:192.168.100.1

Net:192.168.101.0/24Gw:192.168.101.1NM-WAE:192.168.101.10

192.168.100.100

0/00/1

ISR2800(NME-WAE)

Net:172.16.3.0/24Gw:172.16.3.2

PBR-S2W& ACL100

PBR-W2W& ACL110

PBR-W2W& ACL110

PBR-C2W& ACL100

DCPBR-S2W : Server to WAAS & ACL 100PBR-W2W : WAN to WAAS & ACL 110

access-list 100 permit ip any anyaccess-list 110 permit ip any any

BRPBR-C2W : CLIENT to WAAS & ACL100PBR-W2W : WAAS to WAN & ACL 110

access-list 100 permit ip any anyaccess-list 110 permit ip any any


NTP Server


WAE Basic Configuration


1. Central Manager WAE Configuration

1) IP Address, Default Gateway 설정

2) Primary Interface 설정

4) Device Mode 설정 (Central Manager WAE)

5) Central Manager Role 설정

6) CMS Enable

2. Accelerator WAE Configuration

1) IP Address, Default Gateway 설정

2) Primary Interface 설정

3) Device Mode 설정 (Accelerator WAE)

4) Central Manager IP Address 설정

5) CMS Enable

3. Accelerator WAE 설정후 Central Manager에서 Activation

4. WCCP Router 연동설정 (Traffic Intercept Chapter 참고)

WAE Basic Configuration Step


Central Manager WAE Configuration

!hostname WAAS-CMip domain-name cisco.com!interface GigabitEthernet 1/0ip address 192.168.30.11 255.255.255.0!ip default-gateway 192.168.30.1ip name-server 192.168.1.65ntp server 172.16.1.2 ! recommend!primary-interface GigabitEthernet 1/0device mode central-manager!copy run startreload<reboot>central-manager role primarycms enable!copy run start

Default 계정은 username : admin, password : default

Web 접속은 cms enable 후에접속가능


Accelerator WAE Configuration

!hostname WAAS-CENTER-512ip domain-name cisco.com!interface GigabitEthernet 1/0ip address 192.168.30.10 255.255.255.0!ip default-gateway 192.168.30.1ip name-server 192.168.1.65ntp server 172.16.1.2 ! recommend!primary-interface GigabitEthernet 1/0device mode application-accelerator!central-manager address 192.168.30.11!policy-engine config restore-predefinedcms enable!copy run start

Default 계정은 username : admin, password : default

Web 접속은 cms enable 후에접속가능


ACTIVATING THE ACCELERATOR WAESstatus : inactive�activate�pending�online

CM 접속방법 - https://<ipaddress>:8443


Traffic Intercept Configuration


WCCP v2 설정 (router, switch)

!ip cefip wccp version 2!access-list 100 remark CLIENT-to-SERVER-WCCP61access-list 100 deny ip 172.16.3.0 0.0.0.255 anyaccess-list 100 permit ip any anyaccess-list 110 remark SERVER-to-CLIENT-WCCP62access-list 110 permit ip any any!ip wccp 61 redirect-list 100ip wccp 62 redirect-list 110!interface vlan 2desctipton =server vlan=ip wccp 62 redirect in!interface vlan 10description =wan vlan=ip wccp 61 redirect in!

WCCP 정상독작은반드시확인할것!!! IOS에따라서WCCP 버그존재


ISR의 NME-WAAS 설정

!Ip cefip wccp 61 redirect-list 101ip wccp 62 redirect-list 102!interface FastEthernet0/0ip address 172.16.3.2 255.255.255.0ip wccp 62 redirect in!interface FastEthernet0/0ip address 192.168.100.1 255.255.255.0ip wccp 61 redirect in!interface Integrated-Service-Engine1/0ip address 192.168.101.1 255.255.255.0ip wccp redirect exclude inservice-module ip address 192.168.101.10 255.255.255.0service-module ip default-gateway 192.168.101.1!ip route 0.0.0.0 0.0.0.0 172.16.3.1ip route 192.168.101.10 255.255.255.255 Integrated-Service-Engine1/0! access-list 101 permit ip any anyaccess-list 102 permit ip any any

Service Engine 접속방법 :

Router# service-module integrated-Service-Engine 1/0 session


WCCP common Issue


WCCP v2 동작확인

DC-BB-1#sh ip wccpGlobal WCCP information:

Router information:Router Identifier: 192.168.1.1Protocol Version: 2.0

Service Identifier: 61Number of Cache Engines: 1Number of routers: 1Total Packets Redirected: 157Redirect access-list: 100Total Packets Denied Redirect: 0Total Packets Unassigned: 4Group access-list: -none-Total Messages Denied to Group: 0Total Authentication failures: 0

Service Identifier: 62Number of Cache Engines: 1Number of routers: 1Total Packets Redirected: 0Redirect access-list: 110Total Packets Denied Redirect: 109559Total Packets Unassigned: 66Group access-list: -none-Total Messages Denied to Group: 0Total Authentication failures: 0

Redirect-list 에의한 traffic intercept 경우 ACL count를너무믿지말것.

정상적으로 Traffice Forwarding 되지만 Count가안올라가는경우가많음.


PBR 설정

!sdm prefer routing ! PBR 구동을위함<reboot>access-list 100 remark Server-to-WAASaccess-list 100 permit 192.168.1.0 0.0.0.255 any ! Server N/Waccess-list 110 remark WAAS-to-Serveraccess-list 110 deny ip 172.16.3.0 0.0.0.255 any ! Dynamic Routing N/W 제거access-list 110 permit ip any any!route-map PBR-S2W permit 100match ip address 100set ip next-hop 192.168.30.10 ! Center WAE IP Address!route-map PBR-W2S permit 110match ip address 110set ip next-hop 192.168.30.10 ! Center WAE IP Address!interface Vlan 2description =server vlan=ip policy route-map PBR-S2W!interface Vlan 10description =wan vlan=ip policy route-map PBR-W2S

Catalyst 3550급 Switch로 PBR 설정할경우 sdm prefer routing 설정을만드시먼저할것!!!

Dynamic Routing을사용할경우해당 N/W은 ACL에서제거할것..


WAE WCCP v2 설정

!wccp version 2!wccp router-list 1 192.168.30.1!wccp tcp-promiscuous router-list 1 mask-assign!copy run start


WAE WCCP v2 동작확인

center-wae#sh wccp status WCCP version 2 is enabled and currently active!center-wae#sh wccp routers

Router Information for Service: TCP Promiscuous 61Routers Configured and Seeing this Wide Area Engine(1)

Router Id Sent To Recv ID192.168.30.1 192.168.30.1 0006EFFC

Router Information for Service: TCP Promiscuous 62Routers Configured and Seeing this Wide Area Engine(1)

Router Id Sent To Recv ID192.168.30.1 192.168.30.1 0006EF58

!CENTER-WAAS-512#sh wccp greTransparent GRE packets received: 3968262Transparent non-GRE packets received: 0Transparent non-GRE non-WCCP packets received: 0Total packets accepted: 1006760<중간생략>Packets received with client IP addresses: 1006760<중간생략>


WAE Monitoring (CLI)

Command Description

show tfo connection summary

Display a listing of all connections optimized and pass-through on the WAE. This, like

other TFO commands, can be filtered based on peer ID, client IP, server IP, client port,

or server port. Optimized connections can also be viewed on the device homepage

within the CM at Devices > Device > (WAE) > Monitoring > Connections

show tfo connection <xxx> Examine the TCP optimization and policy statistics for a particular connection

show stat dre Show DRE statistics for all connections since last reboot or clearing of DRE cache

show stat dre connection Display a table of connections optimized by DRE, including bytes in vs bytes out

show stat dre connection id <xxx>Display compression specifics for an optimized connection, including bytes in, bytes

out, compression ratio, message size distribution, and connection statistics

show stat tfo savingDisplay the byte savings, packet savings, and compression ratios for each of the

applications configured on the WAE



REMOTE-WAAS-ISR#show tfo connection summary

Optimized Connection ListPolicy summary order: Our's, Peer's, Negotiated, AppliedF: Full optimization, D: DRE only, L: LZ Compression, T: TCP Optimization

Local-IP:Port Remote-IP:Port ConId PeerId Policy 192.168.101.10:49365 192.168.30.10:4050 5 00:14:5e:85:57:69 F,F,F,F192.168.100.100:1668 192.168.1.65:1025 254 00:14:5e:85:57:69 F,F,F,F192.168.1.65:20 192.168.100.100:1673 255 00:14:5e:85:57:69 F,F,F,F

Pass-Through ConnectionsLocal-IP:Port Remote-IP:Port Conn Type 192.168.100.100:1671 192.168.1.65:21 PT App Cfg192.168.1.65:21 192.168.100.100:1671 PT App Cfg192.168.101.10:16780 192.168.30.10:4050 App Dyn Mtch Optimized 192.168.100.100:3389 10.72.83.65:2771 PT In Progress 10.72.83.65:2771 192.168.100.100:3389 PT In Progress REMOTE-WAAS-ISR#

Optimized Connection List 상태반드시확인할것.

Pass-Through Connection은어떠한이유(설정 or 지원문제)에의해서최적화안되는것임.


WAE Monitoring (GUI)

상세

상세



REMOTE-WAAS-ISR#show statistics dreCache:Status: Usable, Oldest Data (age): 10d18hTotal usable disk size: 45149 MB, Used: 0.31%Hash table RAM size: 180 MB, Used: 0.00%

Connections: Total (cumulative): 258 Active: 1

Encode:Overall: msg: 3837, in: 987 KB, out: 664 KB, ratio: 32.65%DRE: msg: 3836, in: 987 KB, out: 972 KB, ratio: 1.44%

DRE Bypass: msg: 1, in: 61 BLZ: msg: 1865, in: 930 KB, out: 622 KB, ratio: 33.11%

LZ Bypass: msg: 1972, in: 43762 BAvg latency: 0.278 msEncode th-put: 924 KB/sMessage size distribution:0-1K=93% 1K-5K=6% 5K-15K=0% 15K-25K=0% 25K-40K=0% >40K=0%

Decode:Overall: msg: 4168, in: 5829 KB, out: 8221 KB, ratio: 29.09%DRE: msg: 4167, in: 6932 KB, out: 8221 KB, ratio: 15.67%

DRE Bypass: msg: 1, in: 26 BLZ: msg: 1683, in: 442 KB, out: 1545 KB, ratio: 71.37%

LZ Bypass: msg: 2485, in: 5387 KBAvg latency: 0.221 msDecode th-put: 8941 KB/sMessage size distribution:0-1K=91% 1K-5K=1% 5K-15K=1% 15K-25K=1% 25K-40K=1% >40K=1%

REMOTE-WAAS-ISR#



REMOTE-WAAS-ISR#show statistics tfo saving File-TransferApplication Inbound Outbound

---------------------- ----------------------File-Transfer

Bytes Savings 2274571 0Packets Savings 2926 599Compression Ratio 1.4:1 1:1

REMOTE-WAAS-ISR#sh statistics tfo saving Directory-ServicesApplication Inbound Outbound

---------------------- ----------------------Directory-Services

Bytes Savings 28389 0Packets Savings 0 0Compression Ratio 1.3:1 1:1


FTP 전송 Test

1차 FTP 전송시간 : 약 46초2차 FTP 전송시간 : 약 1.8초


Central Manager 접속화면


Central Manager Device List


CIFS Configuration


CIFS Configuration Step

1. Network Device Group 설정

1) Create Network Device Group

2) Configure Core Server Setting

3) Device for Core Cluster

2. File Server 등록

1) Registering New File Server

2) Core Cluster Assignment For File Server

3. File Server Connectivity 설정

1) Create New Connection

2) File Server Setting

3) Assign Edge Device

4) WAN Utilization


Creating New Device Group


Configure Core Server Setting


Registering New File Server

click


Create a New Connecton


Edge Device Assignment


WAN Utilization


Core Cluster 확인


Edge Device Member 확인


CIFS PrePositionConfiguration


CIFS Configuration Step

1. PrePosition Setting

1) Name, Status, File Server, Max, Min Size, Duration 등설정

2. Schedule Setting

2) Now, Daily, Date, Weekly, Monthly 설정

3. PrePosition Status 확인


WAN Bridge Configuration


WAN Bridge 사용방법

WAN-Bridge 다운로드 (CCO)WAN-Bridge 사용메뉴얼다운로드 (CCO)

Step 1. CCO에서최신WAN-Bridge ISO 파일다운로드후부팅이가능한 CD 제작Step 2. PC에WAN-Bridge CD 삽입후부팅Step 3. 부팅후아래와같은화면에서WAN 환경선택 (사용자설정도가능)Setp 4. WAN-Bridge 통과하는트래픽모니터링을위해서 IP 입력후Web을통한모니터링


WAN Bridge 사용자환경설정

WAN 사용자설정

WAN 사용자설정확인


WAN Bridge IP 설정

WAN-Bridge 관리용 IP 설정

WAN-Bridge 관리용 IP 설정확인


WAN Bridge 모니터링


WAE OS Upgrade


WAE OS Upgrade

WAE#copy ftp install 192.168.1.65 / WAAS-4.0.17.14-K9.bin Enter username for remote ftp server: anonymousEnter password for remote ftp server: Initiating FTP download...printing one # per 1MB downloadedSending: USER anonymous3Com 3CDaemon FTP Server Version 2.0User name ok, need passwordSending: PASS ****** User logged inSending: TYPE IType set to I.Sending: PASVEntering passive mode (192,168,1,65,11,67)Sending: CWD /CWD command successfulSending PASVEntering passive mode (192,168,1,65,11,68)Sending: RETR WAAS-4.0.17.14-K9.binUsing existing data connectionBacking up existing version WAAS 4.0.15-b6, built on 18:15:08 Dec 13 2007 by cnbuildConverting Manifest files ... DoneRebuilding image based on current software ... DoneBacking up flash configuration ... DoneReclaiming unused flash safe state sectors ... Done.#####################################################################################################################Installing phase3 bootloader...Installing WAE image.Installing system image to flash: ...................................................................................................................................................................... done.The new software will run after you reload.WAE#WAE#copy run startWAE#reloadProceed with reload?[confirm]Shutting down all services, will timeout in 15 minutes.reload in progress ..Reload requested by [email protected] requested by [email protected] system.


CIFS를위한AD 설정변경


CIFS를위한 AD 튜닝

http://acpluto.cisco.com/kb/waas/kb.asp?action=article_show&articleID=1141

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameter

Signature parameter 설정변경

waas configuration guide (version 1.0) · 2. accelerator wae configuration 1) ip address, default...

Documents