Steelhead Appliance Installation and

Steelhead Appliance
Installation and Configuration Guide
Version 6.1.2
December 2010
© 2003-2010 Riverbed Technology, Incorporated. All rights reserved.
Riverbed Technology, Riverbed, Steelhead, RiOS, Interceptor, Think Fast, the Riverbed logo, Mazu, Profiler, and Cascade are
trademarks or registered trademarks of Riverbed Technology, Inc. All other trademarks used or mentioned herein belong to their
respective owners.
Apple and Mac are registered trademarks of Apple, Incorporated in the United States and in other countries. Linux is a trademark
of Linus Torvalds in the United States and in other countries. Microsoft, Windows, Vista, Outlook, and Internet Explorer are
trademarks or registered trademarks of Microsoft Corporation in the United States and in other countries. Oracle and JInitiator
are trademarks or registered trademarks of Oracle Corporation in the United States and in other countries. UNIX is a registered
trademark in the United States and in other countries, exclusively licensed through X/Open Company, Ltd. VMware, ESX, ESXi
are trademarks or registered trademarks of VMware, Incorporated in the United States and in other countries.
Parts of this product are derived from the following software:
Apache © 2000-2003. The Apache Software Foundation. All rights reserved.
Busybox © 1999-2005 Eric Andersen
ethtool © 1994, 1995-8, 1999, 2001, 2002 Free Software Foundation, Inc
Less © 1984-2002 Mark Nudelman
Libevent © 2000-2002 Niels Provos. All rights reserved.
LibGD, Version 2.0 licensed by Boutell.Com, Inc.
Libtecla © 2000, 2001 by Martin C. Shepherd. All rights reserved.
Linux Kernel © Linus Torvalds
login 2.11 © 1993 The Regents of the University of California. All rights reserved.
md5, md5.cc © 1995 University of Southern California, © 1991-2, RSA Data Security, Inc.
my_getopt.{c,h} © 1997, 2000, 2001, 2002, Benjamin Sittler. All rights reserved.
NET-SNMP © 1989, 1991, 1992 by Carnegie Mellon University. All rights reserved. Derivative Work - 1996, 1998-2000 Copyright
1996, 1998-2000 The Regents of the University of California. All rights reserved.
OpenSSH © 1983, 1990, 1992, 1993, 1995, 1993 The Regents of the University of California. All rights reserved.
pam © 2002-2004 Tall Maple Systems, Inc. All rights reserved.
pam-radius © 1989, 1991 Free Software Foundation, Inc.
pam-tacplus © 1997-2001 by Pawel Krawczyk
sscep © 2003 Jarkko Turkulainen. All rights reserved.
ssmtp © GNU General Public License
syslogd © 2002-2005 Tall Maple Systems, Inc. All rights reserved.
Vixie-Cron © 1988, 1990, 1993, 1994 by Paul Vixie. All rights reserved.
Zile © 1997-2001 Sandro Sigalam © 2003 Reuben Thomas. All rights reserved.
This product includes software developed by the University of California, Berkeley (and its contributors), EMC, and Comtech
AHA Corporation. This product is derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm.
For detailed copyright and license agreements or modified source code (where required), see the Riverbed Support site at https:/
/support.riverbed.com. Certain libraries were used in the development of this software, licensed under GNU Lesser General
Public License, Version 2.1, February 1999. For a list of libraries, see the Riverbed Support site at https://support.riverbed.com.
You must log in to the support site to request modified source code.
Other product names, brand names, marks, and symbols are registered trademarks or trademarks of their respective owners.
The content of this manual is furnished on a RESTRICTED basis and is subject to change without notice and should not be
construed as a commitment by Riverbed Technology, Incorporated. Use, duplication, or disclosure by the U.S. Government is
subject to restrictions set forth in Subparagraphs (c) (1) and (2) of the Commercial Computer Software Restricted Rights at 48 CFR
52.227-19, as applicable. Riverbed Technology, Incorporated assumes no responsibility or liability for any errors or inaccuracies
that may appear in this book.
Riverbed Technology
199 Fremont Street
San Francisco, CA 94105
Phone: 415.247.8800
Fax: 415.247.8801
Web: http://www.riverbed.com
Part Number
712-00001-12
Contents
Preface......................................................................................................................................................... 7
About This Guide ..........................................................................................................................................7
Audience ..................................................................................................................................................7
Document Conventions .........................................................................................................................8
Hardware and Software Dependencies......................................................................................................8
CMC Compatibility .......................................................................................................................................9
Riverbed Services Platform 32-Bit and 64-Bit Support.............................................................................9
Ethernet Network Compatibility.................................................................................................................9
SNMP-Based Management Compatibility...............................................................................................10
Antivirus Compatibility..............................................................................................................................10
Additional Resources ..................................................................................................................................11
Release Notes ........................................................................................................................................11
Riverbed Documentation and the Support Knowledge Base ........................................................11
Safety Guidelines .........................................................................................................................................11
Contacting Riverbed....................................................................................................................................12
Internet ...................................................................................................................................................12
Support...................................................................................................................................................12
Professional Services ............................................................................................................................12
Documentation......................................................................................................................................12
Chapter 1 - Overview of the Steelhead Appliance .................................................................................13
Overview of the Steelhead Appliance ......................................................................................................14
The Auto-Discovery Process ...............................................................................................................15
Configuring Optimization...................................................................................................................16
Fail-to-Wire (Bypass) Mode.................................................................................................................16
Fail-to-Block (Disconnect) Mode ........................................................................................................18
New Features in Version 6.1.1 ....................................................................................................................18
Upgrading RiOS to Version 6.1.1 ...............................................................................................................20
Upgrading 1U xx20s to Version 6.1.1 .................................................................................................20
Upgrading RiOS Software...................................................................................................................21
Steelhead Appliance Installation and Configuration Guide
iii
Contents
Downgrading the Software .................................................................................................................22
Technical Specifications ..............................................................................................................................22
Series 250, 550, 1050, 2050, 5050, 6050, 7050......................................................................................22
Model 50, 100, 200, and 300.................................................................................................................23
Model 520, 1020, 1520, 2020, 3020, 3520, 5520, 6020, and 6120.......................................................24
Model 500, 510, 1000, 1010, 2000, 2010, 3000, 3010, 3510, 5000, and 5010.....................................25
Environmental Specifications ....................................................................................................................27
Series xx50 Status Lights and Ports...........................................................................................................29
Series 250 and 550 .................................................................................................................................29
Series 1050 and 2050 .............................................................................................................................30
Series 5050 and 6050 .............................................................................................................................31
Series 7050..............................................................................................................................................34
Series xx00 and xx10 Status Lights and Ports ..........................................................................................36
Model 50, 100, 200, and 300.................................................................................................................36
Model 500, 510, 1000, 1010, 2001, and 2010.......................................................................................37
Model 3000, 3010, 5000, and 5010.......................................................................................................38
Series xx20 Rev-A and Rev-B Status Lights and Ports ...........................................................................38
Model 520, 1020, 1520, and 2020 Rev-A.............................................................................................39
Model 520, 1020, 1520, and 2020 Rev-B .............................................................................................39
Model 3020, 3520, 5520, 6020, and 6120.............................................................................................40
Bypass Card Status Lights ..........................................................................................................................41
Bypass Cards Series xx50 Status Lights.............................................................................................42
Bypass Card Manufacturing Numbers Series xx50 .........................................................................42
Four-Port Copper Gigabit-Ethernet PCI-E Card..............................................................................43
Two-Port SX Multimode Fiber Gigabit-Ethernet PCI-E Card ........................................................44
Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-E Card .......................................................44
Two-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E Card .....................................................45
Four-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E Card.....................................................45
Two-Port FX Multimode Fiber 100 Mbps PCI-E Card ....................................................................46
Two-Port SR Multimode Fiber 10 Gigabit-Ethernet PCI-E Card ...................................................47
Two-Port LR Single Mode Fiber 10 Gigabit-Ethernet PCI-E Card ................................................47
Bypass Cards Series xx00, xx10, and xx20 Status Lights.................................................................48
Bypass Card Manufacturing Numbers Series xx00, xx10, and xx20 .............................................49
Two-Port Copper Fast-Ethernet PCI-X Card ....................................................................................49
Two-Port Copper Gigabit-Ethernet PCI-X Card-A ..........................................................................50
Two-Port Copper Gigabit-Ethernet PCI-X Card-B...........................................................................51
Four-Port Copper Gigabit-Ethernet PCI-X Card..............................................................................52
Six-Port Copper Gigabit-Ethernet PCI-X Card.................................................................................53
Two-Port SX Multimode Fiber Gigabit-Ethernet PCI-X Card ........................................................54
Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-X Card .......................................................54
Chapter 2 - Installing and Configuring the Steelhead Appliance.........................................................57
Choosing a Network Deployment ............................................................................................................57
Checking Your Inventory............................................................................................................................59
Preparing Your Site for Installation...........................................................................................................60
iv
Steelhead Appliance Installation and Configuration Guide
Contents
Completing the Configuration Checklist ................................................................................................60
Steelhead Appliance Ports...................................................................................................................62
Bypass Card Interface Naming Conventions ...................................................................................62
Powering On the Steelhead Appliance.....................................................................................................63
Connecting to the Steelhead Appliance ...................................................................................................64
Configuring In-Path Steelhead Appliances .............................................................................................65
Avoiding Duplex Mismatch ................................................................................................................65
The Configuration Wizard ..................................................................................................................65
Connecting the Steelhead Appliance to Your Network ..................................................................69
Verifying Your Connections ................................................................................................................70
Connecting to the Management Console ..........................................................................................72
Verifying Your Configuration .............................................................................................................73
Configuring Out-of-Path Steelhead Appliances .....................................................................................74
Before You Begin...................................................................................................................................74
Connecting the Steelhead Appliance to Your Network ..................................................................77
Configuring the Client-Side Appliance.............................................................................................77
Chapter 3 - Troubleshooting....................................................................................................................79
Troubleshooting ...........................................................................................................................................79
Cables .....................................................................................................................................................80
Duplex Mismatch .................................................................................................................................80
SMB Signing (before RiOS v5.5) .........................................................................................................81
In-Path Steelhead Appliances Connection........................................................................................81
Oplock Issues ........................................................................................................................................82
CIFS Overlapping Open Optimization Denies Multi-User Access ...............................................83
IP address Configuration.....................................................................................................................84
Asymmetric Routing ............................................................................................................................85
Packet Ricochet .....................................................................................................................................85
Packet Ricochet—Internet Control Messaging Protocol (ICMP) Redirects..................................86
Auto-Discovery Failure .......................................................................................................................87
Protocol Optimization Errors..............................................................................................................88
Server-Side Out-of-Path Connection Caveats ..................................................................................88
Specific Problems..................................................................................................................................89
Resetting a Lost Password..........................................................................................................................90
Network Integration Checklist ..................................................................................................................91
Appendix A - Installing the DC Power Supply .......................................................................................93
DC Power Supply Specifications and LED Indicators ...........................................................................93
Technical Specifications .......................................................................................................................93
LED Indicators ......................................................................................................................................94
Requirements for Steelhead Appliances with DC Input Power ...........................................................94
DC Supply and Ground Conductor Requirements ................................................................................94
Overcurrent Protection Requirements ......................................................................................................95
Connecting the DC Power Supply to the Steelhead Appliance ............................................................95
Steelhead Appliance Installation and Configuration Guide
v
Contents
Acronyms and Abbreviations..................................................................................................................97
Index ........................................................................................................................................................103
vi
Steelhead Appliance Installation and Configuration Guide
Preface
Welcome to the Steelhead Appliance Installation and Configuration Guide. Read this preface for an overview of
the information provided in this guide and for an understanding of the documentation conventions used
throughout. It includes the following sections:
„
“About This Guide” on page 7
„
“Hardware and Software Dependencies” on page 8
„
“CMC Compatibility” on page 9
„
“Riverbed Services Platform 32-Bit and 64-Bit Support” on page 9
„
“Ethernet Network Compatibility” on page 9
„
“SNMP-Based Management Compatibility” on page 10
„
“Antivirus Compatibility” on page 10
„
“Additional Resources” on page 11
„
“Safety Guidelines” on page 11
„
“Contacting Riverbed” on page 12
About This Guide
The Steelhead Appliance Installation and Configuration Guide describes how to install and configure the
Steelhead appliance.
Audience
This guide is written for storage and network administrators familiar with administering and managing
WANs using common network protocols such as TCP, CIFS, HTTP, FTP, and NFS.
Steelhead Appliance Installation and Configuration Guide
7
Preface
Hardware and Software Dependencies
Document Conventions
This manual uses the following standard set of typographical conventions to introduce new terms, illustrate
screen displays, describe command syntax, and so forth.
Convention
Meaning
italics
Within text, new terms and emphasized words appear in italic typeface.
boldface
Within text, CLI commands and GUI controls appear in bold typeface.
Courier
Code examples appears in Courier font. For example:
amnesiac > enable
amnesiac # configure terminal
<>
Values that you specify appear in angle brackets. For example:
interface <ipaddress>
[]
Optional keywords or variables appear in brackets. For example:
ntp peer <addr> [version <number>]
{}
Required keywords or variables appear in braces. For example:
{delete <filename> | upload <filename>}
|
The pipe symbol represents a choice to select one keyword or variable to the left or right of
the symbol. (The keyword or variable can be either optional or required.) For example:
{delete <filename> | upload <filename>}
Hardware and Software Dependencies
The following table summarizes the hardware and software requirements for the Steelhead appliance.
Riverbed Component
Hardware and Software Requirements
Steelhead Appliance
19-inch (483 mm) two or four-post rack. (A Model 50,
100, 200, 250, 300, 550 does not require a rack.)
Steelhead Management Console, Steelhead Central
Management Console
Any computer that supports a Web browser with a color
image display.
The Management Console has been tested with Mozilla
Firefox version v2.x and v3.0.x, and Microsoft Internet
Explorer version v6.x and v7.x.
Note: JavaScript and cookies must be enabled in your
Web browser.
8
Steelhead Appliance Installation and Configuration Guide
CMC Compatibility
Preface
CMC Compatibility
The Steelhead appliance has been tested with the following Central Management Console (CMC) versions:
Steelhead
RiOS
Version
Recommended
CMC Version
CMC v6.1.x
CMC v6.0.x
CMC v5.5.x
CMC v5.0.x
v6.1.x
v6.1.0
Parity; includes
Virtual Steelhead,
does not support
ProCurve.
Manages some RiOS
v6.1.x features may be
supported in
subsequent point
releases of CMC v6.0.
Not supported
Not supported
v6.0.x
v6.1.0, 6.0.1
Parity; Manages all
Steelhead
appliance v6.0.2
and later features,
including RSP.
Parity; Manages all
Steelhead appliance
v6.0.x features.
CMC v5.5.3 and
later, manages
only v5.5
Steelhead
appliance
features.
Not supported
v5.5.x
v6.1.0, 6.0.1
Parity; Manages all
Steelhead
appliance v5.5.4
only, does not
support RSP.
Parity; Manages all
Steelhead appliance
v5.5.4 features only,
does not support RSP.
Parity; does not
support RSP.
CMC v5.0.4 and
later, manages
all Steelhead
appliance v5.0
features.
Riverbed Services Platform 32-Bit and 64-Bit Support
The following table describes the models that support 32-bit and 64-bit Virtual Machines (VMs). The 64-bit
guest VMs (such as Windows Server 2008 R2) are not supported on Models 250, 550, and the 1U xx20s
because these models do not incorporate Virtual Technology (VT) support.
Steelhead Model
RiOS
RSP Image
32-bit Guest VMs
64-bit Guest VMs
250/550
32-bit
32-bit
Yes
No
520/1020/1520/2020
64-bit
64-bit
Yes
No
1050/2050
64-bit
64-bit
Yes
Yes (starting v5.5.3a)
3020/3520
64-bit
64-bit
Yes
Yes (starting v5.5.1)
5050/6050/7050
64-bit
64-bit
Yes
Yes
Ethernet Network Compatibility
The Steelhead appliance supports the following types of Ethernet networks:
„
Ethernet Logical Link Control (LLC) (IEEE 802.2 - 2005)
„
Fast Ethernet 100 Base-TX (IEEE 802.3 - 2005)
Steelhead Appliance Installation and Configuration Guide
9
Preface
„
SNMP-Based Management Compatibility
Gigabit Ethernet over Copper 1000 Base-T and Fiber 1000 Base-SX (LC connector) and Fiber 1000 Base
LX (IEEE 802.3 - 2005)
The Steelhead appliance ports support the following connection types and speeds:
„
Primary - 10/100/1000 Base-T, auto-negotiating
„
Auxiliary - 10/100/1000 Base-T, auto-negotiating
„
LAN - 10/100/1000 Base-TX or 1000 Base-SX or 1000 Base-LX, depending on configuration
„
WAN - 10/100/1000 Base-TX or 1000 Base-SX or 1000 Base-LX, depending on configuration
Note: 1000 Base-SX and 1000 Base-LX interface options are not available for the Steelhead appliance 250 and 550 models.
The Steelhead appliance supports VLAN Tagging (IEEE 802.1Q - 2005). It does not support the ISL protocol.
All copper interfaces are auto-sensing for speed and duplex (IEEE 802.3 - 2005).
The Steelhead appliance auto-negotiates speed and duplex mode for all data rates and supports full duplex
mode and flow control (IEEE 802.3 – 2005).
The Steelhead appliance with a Gigabit Ethernet card supports Jumbo Frames on in-path and primary
ports.
SNMP-Based Management Compatibility
The Steelhead appliance supports a proprietary Riverbed MIB accessible through SNMP. SNMP v1 (RFCs
1155, 1157, 1212, and 1215) and SNMP v2c (RFCs 1901, 2578, 2579, 2580, 3416, 3417, and 3418) are supported,
although some MIB items can only be accessible through SNMPv2.
SNMP support allows the Steelhead appliance to be integrated into network management systems such as
Hewlett Packard OpenView Network Node Manager, BMC Patrol, and other SNMP-based network
management tools.
Antivirus Compatibility
The Steelhead appliance has been tested on clients and file servers generating CIFS traffic with the
following antivirus software with no impact on performance:
„
Network Associates (McAfee) VirusScan v7.0.0 Enterprise on the server
„
Network Associates (McAfee) VirusScan v7.1.0 Enterprise on the server
„
Network Associates (McAfee) VirusScan v7.1.0 Enterprise on the client
„
Symantec (Norton) AntiVirus Corporate Edition v8.1 on the server
The Steelhead appliance has been tested on clients and file servers generating CIFS traffic with the
following antivirus software with moderate impact on performance:
„
F-Secure Anti-Virus v5.43 on the client
„
F-Secure Anti-Virus v5.5 on the server
10
Steelhead Appliance Installation and Configuration Guide
Additional Resources
Preface
„
Network Associates (McAfee) NetShield v4.5 on the server
„
Network Associates VirusScan v4.5 for multi-platforms on the client
„
Symantec (Norton) AntiVirus Corporate Edition v8.1 on the client
Additional Resources
This section describes resources that supplement the information in this guide. It contains the following
sections:
„
“Release Notes” on page 11
„
“Riverbed Documentation and the Support Knowledge Base” on page 11
Release Notes
The following online file supplements the information in this manual. It is available on the Riverbed
Support site at https://support.riverbed.com.
Online File
Purpose
<product>_<version_number><build_number>.
pdf
Describes the product release and identifies fixed problems,
known problems, and workarounds. This file also provides
documentation information not covered in the manuals or that
has been modified since publication.
Please examine this file before you begin the installation and configuration process. It contains important
information about this release of the Steelhead appliance.
Riverbed Documentation and the Support Knowledge Base
For a complete list and the most current version of Riverbed documentation log in to the Riverbed Support
site located at https://support.riverbed.com.
The Riverbed Knowledge Base is a database of known issues, how-to documents, system requirements, and
common error messages. You can browse titles or search for key words and strings. To access the Riverbed
Knowledge Base, log in to the Riverbed Support site located at
https://support.riverbed.com.
Safety Guidelines
Follow the safety precautions outlined in the Safety and Compliance Guide when installing and setting up
your equipment.
Important: Failure to follow these safety guidelines can result in injury or damage to the equipment. Mishandling of
the equipment voids all warranties. Please read and follow safety guidelines and installation instructions carefully.
Steelhead Appliance Installation and Configuration Guide
11
Preface
Contacting Riverbed
Many countries require the safety information to be presented in their national languages. If this
requirement applies to your country, consult the Safety and Compliance Guide. Before you install, operate, or
service the Riverbed products, you must be familiar with the safety information. Refer to the Safety and
Compliance Guide if you do not clearly understand the safety information provided in this guide.
Contacting Riverbed
This section describes how to contact departments within Riverbed.
Internet
You can find out about Riverbed products through our Web site at http://www.riverbed.com.
Support
If you have problems installing, using, or replacing Riverbed products contact Riverbed Support or your
channel partner who provides support. To contact Riverbed Support, please open a trouble ticket at https:/
/support.riverbed.com or call 1-888-RVBD-TAC (1-888-782-3822) in the United States and Canada or +1 415
247 7381 outside the United States.
Professional Services
Riverbed has a staff of professionals who can help you with installation assistance, provisioning, network
redesign, project management, custom designs, consolidation project design, and custom coded solutions.
To contact Riverbed Professional Services go to http://www.riverbed.com or email
proserve@riverbed.com.
Documentation
We continually strive to improve the quality and usability of our documentation. We appreciate any
suggestions you may have about our online documentation or printed materials. Send documentation
comments to techpubs@riverbed.com.
12
Steelhead Appliance Installation and Configuration Guide
CHAPTER 1
Overview of the Steelhead Appliance
This chapter provides an overview of common terms, new features, upgrade instructions, technical and
environmental specifications, and a description of the status lights for the system. This chapter includes the
following sections:
„
“Overview of the Steelhead Appliance” on page 14
„
“New Features in Version 6.1.1” on page 18
„
“Upgrading RiOS to Version 6.1.1” on page 20
„
“Downgrading the Software” on page 22
„
“Technical Specifications” on page 22
„
“Environmental Specifications” on page 27
„
“Series xx50 Status Lights and Ports” on page 29
„
“Series xx00 and xx10 Status Lights and Ports” on page 36
„
“Series xx20 Rev-A and Rev-B Status Lights and Ports” on page 38
„
“Bypass Card Status Lights” on page 41
Steelhead Appliance Installation and Configuration Guide
13
Overview of the Steelhead Appliance
Overview of the Steelhead Appliance
Overview of the Steelhead Appliance
The causes for slow throughput in WANs are well known: high delay (round-trip time or latency), limited
bandwidth, and chatty application protocols. Large enterprises spend a significant portion of their
information technology budgets on storage and networks, much of it spent to compensate for slow
throughput, by deploying redundant servers and storage, and the required backup equipment. Steelhead
appliances enable you to consolidate and centralize key IT resources to save money, reduce capital
expenditures, simplify key business processes, and improve productivity.
With the Steelhead appliance, you can solve a range of problems affecting WANs and application
performance, including:
„
Insufficient WAN bandwidth
„
Inefficient transport protocols in high-latency environments
„
Inefficient application protocols in high-latency environments
The Riverbed Optimization System (RiOS) intercepts client-server connections without interfering with
normal client-server interactions, file semantics, or protocols. All client requests are passed through to the
server normally, while relevant traffic is optimized to improve performance.
The optimization techniques RiOS utilizes are:
„
Data Streamlining - Steelhead appliances and Steelhead Mobile can reduce WAN bandwidth
utilization by 65% to 98% for TCP-based applications using Data Streamlining. In addition to
traditional techniques like data compression, RiOS also uses a Riverbed proprietary algorithm called
Scalable Data Referencing (SDR). SDR breaks up TCP data streams into unique data chunks that are
stored in the hard disk (datastore) of the device running RiOS (a Steelhead appliance or Steelhead
Mobile host system). Each data chunk is assigned a unique integer label (reference) before it is sent to a
peer RiOS device across the WAN. When the same byte sequence is seen again in future transmissions
from clients or servers, the reference is sent across the WAN instead of the raw data chunk. The peer
RiOS device (a Steelhead appliance or Steelhead Mobile host system) uses this reference to find the
original data chunk on its datastore, and reconstruct the original TCP data stream.
„
Transport Streamlining - Steelhead appliances use a generic latency optimization technique called
Transport Streamlining. Transport Streamlining uses a set of standards and proprietary techniques to
optimize TCP traffic between Steelhead appliances. These techniques:
„
14
–
ensure that efficient retransmission methods, such as TCP selective acknowledgements, are used.
–
negotiate optimal TCP window sizes to minimize the impact of latency on throughput.
–
maximize throughput across a wide range of WAN links.
Application Streamlining - In addition to Data and Transport Streamlining optimizations, RiOS can
apply application-specific optimizations for certain application protocols (for example, CIFs, MAPI,
NFS, TDS, HTTP, Oracle Forms).
Steelhead Appliance Installation and Configuration Guide
Overview of the Steelhead Appliance
„
Overview of the Steelhead Appliance
Management Streamlining - Management Streamlining refers to the methods that Riverbed has
developed to simplify the deployment and management of RiOS devices. These methods include:
–
Auto-Discovery Process - Auto-discovery enables Steelhead appliances and Steelhead Mobile to
automatically find remote Steelhead appliances, and to then optimize traffic using them. Autodiscovery relieves you from having to manually configure large amounts of network information.
The auto-discovery process enables administrators to control and secure connections, specify
which traffic is to be optimized, and specify peers for optimization.
–
Central Management Console (CMC) - The CMC enables remote Steelhead appliances to be
automatically configured and monitored. It also gives you a single view of the overall benefit and
health of the Steelhead appliance network.
–
Steelhead Mobile Controller - The Mobile Controller is the management appliance you use to
track the individual health and performance of each deployed software client, and to manage
enterprise client licensing. The Mobile Controller enables you to see who is connected, view their
data reduction statistics, and perform support operations such as resetting connections, pulling
logs, and automatically generating traces for troubleshooting. You can perform all of these
management tasks without end user input.
The Steelhead appliance is typically deployed on a LAN, with communication between appliances taking
place over a private WAN or VPN. Because optimization between Steelhead appliances typically takes
place over a secure WAN, it is not necessary to configure company firewalls to support Steelhead specific
ports.
Figure 1-1. Typical In-Path Deployment
For detailed information about how the Steelhead appliance works and deployment design principles, see
the Steelhead Appliance Deployment Guide.
The Auto-Discovery Process
Auto-discovery enables Steelhead appliances to automatically find remote Steelhead appliances and to
optimize traffic to them. Auto-discovery relieves you of having to manually configure the Steelhead
appliances with large amounts of network information (for example, multiple in-path rules). The autodiscovery process enables you to control and secure connections, specify which traffic is optimized, and
specify how remote peers are selected for optimization. There are two types of auto-discovery, original and
enhanced.
Enhanced auto-discovery (RiOS v4.0.x or later) automatically discovers the last Steelhead appliance in the
network path of the TCP connection. In contrast, the original auto-discovery protocol automatically
discovers the first Steelhead appliance in the path. The difference is only seen in environments where there
are three or more Steelhead appliances in the network path for connections to be optimized. Enhanced autodiscovery works with Steelhead appliances running the original auto-discovery protocol.
Steelhead Appliance Installation and Configuration Guide
15
Overview of the Steelhead Appliance
Overview of the Steelhead Appliance
Configuring Optimization
You configure optimization of traffic using the Management Console or the Riverbed CLI. You configure
what traffic a Steelhead appliance optimizes and specify the type of action it performs using:
„
„
In-Path rules - In-path rules determine the action a Steelhead appliance takes when a connection is
initiated, usually by a client. In-path rules are used only when a connection is initiated. Because
connections are usually initiated by clients, in-path rules are configured for the initiating, or client-side
Steelhead appliance. In-path rules determine Steelhead appliance behavior with SYN packets. You
configure one of the following types of in-path rule actions:
–
Auto - Use the auto-discovery process to determine if a remote Steelhead appliance is able to
optimize the connection attempting to be created by this SYN packet.
–
Pass-through - Allow the SYN packet to pass through the Steelhead appliance. No optimization is
performed on the TCP connection initiated by this SYN packet.
–
Fixed-Target - Skip the auto-discovery process and use a specified remote Steelhead appliance as
an optimization peer. Fixed target rules require the input of at least one remote target Steelhead
appliance; an optional backup Steelhead appliance might also be specified.
–
Deny - Drop the SYN packet and send a message back to its source.
–
Discard - Drop the SYN packet silently.
Peering rules - Peering rules determine how a Steelhead appliance reacts when it sees a probe query.
Peering rules are an ordered list of fields a Steelhead appliance uses to match with incoming SYN
packet fields (for example, source or destination subnet, IP address, VLAN, or TCP port) as well as the
IP address of the probing Steelhead appliance. This is especially useful in complex networks. There are
the following types of peering rule actions:
–
Pass - The receiving Steelhead appliance does not respond to the probing Steelhead appliance, and
allows the SYN+ probe packet to continue through the network.
–
Accept - The receiving Steelhead appliance responds to the probing Steelhead appliance and
becomes the remote-side Steelhead appliance (that is, the peer Steelhead appliance) for the
optimized connection.
–
Auto - If the receiving Steelhead appliance is not using enhanced auto-discovery, this has the same
effect as the Accept peering rule action. If enhanced auto-discovery is enabled, the Steelhead
appliance only becomes the optimization peer if it is the last Steelhead appliance in the path to the
server.
For detailed information about in-path and peering rules and how to configure them, see the Steelhead
Management Console User’s Guide.
Fail-to-Wire (Bypass) Mode
The Steelhead appliance is equipped with one of the following types of network interface bypass cards
(depending on your order):
„
Two-Port Copper Gigabit-Ethernet PCI-X Card-A
„
Two-Port Copper Gigabit-Ethernet PCI-X Card-B
„
Two-Port Copper Fast-Ethernet PCI-X Card
„
Four-Port Copper Gigabit-Ethernet PCI-X Card
„
Six-Port Copper Gigabit-Ethernet PCI-X Card
16
Steelhead Appliance Installation and Configuration Guide
Overview of the Steelhead Appliance
Overview of the Steelhead Appliance
„
Two-Port SX Multimode Fiber Gigabit-Ethernet PCI-X Card
„
Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-X Card
„
Four-Port Copper Gigabit-Ethernet PCI-E Card Series xx50
„
Two-Port SX Multimode Fiber Gigabit-Ethernet PCI-E Card Series xx50
„
Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-E Card Series xx50
„
Two-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E Card Series xx50
„
Four-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E Card Series xx50
„
Two-Port FX Multimode Fiber 100 Mbps PCI-E Card Series xx50
„
Two-Port SR Multimode Fiber 10 Gigabit-Ethernet PCI-E Card Series xx50
„
Two-Port LR Single Mode Fiber 10 Gigabit-Ethernet PCI-E Card Series xx50
For detailed information about the bypass cards and how to install them, see the Network Interface Card
Installation Guide.
Note: The Model 50, 100, 200, 250, 300, and 550 has built-in Fast-Ethernet bypass capability.
All Steelhead appliance models and in-path network interface cards support a fail-to-wire mode. In the
event of a failure or loss of power, the Steelhead appliance goes into bypass mode and the traffic passes
through uninterrupted.
Certain in-path network interface cards also support a fail-to-block mode. In the case of a failure or loss of
power, the Steelhead appliance LAN and WAN interfaces lose link status. The default failure mode is failto-wire mode.
If there is a serious problem with the Steelhead appliance or it is not powered on, it goes into bypass mode
to prevent a single point of failure. If the Steelhead appliance is in bypass mode, you are notified in the
following ways:
„
The Intercept/Bypass status light on the bypass card is triggered. For detailed information about
bypass card status lights, see “Bypass Card Status Lights” on page 41.
„
The Home page of the Management Console displays Critical in the Status bar.
„
SNMP traps are sent (if you have set this option).
„
The event is logged to system logs (syslog).
„
Email notifications are sent (if you have set this option).
When the fault is corrected, new connections that are made receive optimization; however, connections
made during the fault are not. To force all connections to be optimized, enable the kickoff feature. Generally,
connections are short-lived and kickoff is not necessary. For detailed information about enabling the kickoff
feature, see the Steelhead Management Console User’s Guide.
When the Steelhead appliance is in bypass mode the traffic passes through uninterrupted. Traffic that was
optimized might be interrupted, depending on the behavior of the application-layer protocols. When
connections are restored, they succeed, although without optimization.
In an out-of-path deployment, if the server-side Steelhead appliance fails, the first connection from the
client fails. After detecting that the Steelhead appliance is not functioning, a ping channel is setup from the
client-side Steelhead appliance to the server-side Steelhead appliance. Subsequent connections are passed
through unoptimized. When the ping succeeds, processing is restored and subsequent connections are
intercepted and optimized.
Steelhead Appliance Installation and Configuration Guide
17
Overview of the Steelhead Appliance
New Features in Version 6.1.1
For detailed information about the ping command, see the Riverbed Command-Line Interface Reference
Manual.
Fail-to-Block (Disconnect) Mode
Some bypass cards support fail-to-block mode. In fail-to-block mode, if the Steelhead appliance has an
internal software failure or power loss, the Steelhead appliance LAN and WAN interfaces power down and
stop bridging traffic.
When fail-to-block is enabled, a failed Steelhead appliance blocks traffic along its path, forcing traffic to be
re-routed onto other paths (where the remaining Steelhead appliances are deployed). This is only useful if
the network has a routing or switching infrastructure that can automatically divert traffic off of the link once
the failed Steelhead appliance blocks it.
Note: You can use this with connection forwarding, the allow-failure CLI command, and an additional Steelhead
appliance on another path to the WAN to achieve redundancy. For more information, see the Riverbed Command-Line
Interface Reference Manual.
The following Steelhead appliance network interface cards support fail-to-block mode:
„
Two-Port Copper Gigabit-Ethernet PCI-X Card-B
„
Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-X Card
„
Six-Port Copper Gigabit-Ethernet PCI-X Card
„
Four-Port Copper Gigabit-Ethernet PCI-E Card Series xx50
„
Two-Port SX Multimode Fiber Gigabit-Ethernet PCI-E Card Series xx50
„
Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-E Card Series xx50
„
Two-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E Card Series xx50
„
Four-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E Card Series xx50
„
Two-Port SR Multimode Fiber 10 Gigabit-Ethernet PCI-E Card Series 7050L, 7050M and Interceptor
9350
The desktop Series 250 and 550 support fail-to-block mode. The desktop Models 50, 100, 200, and 300 do
not support fail-to-block mode.
You set fail-to-block mode in the Steelhead CLI. For detailed information, see the Steelhead Appliance
Deployment Guide.
New Features in Version 6.1.1
The following feature is available with Version 6.1.1:
„
10G Hardware Pass-through - This feature automatically bypasses all UDP (User Datagram Protocol)
connections on a Steelhead appliance equipped with one or more Two-Port SR Multimode Fiber 10
Gigabit-Ethernet PCI-E Bypass cards. You can also bypass specific TCP (Transmission Control
Protocol) connections to decrease the work load on the local Steelhead appliances.
The following features are available with Version 6.1.x:
18
Steelhead Appliance Installation and Configuration Guide
New Features in Version 6.1.1
Overview of the Steelhead Appliance
„
MAPI Encryption for Windows 7 - RiOS v6.1.x supports encrypted MAPI traffic for Windows 7 clients
via Kerberos constrained delegation and cross-domain trust.
„
Exchange 2010 Support - This feature includes support for Exchange 2010 server and the
corresponding Outlook clients.
„
Multi-Inpath WCCP - This feature includes support for multiple interfaces on a Steelhead appliance to
participate in WCCP groups on one or more routers.
„
HTTP Authorization Optimizations - HTTP optimization includes support for SharePoint 2007, along
with more and improved configuration settings to tune a particular subnet dynamically, with no
service restart required. Authentication settings include
„
„
Support for an unauthenticated connection to serve prefetched objects, as long as the connection
belongs to a session whose base connection is already authenticated.
„
Ability to force NTLM authentication In the case of negotiated Kerberos and NTLM authentication.
„
Ability to remove all credentials from the request on an already authenticated connection. This
works around Internet Explorer behavior that re-authorizes connections that have previously been
authorized.
„
Ability to prevent a WAN round trip by issuing the first 401 containing the realm choices from the
client-side Steelhead appliance.
SRDF/A and FCIP Storage Optimizations - RiOS v6.1.x provides two new storage module
optimization features:
„
SRDF/A optimization increases the data reduction LAN-to-WAN ratio with either equal or greater
data throughput in environments with SRDF traffic and delivers the data to the TCP consumer
without compromising data integrity.
„
FCIP optimization increases the data reduction LAN-to-WAN ratio with either equal or greater
data throughput in environments with SRDF traffic. This feature includes support for V-Max-to-VMax traffic optimization.
„
Windows 2008 R2 Support - RiOS v6.1.x supports domain security in both native and mixed modes
for Windows 2008 R2. It also supports delegation for users that are in domains trusted by the server's
domain. In addition, it now automatically updates the delegate user in Active Directory with
delegation rights to servers, streamlining configuration.
„
Riverbed Services Platform High Availability - A high availability feature in RSP allows you to
automatically copy specific RSP slots on a Steelhead appliance (source) to another Steelhead appliance
(target). If the source Steelhead appliance ever fails, you can replace its slots with the slot functionality
using the cloned slots on the target Steelhead appliance.
„
MAPI Admission Control - When the MAPI optimized connections have exceeded the admission
control maximum threshold of 85%, RiOS now passes through new MAPI connection clients but
continues to intercept and optimize existing MAPI connection clients.
„
Fast Directory Browsing - Provides CIFS extended directory caching to enhance directory browsing
over the WAN.
„
In-Path MSP Management - Provides a way to configure a secondary MIP interface that you can reach
through the physical in-path LAN and WAN interfaces. Configuring a secondary MIP interface allows
management of Steelhead appliances from a private network while maintaining a logical separation of
network traffic.
Steelhead Appliance Installation and Configuration Guide
19
Overview of the Steelhead Appliance
Upgrading RiOS to Version 6.1.1
„
Lotus Notes Pull Replication - A Lotus Notes pull replication feature allows the current Steelhead
appliance to request information from the source Steelhead appliance. The request specifies the
information that the current Steelhead appliance needs, based on its knowledge of changes already
received from the source Steelhead appliance and from all other domain controllers in the domain.
When the current Steelhead appliance receives information from the source, it updates that
information. The current Steelhead appliance’s next request to the source Steelhead appliance excludes
the information that has already been received and applied.
„
Passthrough Automatic Kickoff - Provides a way to reset established connections per in-path rule to
force them to go through the connection creation process again.
Upgrading RiOS to Version 6.1.1
RiOS Version 6.1.1 is backward compatible with previous RiOS versions. However, to obtain the full
benefits of the new features in RiOS Version 6.1.1, you need to upgrade the client-side and server-side
Steelhead appliances on any given WAN link. Once you have upgraded all appliances, all the benefits of
the Version 6.1.1 features and enhancements are available.
If you mix RiOS software versions in your network, the releases might support different optimization
features and you cannot take full advantage of the features that are not part of the older software versions.
Upgrading 1U xx20s to Version 6.1.1
This section applies only to 1U xx20 appliances that have not been upgraded to RiOS v5.5.
RiOS v5.5 changed which systems run 32-bit code and which systems run 64-bit code. This change only
affected the 1U xx20 platforms (which previously ran 32-bit code, and with v5.5 and later, can run 64-bit
code).
As of RiOS v5.5, all of the 1U xx20s (520, 1020, 1520, 2020, 2520) use a 64-bit image. Depending on the RiOS
version running on your system, you must use a stepping stone build prior to upgrading to the 64-bit version
of the code.
The following table summarizes the steps for upgrading from 32-bit systems to 64-bit systems.
Current RiOS Software Version
(32-bit code)
1.Upgrade to RiOS:
(32-bit code)
2.Upgrade to RiOS:
(64-bit code)
v4.1.x
v4.1.7c
v6.00
v5.0.x
v5.0.5b
v6.00
v4.1.7c or later
No stepping stone build
required.
v6.00
v5.0.5b or later
No stepping stone build
required.
v6.00
20
Steelhead Appliance Installation and Configuration Guide
Upgrading RiOS to Version 6.1.1
Overview of the Steelhead Appliance
If you do not upgrade to v4.1.7c or v5.0.5b before you upgrade to v5.5, the following message displays in
the Management Console:
Image install failed. -- The upgrade image provided is incompatible with the architecture of
this appliance's hardware. Please provide an image for the I386 architecture.
The system log also contains log messages similar to these:
Nov 17 16:45:24 gen1-sh167 writeimage[9310]: ERR: This hardware requires an i386 image.
Nov 17 16:45:24 gen1-sh167 mgmtd[4492]: [mgmtd.WARNING]: Exit with code 3 from writeimage.sh
Note: Version 5.0.5b and v4.1.7c or earlier also (incorrectly) allow the 32-bit code to be uploaded. This causes the
Steelhead appliance to attempt to boot into v5.5 and then boot back to its previous image.
All subsequent v4.1.x and v5.0.x releases allow for a normal upgrade to Version 6.1.1.
Upgrading RiOS Software
Follow these steps to upgrade your RiOS software. These instructions assume you are familiar with the
Steelhead appliance, the CLI, and the Management Console.
To upgrade RiOS software
1. Download the software image from the Riverbed Support to a location such as your desktop.
2. Log in to the Management Console using the Administrator account (admin).
3. Go to the Configure > Maintenance > Software Upgrade page and choose one of the following options:
–
From URL - Type the URL that points to the software image in the text box.
–
From Local File - Browse your file system and select the software image.
–
Schedule Upgrade for Later. - Select this option to schedule an upgrade for a later time. Type the
date and time in the Date and Time text boxes using the following formats YYYY/MM/DD and
HH:MM:SS.
–
Click Install Upgrade.
4. Reboot the appliance.
The software image is quite large; uploading the image takes a few minutes. On model 3020, 3520, 5520
6020, and 6120 appliances the software can take up to 4 minutes to boot when upgrading for the first time
to RiOS Version 6.1.1. This is normal behavior as the software is configuring the recovery flash device. Do
not press Ctrl-C, unplug, or otherwise shut down the system during this first boot. There is no indication
displayed during the system boot that the recovery flash device is being configured.
After the upload is complete, you are reminded to reboot the system to switch to the new version of the
software. After reboot, the software version is displayed on the Home page of the Management Console.
Steelhead Appliance Installation and Configuration Guide
21
Overview of the Steelhead Appliance
Technical Specifications
Downgrading the Software
If you are downgrading to a previous version of the Steelhead appliance software, you must downgrade to
a version of the software that has previously run on your machine. For example, you cannot upgrade from
v1.2.3 to v2.0 or v2.1 and downgrade to v1.2.8—you must downgrade to v1.2.3 and then upgrade to v1.2.8.
If you do not follow this step, the system discards your configuration and you cannot recover it.
If you inadvertently downgrade to a software version that is not running on your system, either go back to
a previously installed revision, or save the text results of a show running-configuration command before
downgrading, and apply it after the downgrade. For detailed information, see the Riverbed Command-Line
Interface Reference Manual.
Note: When downgrading from an image that supports four 10 GigE cards to an older image that does not, the message
‘Updating Bios. Please do not interrupt or reboot till the command completes’ will appear. This message is to indicate
that the appropriate Bios for your software image is being installed.
Technical Specifications
The following sections summarize the physical and power specifications for the Steelhead appliance.
Series 250, 550, 1050, 2050, 5050, 6050, 7050
The following table summarizes the physical and power specifications for the latest hardware platform for
the Steelhead appliance.
Power (W)
Series
Amps (A)
250*
62.5 W
VA
(max)
BTU
Hard Disk
Data
Store
62.5
213
BTU
120 GB
40 GB
Desktop
L-M-H
Voltage
Frequency
PSU
PCI
Slots
Bypass
Ports/
Max #
Ports
4.12 lb.
2.15 kg
100-240 V
Single
100 W
Internal
2
2/2
4.12 lb.
2.15 kg
100-240 V
Single
100 W
Internal
2
2/2
31.1 lb.
14.1 kg
100-240 V
1+1
Redundant
650 W
2
4/8
1+1
Redundant
650 W
2
4/8
Height,
Width,
Depth
Weight
(without
packaging)
1.65 x 7.1 x
12 in
50-60 Hz
4.2 x 18.0 x
30.5 cm
.514 A
32-bit
550*
66.5 W
66.5
Desktop
M-H
227
BTU
160 GB
80 GB
138-151 W
1U
UL-M-H
50-60 Hz
4.2 x 18.0 x
30.5 cm
.541 A
32-bit
1050
1.65 x 7.1 x
12 in
145153
471515
BTU
1.24-1.35 A
250-500 GB
1-2 Hot
Swappable
Disks
100-200
GB
1.71 x 17.2
x 25.41 in
4.35 x 43.6
x 64.54 cm
50-60 Hz
(63 Hz
max)
64-bit
2050
197 W
1U
L-M-H
64-bit
22
1.8 A
212
672
BTU
1 TB
4 Hot
Swappable
Disks
400 GB
1.71 x 17.2
x 25.41 in
4.35 x 43.6
x 64.54 cm
31.1 lb.
14.1 kg
100-240 V
50-60 Hz
(63 Hz
max)
Steelhead Appliance Installation and Configuration Guide
Technical Specifications
Power (W)
VA
(max)
Series
Amps (A)
5050
Overview of the Steelhead Appliance
203-225 W
325335
3U
BTU
Hard Disk
693768
BTU
2-3 TB
L-M-H
64-bit
6050
2.73-3.15 A
352 W
452
3U
64-bit
4.9 A
7050
425-430 W
455
3U
L-M
4.2 A
1670
BTU
14551470
BTU
8-12 Hot
Swappable
Disks
8 TB
Data
Store
Height,
Width,
Depth
Weight
(without
packaging)
Voltage
Frequency
600-800
GB
5.2 x 17 x
25.72
59-64 lb.
100-240 V
26.7-32.2
kg
50-60 Hz
71 lb.
100-240 V
32.2 kg
50-60 Hz
13.2 x 43.2
x 65.3
3.5 TB
16 Hot
Swappable
Disks
2.8-5.0 TB
13.2 x 43.2
x 65.3
2.2-4.4
TB
2x 300GB
2.5" HDD
5.2 x 17 x
25.72
(63 Hz
max)
55-59 lb.
100-240 V
25-26.8 kg
50-60 Hz
13.2 x 43.2
x 65.3
14--28x
160GB 2.5"
SSD
64-bit
5.2 x 17 x
25.72
(63 Hz
max)
(63 Hz
max)
PCI
Slots
Bypass
Ports/
Max #
Ports
1+1
Redundant
750 W
4
20
1+1
Redundant
750 W
4
20
1+1
Redundant
770 W
4
20
PSU
*Models 250 and 550 do not support 64-bit Virtual Machines (VMs). The 64-bit guest VMs (such as,
Windows Server 2008 R2) are not supported on the 250 and 550 because these models do not incorporate
Virtual Technology (VT) support.
Note: Some values, such as the hard disk size, vary according to the configuration option you have ordered. The table
lists the range of these values from lowest to highest.
Note: Depth does not include bezel on 1U and 3U (approximately 1 inch or 2.5 cm).
Model 50, 100, 200, and 300
The following table summarizes the physical and power specifications for the desktop Steelhead
appliances.
Model
Volts
Amperes
(V*A)
Power
Amperes
Power
Factor
(W/VA)
50
55
31.5 W
0.5
BTU
107
BTU
Hard
Disk
Data
Store
60 GB
35 GB
55
31.5 W
Weight
Voltage
and
Frequency
1.75 x 8.75
x 6 in
7.5 lb.
3.4 kg
100-240 V
7.5 lb.
3.4 kg
100-240 V
50-60 Hz
4.4 x 22.2 x
15.2 cm
0.5 A
100
Height,
Width,
Depth
0.5
107
BTU
60 GB
35 GB
0.5 A
Steelhead Appliance Installation and Configuration Guide
1.75 x 8.75
x 6 in
4.4 x 22.2 x
15.2 cm
50-60 Hz
Power
Required
PSU
12 VDC, 5
A, 60 W
Power
Adaptor
Single
60 W
12 VDC, 5
A, 60 W
Power
Adaptor
Single
60 W
23
Overview of the Steelhead Appliance
Model
Volts
Amperes
(V*A)
Power
Amperes
Power
Factor
(W/VA)
200
55
31.5 W
0.5
Technical Specifications
BTU
Hard
Disk
Data
Store
107
BTU
60 GB
35 GB
55
31.5 W
Weight
Voltage
and
Frequency
1.75 x 8.75
x 6 in
7.5 lb.
3.4 kg
100-240 V
7.5 lb.
3.4 kg
100-240 V
50-60 Hz
4.4 x 22.2 x
15.2 cm
0.5 A
300
Height,
Width,
Depth
0.5
107
BTU
60 GB
35GB
1.75 x 8.75
x 6 in
50-60 Hz
4.4 x 22.2 x
15.2 cm
0.5 A
Power
Required
PSU
12 VDC, 5
A, 60 W
Power
Adaptor
Single
60 W
12 VDC, 5
A, 60 W
Power
Adaptor
Single
60 W
Model 520, 1020, 1520, 2020, 3020, 3520, 5520, 6020, and 6120
The following table summarizes the physical and power specifications for the x20, and xx20 (Rev-A and
Rev-B, where applicable) Steelhead appliances.
Model
Volts
Amperes
(V*A)
Power
(W)
Amperes
(A)
Power
Factor
(W/VA)
520*
(1U)
Rev-A
207
206 W
1.76 A
0.99
Rev-B
151
149 W
1.28 A
0.98
1020*
(1U)
Rev-A
207
206 W
1.76 A
0.99
Rev-B
151
149 W
1.28 A
0.98
BTU
Data
Store
Height,
Width,
and
Depth
Weight
1 x 250
GB
80
GB
1.69 x 17.6
x 21.5 in
26 lb.
12 kg
100-240 V
26 lb.
12 kg
100-240 V
26 lb.
12 kg
100-240 V
26 lb.
12 kg
100-240 V
89 lb.
40 kg
100-240 V
646
BTU
206 W
1.76 A
0.99
646
BTU
Rev-B
151
149 W
1.28 A
0.98
508
BTU
1.76 A
0.99
Rev-B
151
149 W
1.28 A
0.98
3020
(3U)
435
425 W
3.7 A
0.97
Single
345 W
1.69 x 17.6
x 21.5 in
50-60 Hz
Single
345 W
4.27 x 44.7
x 54.61 cm
508
BTU
207
206 W
80
GB
646
BTU
1 x 250
GB
207
50-60 Hz
PSU
4.27 x 44.7
x 54.61 cm
1 x 250
GB
2020*
(1U)
Rev-A
Voltage
and
Frequency
508
BTU
1520*
(1U)
Rev-A
24
Hard
Disk
646
BTU
508
BTU
1450
BTU
80
GB
1.69 x 17.6
x 21.5 in
50-60 Hz
Single
345 W
4.27 x 44.7
x 54.61 cm
2 x 250
GB
SATA
+1
spare
150
GB
4 x 250
GB
SATA
+1
spare
250
GB
1.69 x 17.6
x 21.5 in
50-60 Hz
Single
345 W
4.27 x 44.7
x 54.61 cm
5.2 x 17.7 x
25.5 in
50-60 Hz
Triple
760 W
13.2 x 45 x
64.7 cm
Steelhead Appliance Installation and Configuration Guide
Technical Specifications
Model
3520
(3U)
5520
(3U)
6020
Overview of the Steelhead Appliance
Volts
Amperes
(V*A)
Power
(W)
Amperes
(A)
Power
Factor
(W/VA)
435
425 W
3.7 A
0.97
435
435
425 W
425 W
3.7 A
3.7 A
1450
BTU
0.97
1450
BTU
0.97
1450
BTU
(3U)
6120
520
505 W
4.4 A
BTU
0.97
1723
BTU
(3U)
Hard
Disk
Data
Store
Height,
Width,
and
Depth
Weight
6 x 250
GB
SATA
+1
spare
500
GB
5.2 x 17.7 x
25.5 in
92 lb.
42 kg
100-240 V
6 x 250
GB
SATA
+1
spare
700
GB
92 lb.
42 kg
100-240 V
8 x 400
GB (8
x 400
GB
SATA
+1
spare
1.4
TB
95 lb.
43 kg
100-240 V
14 x
500 GB
14 x
500 GB
SATA
+1
spare
3.2
TB
105 lb.
47 kg
100-240 V
Voltage
and
Frequency
50-60 Hz
PSU
Triple
760 W
13.2 x 45 x
64.7 cm
5.2 x 17.7 x
25.5 in
50-60 Hz
Triple
760 W
13.2 x 45 x
64.7 cm
5.2 x 17.7 x
25.5 in
50-60 Hz
Triple
760 W
13.2 x 45 x
64.7 cm
5.2 x 17.7 x
25.5 in
50-60 Hz
Triple
760 W
13.2 x 45 x
64.7 cm
*1U xx20s do not support 64-bit Virtual Machines (VMs). The 64-bit guest VMs (such as, Windows Server
2008 R2) are not supported on the 1U xx20s (even though they are 64-bit systems) because these models do
not incorporate Virtual Technology (VT) support.
Model 500, 510, 1000, 1010, 2000, 2010, 3000, 3010, 3510, 5000, and 5010
The following table summarizes the physical and power specifications for the x00, x10, xx00, and xx10
Steelhead appliances.
Model
Power
(W)
500
(1U)
250 W
510
(1U)
1000
(1U)
Current
and Load
Typical
Power
Draw
4A-2 A
1.76 A
2.27 A
@110 V
250 W
4A-2 A
8A-4 A
2.27 A
@110 V
Hard
Disk
Data
Store
853
BTU
1 x 80
GB
80 GB
Height,
Width,
and Depth
Weight
Voltage and
Frequency
PSU
1.7 x 16.8 x
16.1 in
17 lb.
7.7 kg
100-240 V
Single
250 W
17 lb.
7.7 kg
100-240 V
17 lb.
7.7 kg
100-240 V
50-60 Hz
4.31 x 42.7 x
40.9 cm
1.76 A
2.27 A
@110 V
250 W
BTU
853
BTU
1 x 80
GB
80 GB
1.7 x 16.8 x
16.1 in
50-60 Hz
Single
250 W
4.31 x 42.7 x
40.9 cm
1.76A
853
BTU
1 x 80
GB
Steelhead Appliance Installation and Configuration Guide
65 GB
1.7 x 16.8 x
16.1 in
50-60 Hz
Single
250 W
4.31 x 42.7 x
40.9 cm
25
Overview of the Steelhead Appliance
Model
Power
(W)
Current
and Load
Typical
Power
Draw
1010
(1U)
250 W
8A-4 A
1.76A
2000
(2U)
2010
(1U)
3000
(3U)
3010
(3U)
3510
(3U)
5000
(3U)
5010
(3U)
2.27 A
@110 V
250 W
8A-4 A
8A-4 A
1.76A
8A-4 A
1.76A
8A-4 A
N/A
N/A
4.18 A
@110 V
460 W
8A-4 A
N/A
4.18 A
@110 V
2 x 460
W
2 x 460
W
8A-4 A
N/A
4.18 A
@110 V
8A-4 A
Data
Store
853
BTU
1 x 200
GB
80 GB
Height,
Width,
and Depth
Weight
Voltage and
Frequency
PSU
1.7 x 16.8 x
16.1 in
17 lb.
7.7 kg
100-240 V
Single
250 W
26 lb.
11.8 kg
100-240 V
17 lb.
7.7 kg
100-240 V
62 lb.
28 kg
100-240 V
62 lb.
28 kg
100-240 V
62 lb.
28 kg
100-240 V
67 lb.
30 kg
100-240 V
67 lb.
30 kg
100-240 V
50-60 Hz
853
BTU
2 x 120
GB
135
GB
3.5 x 17 x
17.7 in
50-60 Hz
Single
250 W
853
BTU
2 x 200
GB
150
GB
1.7 x 16.8 x
16.1 in
50-60 Hz
Single
250 W
4.31 x 42.7 x
40.9 cm
4.18 A
@110 V
460 W
Hard
Disk
8.9 x 44.2 x
44.9 cm
2.27 A
@110 V
460 W
BTU
4.31 x 42.7 x
40.9 cm
2.27 A
@110 V
250 W
Technical Specifications
N/A
4.18 A
@110 V
1569
BTU
1569
BTU
1569
BTU
1569
BTU
1569
BTU
4 x 120
GB + 1
spare
230
GB
4 x 250
GB + 1
spare
250
GB
4 x 250
GB + 1
spare
250
GB
6 x 200
GB + 1
spare
512
GB
4 x 250
GB + 1
spare
512
GB
5.2 x 16.9 x
26 in
50-60 Hz
13.2 x 43.0 x
66.2 cm
5.2 x 16.9 x
26 in
50-60 Hz
13.2 x 43.0 x
66.2 cm
5.2 x 16.9 x
26 in
50-60 Hz
13.2 x 43.0 x
66.2 cm
5.2 x 16.9 x
26 in
50-60 Hz
13.2 x 43.0 x
66.2 cm
5.2 x 16.9 x
26 in
13.2 x 43.0 x
66.2 cm
50-60 Hz
Double
460 W
(See
below)
Double
460 W
(See
below)
Double
460 W
(See
below)
Double
460 W
(See
below)
Double
460 W
(See
below)
The following table summarizes power supply unit specifications for Model 3000, 3010, 3510, 5000, and
5010. The 5000 and 5010 power supplies are redundant and hot swappable. The 3000, 3010, and 3510 power
supplies are optionally redundant and hot swappable.
Model 3000, 3010, 3510, 5000, and 5010
Output Power
460 W
Voltage
90 ~ 264 VAC Full Range
Frequency
47 ~ 63Hz
Input Current
8.0/4.0A for 115/230 VAC
Inrush Current
60A/80A Max. for 115/230 VAC per power module
Temperature (Operating)
0º - 35º C
26
Steelhead Appliance Installation and Configuration Guide
Environmental Specifications
Overview of the Steelhead Appliance
Model 3000, 3010, 3510, 5000, and 5010
Temperature (Storage)
-20º - 70º C
Hold Up Time
16 ms; minimum at full load and 90 VAC input voltage
Dimensions
84 x 101 x 300 mm
Cooling
2 38 x 38 x 38 mm DC fans
Power Inlet
Alternating Current (AC)
Environmental Specifications
The following table summarizes the environmental requirements for the Steelhead appliance.
Model
Temperature
(Operating)
Temperature
(Storage)
Relative Humidity
Storage Humidity
Operating Altitude
50
0º - 50º C
-20º - 70º C
20% - 80%
5% - 95%
Up to 10,000 ft.
32° - 122º F
-4º - 158º F
non-condensing
non-condensing
100
0º - 50º C
32° - 122º F
-20º - 70º C
-4º - 158º F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
200
0º - 50º C
32° - 122º F
-20º - 70º C
-4º - 158º F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
250
0º - 45º C
32° - 113° F
-40º - 65º C
-40º - 149º F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
300
0º - 50º C
32° - 122º F
-20º - 70º C
-4º - 158º F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
520
10° - 35°C
50° - 95°F
-40° - 65°C
-40° - 149°F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
550
0º - 45º C
32° - 113° F
-40º - 65º C
-40º - 149º F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
1020
10° - 35°C
50° - 95°F
-40° - 65°C
-40° - 149°F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
1050
10° - 40°C
50° - 95°F
-40º - 65º C
-40º - 149º F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
1520
10° - 35°C
50° - 95°F
-40° - 65°C
-40° - 149°F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
2020
10° - 35°C
50° - 95°F
-40° - 65°C
-40° - 149°F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
2050
10° - 40°C
50° - 95°F
-40º - 65º C
-40º - 149º F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
3020
10° - 35°C
50° - 95°F
-40° - 70°C
-40° - 158°F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
3520
10° - 35°C
50° - 95°F
-40° - 70°C
-40° - 158°F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
Steelhead Appliance Installation and Configuration Guide
27
Overview of the Steelhead Appliance
Environmental Specifications
Temperature
(Operating)
Temperature
(Storage)
Relative Humidity
Storage Humidity
Operating Altitude
5520
10° - 35°C
50° - 95°F
-40° - 70°C
-40° - 158°F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
5050
10° - 40°C
50° - 95°F
-40º - 65º C
-40º - 149º F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
6050
10° - 40°C
50° - 95°F
-40º - 65º C
-40º - 149º F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
7050
10° - 40°C
50° - 95°F
-40º - 70º C
-40º - 149º F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
All
Other
Models
0º - 35º C
32° - 95º F
-20º - 70º C
-4º - 158º F
20% - 80%
non-condensing
5% - 95%
non-condensing
Up to 10,000 ft.
Model
28
Steelhead Appliance Installation and Configuration Guide
Series xx50 Status Lights and Ports
Overview of the Steelhead Appliance
Series xx50 Status Lights and Ports
This section describes the Series xx50 status lights and ports.
Series 250 and 550
The following figure illustrates the Series 250 and 550 status light and port locations.
Figure 1-2. Front Panel
Figure 1-3. Back Panel
The following table summarizes the system LEDs.
SYSTEM
Healthy = Blue
Degraded = Yellow
Critical = Red
System Boot = Yellow
HDD ACT
HDD Activity = Blinking Blue
BYP/BLK
(Bypass or Block (Disconnect) Mode)
Normal = No Light
Bypass or Block (Disconnect) = Orange
Steelhead Appliance Installation and Configuration Guide
29
Overview of the Steelhead Appliance
Series xx50 Status Lights and Ports
HDD ALARM
Disk Connected = Solid Blue
Read/Write Activity = Blinking Blue
Failed Disk = Orange
LAN/WAN LEDs
Left LED
Link = Solid Green
Activity = Blinking Green
Right LED
GB = Green
100 MB = Orange
10 MB = No Light
Series 1050 and 2050
The following figure illustrates the Series 1050 and 2050 status light and port locations.
Figure 1-4. Front Panel
Figure 1-5. Back Panel
The following table summarizes the system LEDs.
SYSTEM LEDs
Healthy = Blue
Degraded = Yellow
Critical = Red
System Boot = Yellow
NETWORK STATUS LEDs (Front LAN/WAN LEDs)
Link = Solid Blue
Activity = Blinking Blue
BYP/BLK
(Bypass or Block (Disconnect) Mode)
Normal = No Light
Bypass or Block (Disconnect) = Orange
HDD LEDs
Disk Connected = Solid Blue
Read/Write Activity = Blinking Blue
Failed Disk = Orange
30
Steelhead Appliance Installation and Configuration Guide
Series xx50 Status Lights and Ports
LAN/WAN LEDs
Overview of the Steelhead Appliance
Left LED
Link = Solid Green
Activity = Blinking Green
Right LED
GB = Orange
100 MB = Green
10 MB = No Light
Power Supply LEDs
Solid Green= Healthy power supply with AC power
connected.
Blinking Green= Unit is halted, but the power supplies are
still connected to AC power.
Solid Orange= AC power is not connected to this power
supply, but the unit is still powered on due to the other
power supply.
Solid Orange= Occurs when the power supply
automatically shuts off due to some error condition, such
as an overheat.
Blinking Orange= Indicates a power supply predictivefail condition, such as a fan failure. The power supply
may then shut itself off, which will change the LED to
solid orange. A log entry of this predictive-fail can be
viewed using the show hardware error-log all command
in the Riverbed Command-Line Interface.
No LED= No AC power connected.
Series 5050 and 6050
The following figure illustrates the Series 5050 and 6050 status light and port locations.
Figure 1-6. Front Panel
Steelhead Appliance Installation and Configuration Guide
31
Overview of the Steelhead Appliance
Series xx50 Status Lights and Ports
Figure 1-7. Back Panel
SYSTEM LEDs
Healthy = Blue
Degraded = Yellow
Critical = Red
System Boot = Yellow
NETWORK STATUS LEDs
Link = Solid Blue
Activity = Blinking Blue
BYP/BLK
(Bypass or Block (Disconnect) Mode)
Normal = No Light
Bypass or Block (Disconnect) = Orange
HDD LEDs
Disk Connected = Solid Blue
Read/Write Activity = Blinking Blue
Failed Disk = Orange
32
Steelhead Appliance Installation and Configuration Guide
Series xx50 Status Lights and Ports
LAN/WAN LEDs
Overview of the Steelhead Appliance
Left LED
Link = Solid Green
Activity = Blinking Green
Right LED
GB = Orange
100 MB = Green
10 MB = No Light
Power Supply LEDs
Solid Green= Healthy power supply with AC power
connected.
Blinking Green= Unit is halted, but the power supplies
are still connected to AC power.
Solid Orange= AC power is not connected to this power
supply, but the unit is still powered on due to the other
power supply.
Solid Orange= Occurs when the power supply
automatically shuts off due to some error condition,
such as an overheat.
Blinking Orange= Indicates a power supply predictivefail condition, such as a fan failure. The power supply
may then shut itself off, which will change the LED to
solid orange. A log entry of this predictive-fail can be
viewed using the show hardware error-log all
command in the Riverbed Command-Line Interface.
No LED= No AC power connected.
Steelhead Appliance Installation and Configuration Guide
33
Overview of the Steelhead Appliance
Series xx50 Status Lights and Ports
Series 7050
The following figure illustrates the Series 7050 status light and port locations.
Figure 1-8. Front Panel
Note: Disk drive numbers 0 and 1 are HDD. Drive numbers 2-29 are SSD.
34
Steelhead Appliance Installation and Configuration Guide
Series xx50 Status Lights and Ports
Overview of the Steelhead Appliance
Figure 1-9. Back Panel
SYSTEM LEDs
Healthy = Blue
Degraded = Yellow
Critical = Red
System Boot = Yellow
NETWORK STATUS LEDs
Link = Solid Blue
Activity = Blinking Blue
BYP/BLK
(Bypass or Block (Disconnect) Mode)
Normal = No Light
Bypass or Block (Disconnect) = Orange
HDD LEDs
Disk Connected = Solid Blue
Read/Write Activity = Blinking Blue
Failed Disk = Orange
Steelhead Appliance Installation and Configuration Guide
35
Overview of the Steelhead Appliance
LAN/WAN LEDs
Series xx00 and xx10 Status Lights and Ports
Left LED
Link = Solid Green
Activity = Blinking Green
Right LED
GB = Orange
100 MB = Green
10 MB = No Light
Power Supply LEDs
Solid Green= Healthy power supply with AC power
connected.
Blinking Green= Unit is halted, but the power supplies
are still connected to AC power.
Solid Orange= AC power is not connected to this power
supply, but the unit is still powered on due to the other
power supply.
Solid Orange= Occurs when the power supply
automatically shuts off due to some error condition,
such as an overheat.
Blinking Orange= Indicates a power supply predictivefail condition, such as a fan failure. The power supply
may then shut itself off, which will change the LED to
solid orange. A log entry of this predictive-fail can be
viewed using the show hardware error-log all
command in the Riverbed Command-Line Interface.
No LED= No AC power connected.
Series xx00 and xx10 Status Lights and Ports
This section describes the status lights and ports for the Model xx00 and xx10.
Model 50, 100, 200, and 300
The following figure illustrates the Model 50, 100, 200, and 300.
Figure 1-10. Front Panel
36
Steelhead Appliance Installation and Configuration Guide
Series xx00 and xx10 Status Lights and Ports
Overview of the Steelhead Appliance
The following table summarizes the LED descriptions for the Model 50, 100, 200, and 300.
LED Button
Color
Condition
Description
Power
Green
ON
System On
WAN
Green
ON
Linked
Amber
FLASHING
WAN Port Activity
Green
ON
Linked
Amber
FLASHING
LAN Port Activity
Green
ON
Linked
Amber
FLASHING
Auxiliary Port Activity
Green
ON
Linked
Amber
FLASHING
Primary Port Activity
Hard Disk Drive
Green
FLASHING
Hard Disk Drive Activity
Bypass
Green
ON
Bypass mode
LAN
Auxiliary
Primary
Figure 1-11. Back Panel
Model 500, 510, 1000, 1010, 2001, and 2010
The following figure illustrates the Model 500, 510, 1000, 1010, 2001, and 2010.
Figure 1-12. Front Panel
Figure 1-13. Back Panel
Steelhead Appliance Installation and Configuration Guide
37
Overview of the Steelhead Appliance
Series xx20 Rev-A and Rev-B Status Lights and Ports
Model 3000, 3010, 5000, and 5010
The following figure illustrates the Model 3000, 3010, 5000, and 5010.
Figure 1-14. Front Panel
Figure 1-15. Back Panel
Series xx20 Rev-A and Rev-B Status Lights and Ports
This section describes the status lights and ports for the Model xx20 Rev-A and Rev-B platform.
38
Steelhead Appliance Installation and Configuration Guide
Series xx20 Rev-A and Rev-B Status Lights and Ports
Overview of the Steelhead Appliance
Model 520, 1020, 1520, and 2020 Rev-A
The following figure illustrates the Model 520, 1020, 1520, and 2020 Rev-A.
Figure 1-16. Front Panel
Figure 1-17. Back Panel
Model 520, 1020, 1520, and 2020 Rev-B
The following figure illustrates the Model 520, 1020, 1520, and 2020 Rev-B.
Figure 1-18. Front Panel Rev-B
Figure 1-19. Back Panel Rev-B
Steelhead Appliance Installation and Configuration Guide
39
Overview of the Steelhead Appliance
Series xx20 Rev-A and Rev-B Status Lights and Ports
The following table summarizes the LED descriptions for the Model 520, 1020, 1520, and 2020 Rev-A and
Rev-B.
LED Indicator
Description
Blue/amber system status indicator
The blue system status indicator lights up during normal system
operation. To stop the indicator from blinking, press the system status
indicator button on the front or back panel.
The amber system status indicator flashes when the system needs
attention due to a system problem.
Hard-drive indicator
The green hard-drive activity indicator flashes when the hard drives are
in use.
NIC1 and NIC2 link indicators
The indicators for the two integrated network adapters light if the
network adapters are connected to the network.
Power indicator
The green indicator in the center of the power button flashes if AC
power is available to the system, but the system is not powered on.
The green indicator is on when the system is powered on.
If the system is not connected to AC power, the green indicator is off.
Caution: The Model 520, 1020, 1520, and 2020 is not intended for use at workplaces with visual display units in
accordance with Part 2 of the Ordinance for Workplaces with Visual Display Units.
Model 3020, 3520, 5520, 6020, and 6120
The following figure illustrates the Model 3020, 3520, 5520, 6020, and 6120.
Figure 1-20. Front Panel
The following table summarizes the LED descriptions for the Model 3020, 3520, 5520, 6020, and 6120
40
Steelhead Appliance Installation and Configuration Guide
Bypass Card Status Lights
Overview of the Steelhead Appliance
LED Button
Color
Condition
Description
Power
Green
ON
System On
OFF
System Off
FLASHING
Hard Disk Drive Activity
OFF
No Activity
ON
Linked
FLASHING
LAN Activity
OFF
Disconnected
ON
System Overheat
OFF
System Normal
ON
One or more power module failures
OFF
System Normal
Hard Disk Drive
Network
Overheat
Error
Amber
Green
Red
Red
Figure 1-21. Back Panel
The following table summarizes the power supply LEDs for the Model 3020, 3520, 5520, 6020, and 6120.
LED Button
Color
Condition
Description
Power
Green
ON
Power supply running.
Amber
ON
Over voltage and current detected. Power
supply is shut down and only standby
power is enabled.
Bypass Card Status Lights
The Steelhead appliance is equipped with one of the following types of bypass interfaces depending on
your order. For adding and replacing bypass cards, see the Network Interface Card Installation Guide.
Steelhead Appliance Installation and Configuration Guide
41
Overview of the Steelhead Appliance
Bypass Card Status Lights
Bypass Cards Series xx50 Status Lights
The following section describes the status lights for the bypass cards supported on Series xx50 platforms. It
includes the following sections:
„
“Bypass Card Manufacturing Numbers Series xx50,” next
„
“Four-Port Copper Gigabit-Ethernet PCI-E Card” on page 43
„
“Two-Port SX Multimode Fiber Gigabit-Ethernet PCI-E Card” on page 44
„
“Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-E Card” on page 44
„
“Two-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E Card” on page 45
„
“Four-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E Card” on page 45
„
“Two-Port FX Multimode Fiber 100 Mbps PCI-E Card” on page 46
„
“Two-Port SR Multimode Fiber 10 Gigabit-Ethernet PCI-E Card” on page 47
„
“Two-Port LR Single Mode Fiber 10 Gigabit-Ethernet PCI-E Card” on page 47
Bypass Card Manufacturing Numbers Series xx50
The following section describes the bypass card manufacturing part numbers. To determine the
manufacturing part number for your bypass card, run the show hardware command in the CLI.
NICs for Series xx50
Manufacturing
Part #
Orderable Part #
Four-Port Copper GigE PCI-E Card
410-00103-01
NIC-01G0-4TX
Two-Port SX Multimode Fiber GigE PCI-E Card
410-00101-01
NIC-01G-2SX
Four-Port SX Multimode Fiber GigE PCI-E Card
410-00102-01
NIC-01G-4SX
Two-Port LX Single Mode Fiber GigE PCI-E Card
410-00105-01
NIC-01G-2LX
Four-Port LX Single Mode Fiber GigE PCI-E Card
410-00106-01
NIC-01G-4LX
Two-Port FX Multimode Fiber 100 Mbps PCI-E Card
410-00107-01
NIC-01M-2FX
Two-Port SR Multimode Fiber 10 GigE PCI-E Card
410-00302-01
NIC-10G-2SR
Two-Port LR Single Mode Fiber 10 GigE PCI-E Card
410-00301-01
NIC-10G-2LR
42
Steelhead Appliance Installation and Configuration Guide
Bypass Card Status Lights
Overview of the Steelhead Appliance
Four-Port Copper Gigabit-Ethernet PCI-E Card
The following section describes the Four-Port Copper Gigabit-Ethernet PCI-E (Four-Port Copper GigE PCIE) card (410-00103-01) status lights.
Figure 1-22. Four-Port Copper GigE PCI-E Card
The following table describes the Four-Port Copper GigE PCI-E card status and LED lights.
LED
Condition
Link / Act
Solid green on link, blinks on activity.
Bypass
Solid green when in bypass mode.
Disconnect
Solid green in disconnect mode.
The interface names for the NICs in the Steelhead Management Console and the CLI are a combination of
the slot number and the port pairs (lan<slot>_<pair>, wan<slot>_<pair>).
For example, if a four-port NIC is located in slot 1 of your system, the interface names are: lan1_0, wan1_0,
lan1_1, and wan1_1 respectively.
Figure 1-23. 3U Series xx50 Appliance Populated by a Four-Port Copper GigE PCI-E Card
Steelhead Appliance Installation and Configuration Guide
43
Overview of the Steelhead Appliance
Bypass Card Status Lights
Two-Port SX Multimode Fiber Gigabit-Ethernet PCI-E Card
The following section describes the Two-Port SX Multimode Fiber Gigabit-Ethernet PCI-E (Two-Port SX
Multimode Fiber GigE PCI-E) card (410-00101-01) status lights.
Figure 1-24. Two-Port SX Multimode Fiber GigE PCI-E Card
The following table describes the Two-Port SX Multimode Fiber GigE PCI-Ecard status and LED lights.
LED
Condition
Link
Solid yellow on link.
Activity
Blinks green on activity.
Bypass/Fail-to-Block (Disconnect)
Solid green in bypass mode. Solid yellow in
disconnect mode.
Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-E Card
The following section describes the Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-E (Four-Port SX
Multimode Fiber GigE PCI-E) card (410-00102-01) status lights.
Figure 1-25. Four-Port SX Multimode Fiber GigE PCI-E Card
The following table describes the Four-Port SX Multimode Fiber GigE PCI-E card status and LED lights.
LED
Condition
Link / Act
Solid green on link, blinks on activity.
Bypass/Fail-to-Block (Disconnect)
Solid green in bypass mode. Solid yellow in
disconnect mode.
44
Steelhead Appliance Installation and Configuration Guide
Bypass Card Status Lights
Overview of the Steelhead Appliance
Two-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E Card
Important: The LX Fiber PCI-E NICs require software v4.1.9, v5.0.7, or v5.5.2 or later.
The following section describes the Two-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E (Two-Port LX
Single Mode Fiber GigE PCI-E) card (410-00105-01) status lights.
Figure 1-26. Two-Port LX Single Mode Fiber GigE PCI-E Card
The following table describes the Two-Port LX Single Mode Fiber GigE PCI-E card status and LED lights.
LED
Condition
Link
Solid yellow on link.
Activity
Blinks green on activity.
Bypass/Fail-to-Block (Disconnect)
Solid green in bypass mode. Solid yellow in
disconnect mode.
Four-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E Card
The following section describes the Four-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E (Four-Port LX
Single Mode Fiber GigE PCI-E) card (410-00106-01) status lights.
Important: The LX Fiber PCI-E NICs require software v4.1.9, v5.0.7, or v5.5.2 or later.
Figure 1-27. Four-Port LX Single Mode Fiber GigE PCI-E Card
Steelhead Appliance Installation and Configuration Guide
45
Overview of the Steelhead Appliance
Bypass Card Status Lights
The following table describes the Four-Port LX Single Mode Fiber Gigabit-Ethernet PCI-E card status and
LED lights.
LED
Condition
Link / Act
Solid green on link, blinks on activity.
Bypass/Fail-to-Block (Disconnect)
Solid green in bypass mode. Solid yellow in
disconnect mode.
Two-Port FX Multimode Fiber 100 Mbps PCI-E Card
The following section describes the Two-Port FX Multimode Fiber 100 Mbps PCI-E card (410-00107-01)
status lights.
Figure 1-28. Two-Port FX Multimode Fiber 100 Mbps PCI-E Card
The interface names for the NICs in the Steelhead Management Console and the CLI are a combination of
the slot number and the port pairs (lan<slot>_<pair>, wan<slot>_<pair>).
For example, if a four-port NIC is located in slot 1 of your system, the interface names are: lan1_0, wan1_0,
lan1_1, and wan1_1 respectively.
Important: In a 1U appliance the LAN and WAN ports are numbered in ascending order (0, 1, 2, etc.) from left to right.
Important: In a 3U appliance the LAN and WAN ports are numbered in ascending order (0, 1, 2, etc.) from bottom to
top.
The following table describes the Two-Port FX Multimode Fiber 100 Mbps PCI-E card status and LED lights.
LED
Condition
Link
GB = Yellow
100 MB = Green
Activity
Blinks green on activity.
Bypass/Fail-to-Block (Disconnect)
Solid green in bypass mode. Solid yellow in
disconnect mode.
Note: Upon installation the Two-Port FX Multimode Fiber 100 Mbps PCI-E card defaults to 100 Mbps.
46
Steelhead Appliance Installation and Configuration Guide
Bypass Card Status Lights
Overview of the Steelhead Appliance
Two-Port SR Multimode Fiber 10 Gigabit-Ethernet PCI-E Card
The following section describes the Two-Port SR Multimode Fiber 10 Gigabit-Ethernet PCI-E (Two-Port SR
Multimode Fiber 10 GigE PCI-E) card (410-00302-01) status lights, for detailed information see, the Network
Interface Card Installation Guide.
Important: RiOS software v5.5.7, v6.0.2 or later is required to run the Two-Port SR Multimode Fiber 10 GigE PCI-E card.
Important: Interceptor software v2.0.2a, v1.2.0a or later is required to run the Two-Port SR Multimode Fiber 10 GigE
PCI-E card on Interceptor 9350 platforms. Interceptor software v2.0.3 is required to run four (4) Two-Port SR Multimode
Fiber 10 GigE PCI-E cards. In systems running versions prior to v2.0.3 the Two-Port SR Multimode Fiber 10 GigE PCIE card can be installed in slots 1, 2, and 3 of the Interceptor 9350. If slot 3 is populated with a Two-Port SR Multimode
Fiber 10 GigE PCI-E card then slot 4 must remain empty.
Important: It is not necessary to plug in the 12 volt connector of the Two-Port SR Multimode Fiber 10 GigE PCI-E card.
Figure 1-29. Two-Port SR Multimode Fiber 10 GigE PCI-E Card
The following table describes the Two-Port SR Multimode Fiber 10 GigE PCI-E card status and LED lights.
LED
Condition
Link
Solid green on link.
Activity
Blinks green on activity.
Bypass/Fail-to-Block (Disconnect)
Solid green in bypass mode. Solid yellow in
disconnect mode.
Two-Port LR Single Mode Fiber 10 Gigabit-Ethernet PCI-E Card
The following section describes the Two-Port LR Single Mode Fiber 10 Gigabit-Ethernet PCI-E (Two-Port
LR Single Mode Fiber 10 GigE PCI-E) card (410-00301-01) status lights.
Important: RiOS software v6.0.2 or later is required to run the Two-Port LR Single Mode Fiber 10 GigE PCI-E card.
Steelhead Appliance Installation and Configuration Guide
47
Overview of the Steelhead Appliance
Bypass Card Status Lights
Important: Interceptor software v2.0.4 or later is required to run the Two-Port LR Single Mode Fiber 10 GigE PCI-E card
on Interceptor 9350 platforms.
Figure 1-30. Two-Port LR Single Mode Fiber 10 GigE PCI-E Card
The interface names for the NICs in the Steelhead Management Console and the CLI are a combination of
the slot number and the port pairs (lan<slot>_<pair>, wan<slot>_<pair>).
For example, if a four-port NIC is located in slot 1 of your system, the interface names are: lan1_0, wan1_0,
lan1_1, and wan1_1 respectively.
Important: In a 1U appliance the LAN and WAN ports are numbered in ascending order (0, 1, 2, etc.) from left to right.
Important: In a 3U appliance the LAN and WAN ports are numbered in ascending order (0, 1, 2, etc.) from bottom to
top.
The following table describes the Two-Port LR Single Mode Fiber 10 GigE PCI-E card status and LED lights.
LED
Condition
Link
Solid green on link.
Activity
Blinks green on activity.
Bypass/Fail-to-Block (Disconnect)
Solid green in bypass mode. Solid yellow in
disconnect mode.
Bypass Cards Series xx00, xx10, and xx20 Status Lights
The following section describes the status lights for the bypass cards supported on Series xx00, xx10, and
xx20 platforms. It includes the following sections:
„
“Bypass Card Manufacturing Numbers Series xx00, xx10, and xx20,” next
„
“Two-Port Copper Fast-Ethernet PCI-X Card” on page 49
„
“Two-Port Copper Gigabit-Ethernet PCI-X Card-A” on page 50
„
“Two-Port Copper Gigabit-Ethernet PCI-X Card-B” on page 51
„
“Four-Port Copper Gigabit-Ethernet PCI-X Card” on page 52
„
“Six-Port Copper Gigabit-Ethernet PCI-X Card” on page 53
48
Steelhead Appliance Installation and Configuration Guide
Bypass Card Status Lights
Overview of the Steelhead Appliance
„
“Two-Port SX Multimode Fiber Gigabit-Ethernet PCI-X Card” on page 54
„
“Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-X Card” on page 54
Bypass Card Manufacturing Numbers Series xx00, xx10, and xx20
The following section describes the bypass card manufacturing part numbers. To determine the
manufacturing part number for your bypass card, run the show hardware command in the CLI.
Description
Old Manufacturing
Part #
New Manufacturing
Part #
Orderable Part #
Two-Port Copper Fast-Ethernet PCI-X
Card
CMP-00005
150-00001
Only on existing
models
Two-Port Copper Gigabit-Ethernet PCI-X
Card-A
CMP-00053
150-00004
CMP-NIC-2TX0
Two-Port Copper Gigabit-Ethernet PCI-X
Card-B
CMP-00028
150-00002
CMP-NIC-2TX1
Four-Port Copper Gigabit-Ethernet PCI-X
Card
CMP-00074
150-00006
CMP-NIC-4TX0
Six-Port Copper Gigabit-Ethernet PCI-X
Card
N/A
150-00011
CMP-NIC-6TX0
Two-Port SX Multimode Fiber GigabitEthernet PCI-X Card
CMP-00062
150-00062
CMP-NIC-2SX0
Four-Port SX Multimode Fiber GigabitEthernet PCI-X Card
CMP-00135
150-00010
CMP-NIC-4SX0
Two-Port Copper Fast-Ethernet PCI-X Card
The following section describes the Two-Port Copper Fast-Ethernet PCI-X card (150-00001) status lights.
Figure 1-31. Two-Port Copper Fast-Ethernet PCI-X Card
The following table describes the Two-Port Copper Fast-Ethernet PCI-X card status lights. The status lights
on the left correspond to the LAN link; the lights on the right correspond to the WAN link.
LED
Status
Description
Intercept/Bypass
(Activity)
FLASHING (GREEN)
Data Transmission is Active
SOLID (YELLOW)
LAN/WAN Link
DARK (OFF)
LAN/WAN Disconnect
Steelhead Appliance Installation and Configuration Guide
49
Overview of the Steelhead Appliance
Bypass Card Status Lights
LED
Status
Description
Status
(10/100)
FLASHING (YELLOW)
Bypass is Active
SOLID (YELLOW)
100 Mbps
DARK (OFF)
10 Mbps
To validate a Two-Port Copper Fast-Ethernet PCI-X Card (150-00001)
For the Two-Port Copper Fast-Ethernet PCI-X card (150-00001), the links are indicated by four status lights:
„
The bottom two amber lights indicate the card is not in bypass mode.
„
The top two green LEDs are lit if there is link.
„
The top two green LEDs flash if there is traffic flowing through them.
Removing the cable from the ports causes the green LEDs to turn dark (off). You must induce traffic to
ensure the card is working correctly.
To induce traffic, enter the following text at the system prompt
ping -c 1 -I <inpath_ipaddr> -b <broadcast_ip_addr>
For example (where the netmask is /24):
ping -c 1 -I 10.11.128.8 -b 10.11.128.255
This ping command creates a loop for testing the Steelhead appliance in isolation.
Two-Port Copper Gigabit-Ethernet PCI-X Card-A
The following section describes the Two-Port Copper Gigabit-Ethernet PCI-X (Two-Port Copper GigE PCIX) Card-A (150-00004) status lights.
Figure 1-32. Two-Port Copper GigE PCI-X Card-A
The following table describes the Two-Port Copper GigE PCI-X card-A status lights.
Status Lights
Signal
Description
Intercept/Bypass
SOLID
Normal State
OFF
Bypass or Power Off
ON
Heartbeat Time Out
FLASHING
Heartbeat Running
OFF
Heartbeat Disabled
Status
50
Steelhead Appliance Installation and Configuration Guide
Bypass Card Status Lights
Overview of the Steelhead Appliance
The following table describes the Two-Port Copper GigE PCI-X card-A, Light-Emitting Diode (LED) lights.
Status
Left LED
Right LED
Network Link Not Established
OFF
OFF
10 Mbps
(10 Base T)
Link
OFF
SOLID
Active
OFF
FLASHING
Link
SOLID
OFF
Active
FLASHING
OFF
Link
FLASHING
SOLID
Active
FLASHING
FLASHING
100 Mbps
(100 Base T)
1000 Mbps
(1000 Base T)
To validate a Two-Port Copper Gigabit-Ethernet PCI-X Card (150-00004)
For the Two-Port Copper Gigabit-Ethernet PCI-X card (150-00004), the links are indicated by the following
status lights:
„
Flashing green LEDs on the ports.
„
Heartbeat LED to the right of ports is lit and flashing amber.
„
Intercept/Bypass LED is solid.
Removing the cable when the card has a link causes the green LEDs on the ports to stop flashing.
Two-Port Copper Gigabit-Ethernet PCI-X Card-B
The following section describes the Two-Port Copper Gigabit-Ethernet PCI-X (Two-Port Copper GigE PCIX) Card-B (150-00002) status lights.
Figure 1-33. Two-Port Copper Gigabit-Ethernet PCI-X Card-B
The following table describes the Two-Port Copper GigE PCI-X Card-B, status lights.
Status Lights
Signal
Description
Intercept/Bypass
SOLID (GREEN)
Normal State
Heartbeat
OFF
Bypass or Power Off
Steelhead Appliance Installation and Configuration Guide
51
Overview of the Steelhead Appliance
Bypass Card Status Lights
The following table describes the Two-Port Copper GigE PCI-X Card-B, LED lights.
Status
Left LED
(Solid Green)
Right LED
(Solid Yellow)
Link
ACTIVE
LINK
Network Link Not Established
OFF
OFF
Four-Port Copper Gigabit-Ethernet PCI-X Card
The following section describes the Four-Port Copper Gigabit-Ethernet PCI-X (Four-Port Copper GigE PCIX) card (150-00006) status lights.
Figure 1-34. Four-Port Copper GigE PCI-X Card
The following table describes the Four-Port Copper GigE PCI-X card status and LED lights.
Interface
In-Path 0
Interface
In-Path 1
Bypass
Gig-E
1000 Mbps
(1000 Base T)
SOLID
SOLID
SOLID
100 Mbps
(100 Base T)
SOLID
SOLID
SOLID
Network Link
SOLID
SOLID
OFF
The interface names for the bypass cards in the Steelhead Management Console and the CLI are a
combination of the slot number and the port pairs (lan<slot>_<pair>, wan<slot>_<pair>).
52
Steelhead Appliance Installation and Configuration Guide
Bypass Card Status Lights
Overview of the Steelhead Appliance
For example, if a four-port bypass card is located in slot 4 of your system, the interface names are: lan4_0,
wan4_0, lan4_1, and wan4_1 respectively.
Figure 1-35. Model 3000 Rev-B Appliance Populated by Four-Port Copper Gigabit-Ethernet PCI-X Cards
Six-Port Copper Gigabit-Ethernet PCI-X Card
The following section describes the Six-Port Copper Gigabit-Ethernet PCI-X (Six-Port Copper GigE PCI-X)
card (150-00011) status lights. The Six-Port Copper GigE PCI-X card has full fail-to-block support.
Figure 1-36. Six-Port Copper GigE PCI-X Card
The following table describes the Six-Port Copper GigE PCI-X card status and LED lights.
LED
Condition
Link / Act
Solid green on link, blinks on activity.
Bypass
Solid green when in bypass mode.
Disconnect
Solid green in disconnect mode.
Steelhead Appliance Installation and Configuration Guide
53
Overview of the Steelhead Appliance
Bypass Card Status Lights
The interface names for the bypass cards are a combination of the slot number and the port pairs
(lan<slot>_<pair>, wan<slot>_<pair>). For example, if a four-port bypass card is located in slot 0 of your
appliance, the interface names are: lan0_0, wan0_0, lan0_1, and wan0_1 respectively. Alternatively, if the
bypass card is located in slot 1 of your appliance, the interface names are: lan1_0, wan1_0, lan1_1, and
wan1_1 respectively.
Two-Port SX Multimode Fiber Gigabit-Ethernet PCI-X Card
The following section describes the Two-Port SX Multimode Fiber Gigabit-Ethernet PCI-X (Two-Port SX
Multimode Fiber GigE PCI-X) card (150-00062) status lights.
Figure 1-37. Two-Port SX Multimode Fiber GigE PCI-X Card
The Bypass LED is ON (Green) if theTwo-Port SX Multimode Fiber GigE PCI-X card is in bypass mode; it
is OFF if the bypass card is in normal mode.
Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-X Card
The following section describes the Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-X (Four-Port SX
Multimode Fiber GigE PCI-X) card (150-00010) status lights.
Figure 1-38. Four-Port SX Multimode Fiber GigE PCI-X Card
The Bypass LED is ON (Green) if the Four-Port Copper GigE PCI-X card is in bypass mode; it is OFF if the
bypass card is in normal mode.
54
Steelhead Appliance Installation and Configuration Guide
Bypass Card Status Lights
Overview of the Steelhead Appliance
The Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-X card ships with a stabilizer bracket to ensure
proper and secure seating of the bypass card.
Figure 1-39. Four-Port SX Multimode Fiber Gigabit-Ethernet PCI-X Card with Stabilizer Bracket
Steelhead Appliance Installation and Configuration Guide
55
Overview of the Steelhead Appliance
56
Bypass Card Status Lights
Steelhead Appliance Installation and Configuration Guide
CHAPTER 2
Installing and Configuring the
Steelhead Appliance
This chapter describes how to install and configure the Steelhead appliance. This chapter includes the
following sections:
„
“Choosing a Network Deployment” on page 57
„
“Checking Your Inventory” on page 59
„
“Preparing Your Site for Installation” on page 60
„
“Completing the Configuration Checklist” on page 60
„
“Powering On the Steelhead Appliance” on page 63
„
“Connecting to the Steelhead Appliance” on page 64
„
“Configuring In-Path Steelhead Appliances” on page 65
„
“Configuring Out-of-Path Steelhead Appliances” on page 74
Important: Please read and follow the safety guidelines described in the Safety and Compliance Guide. Failure to follow
these safety guidelines can result in damage to the equipment.
Choosing a Network Deployment
The Steelhead appliance is typically deployed on a LAN, with communication between appliances taking
place over a private WAN or VPN. Because optimization between Steelhead appliances typically takes place
over a secure WAN, it is not necessary to configure company firewalls to support Steelhead specific ports.
Note: If there are one or more firewalls between two Steelhead appliances, ports 7800 and 7810, must be passed through
firewall devices located between the pair of Steelhead appliances. Also, SYN and SYN/ACK packets with the TCP
option 76 must be passed through firewalls for auto-discovery to function properly.
For optimal performance, you should seek to minimize latency between Steelhead appliances and their
respective clients and servers. Steelhead appliances should be as close as possible to your network end
points (client-side Steelhead appliances should be as close to your clients as possible and server-side
Steelhead appliances should be as close to your servers as possible).
Steelhead Appliance Installation and Configuration Guide
57
Installing and Configuring the Steelhead Appliance
Choosing a Network Deployment
Ideally, Steelhead appliances only optimize traffic that is initiated or terminated at its local site. The best and
easiest way to achieve this is to deploy the Steelhead appliances where the LAN connects to the WAN, and
not where any LAN-to-LAN or WAN-to-WAN traffic can pass through (or be redirected to) the Steelhead
appliance.
For detailed information about your deployment options and best practices for deploying Steelhead
appliances, see the Steelhead Appliance Deployment Guide.
Before you begin the installation and configuration process, you need to select a network deployment:
„
Physical In-Path - In a physical in-path deployment, the Steelhead appliance is physically in the direct
path between clients and servers. The clients and servers continue to see client and server Internet
Protocol (IP) addresses. In-path designs are the simplest to configure and manage, and the most
common type of Steelhead appliance deployment, even for large sites.
Figure 2-1. Physical In-Path Deployment
„
Virtual In-Path - In a virtual in-path deployment, a redirection mechanism (such as WCCP, PBR, or
Layer-4 switching) is used to place the Steelhead appliance virtually in the path between clients and
servers.
Figure 2-2. Logical In-Path: WCCP Deployment
58
Steelhead Appliance Installation and Configuration Guide
Checking Your Inventory
„
Installing and Configuring the Steelhead Appliance
Out-of-Path - In an out-of-path deployment, the server-side Steelhead appliance is not in the direct
path between the client and the server. In an out-of-path deployment, the Steelhead appliance acts as a
proxy. This type of deployment might be suitable for locations where physical in-path or virtual inpath configurations are not possible.
Figure 2-3. Out-of-Path Deployment
Checking Your Inventory
Your shipping carton contains the following items:
„
The Steelhead appliance
„
One standard ethernet straight-through cable
„
One standard ethernet crossover cable
„
One serial null-modem cable
„
One or two power cables (depending on your order)
„
One Phillips Screwdriver
„
Left and right rails for the Model 3000, 3010, 3020, 3520, 5000, 5010, 5520, 6020, and 6120
Note: Rails are pre-installed on the Series xx50 platforms.
„
One mounting kit
„
Documentation kit
If any items are damaged or missing, notify Riverbed Support at
https://support.riverbed.com for replacement or repair.
Steelhead Appliance Installation and Configuration Guide
59
Installing and Configuring the Steelhead Appliance
Preparing Your Site for Installation
Preparing Your Site for Installation
The Steelhead appliance is completely assembled with all the equipment parts in place and securely
fastened.
Before you install the Steelhead appliance make sure your site meets the following requirements:
„
A standard electronic environment where the ambient temperature does not exceed 35º C (95º F) and
the relative humidity does not exceed 85% (non-condensing). For detailed information, see
“Environmental Specifications” on page 27.
„
Ethernet connections available within the standard Ethernet limit.
„
Space on a two or four-post 19-inch rack. (The desktop Model 50, 100, 200, 250, 300, or 550 does not
require a rack.) For details about installing the Steelhead appliance to a rack, see the Rack Installation
Guide or the printed instructions that were shipped with the system.
„
A clean power source dedicated to computer devices and other electronic equipment.
„
A standard 19-inch Telco-type mounting rack.
Note: Riverbed recommends you use a four-post mounting rack for the 3U systems.
Caution: The Model 50, 100, 200, and 300 is designed for the desktop. If you install the Model 50, 100, 200, or 300 in a
rack, do not place equipment on top of the unit; it causes restricted airflow and can damage the equipment or reduce
performance.
Note: If your rack requires special mounting screws, contact your rack manufacturer.
Completing the Configuration Checklist
Before you begin, consult the Rack Installation Guide for detailed information about how to install your
model to a rack.
60
Steelhead Appliance Installation and Configuration Guide
Completing the Configuration Checklist
Installing and Configuring the Steelhead Appliance
The following checklist lists the parameters you specify to complete the initial configuration of the
Steelhead appliance. Be prepared to provide values for the parameters listed in the following checklist.
Appliance
Parameter
Steelhead Appliance (the
Primary Interface)
Host name
Your Value
IP address
Netmask
Default gateway (the WAN
gateway)
DNS IP address
Domain name for the system
Administrator password
SMTP server IP address
Events and failures notification
email address
Primary interface speed
Primary interface duplex
In-Path Deployments
In-Path interface IP address
In-Path Netmask
In-path gateway
In-path: LAN interface speed
In-path: LAN interface duplex
In-path: WAN interface speed
In-path: WAN interface duplex
Note: The Steelhead appliance automatically negotiates duplex settings. If one end of the link is set to auto-negotiate
and the other end of the link is not set to auto-negotiate, the duplex settings on the network device default to halfduplex. This duplex mismatch passes traffic, but it causes late collisions and results in degraded optimization. To
achieve maximum optimization set the network devices to 100 and full.
Steelhead Appliance Installation and Configuration Guide
61
Installing and Configuring the Steelhead Appliance
Completing the Configuration Checklist
Steelhead Appliance Ports
The following table summarizes the ports used to connect the Steelhead appliance to your network.
Port
Description
Console
Connects the serial cable to a terminal device. You establish a serial connection to a
terminal emulation program for console access to the configuration wizard and the
Steelhead CLI.
Primary
(PRI)
The management interface that connects the Steelhead appliance to a LAN switch. This
management interface enables you to connect to the Management Console and the
Steelhead CLI.
Tip: The Primary and Auxiliary ports cannot share the same network subnet.
Tip: The Primary and in-path interfaces can share the same subnet.
Tip: You must use the Primary port on the server-side for out-of-path deployments.
Auxiliary (AUX)
An optional port that provides an additional management interface for a secondary
network. You cannot have the Primary and Auxiliary ports on the same subnet.
Tip: The Auxiliary and in-path interfaces cannot share the same network subnet.
Tip: You cannot use the Auxiliary port for out-of-path Steelhead appliances.
WAN
Connects the WAN port of the Steelhead appliance and the WAN router using a crossover
cable.
LAN
Connects the LAN port of the Steelhead appliance and the LAN switch using a straightthrough cable.
Note: If the Steelhead appliance is deployed between two switches, both the LAN and
WAN ports must be connected with straight-through cables.
Bypass Card Interface Naming Conventions
The interface names for the bypass cards are a combination of the slot number and the port pairs
(<slot>_<pair>, <slot>_<pair>). For example, if a four-port bypass card is located in slot 0 of your appliance,
the interface names are: lan0_0, wan0_0, lan0_1, and wan0_1 respectively. Alternatively, if the bypass card
is located in slot 1 of your appliance, the interface names are: lan1_0, wan1_0, lan1_1, and wan1_1
respectively.
For detailed information about installing additional bypass cards, see the Network Interface Card Installation
Guide.
62
Steelhead Appliance Installation and Configuration Guide
Powering On the Steelhead Appliance
Installing and Configuring the Steelhead Appliance
Powering On the Steelhead Appliance
The following section describes how to connect the AC power and how to power on the system.
Caution: In European electrical environments you must ground (earth) the Green/Yellow tab on the power cord. If you
do not ground the Green/Yellow tab, it can cause an electrical shock.
To power on the system
1. If your system has a master power switch, make sure the system and master power switch is in the off
position on the rear of the Steelhead appliance.
2. Plug the AC power cord into the Steelhead appliance.
Note: If your model has multiple power supplies, you must plug in all the power cords or you will hear an alarm.
Important: The Model 50, 100, 200, or 300 is designed for the desktop. If you install the Model 50, 100, 200, or 300 in a
rack do not place equipment on top of the unit; it causes restricted airflow and can cause damage to the equipment or
reduce performance.
Figure 2-4. Connecting the AC Power
3. Plug the AC power cord into an uninterrupted AC power source.
4. If your system has a power button, press in the system and master power switch on the Steelhead
appliance for 4-6 seconds. If the Steelhead appliance does not immediately power on, press the system
power switch again.
5. Check the status lights on the Steelhead appliance. For detailed information about the status lights, see
“Series xx50 Status Lights and Ports” on page 29.
Note: The hard disk drives take about 2-5 minutes to boot.
Steelhead Appliance Installation and Configuration Guide
63
Installing and Configuring the Steelhead Appliance
Connecting to the Steelhead Appliance
Connecting to the Steelhead Appliance
To access the configuration wizard and the Steelhead CLI, you establish a serial connection using a terminal
emulator program.
To connect to the Steelhead appliance
1. Plug the serial cable into the Console port and a terminal.
Figure 2-5. Connecting to the Steelhead Appliance
2. Start your terminal emulation program, such as Tera Term Pro. The terminal device must have the
following settings:
„
Baud rate: 9600 bps
„
Data bits: 8
„
Parity: none
„
Stop bits: 1
„
vt100 emulation
„
No flow control
Note: If you are using the Steelhead appliance with a terminal server, the terminal server must use hardware flow
control for the port connected to the Steelhead appliance.
Tip: Riverbed recommends you connect the console port to a device that logs output. Although this is not a
requirement, it can help you to identify problems with the system.
3. Log in as administrator user (admin) and enter the default password (password). For example:
login as: admin
Sent username "admin"
password: password
The configuration wizard automatically starts after you have entered the login and default password.
After you have established a connection, you configure the Steelhead appliance using the configuration
wizard:
„
For in-path configurations, see “Configuring In-Path Steelhead Appliances” on page 65.
„
For out-of-path configurations, see “Configuring Out-of-Path Steelhead Appliances” on page 74.
64
Steelhead Appliance Installation and Configuration Guide
Configuring In-Path Steelhead Appliances
Installing and Configuring the Steelhead Appliance
Configuring In-Path Steelhead Appliances
In a physical in-path deployment, the Steelhead appliance is physically in the direct path between clients
and servers. The clients and servers continue to see client and server IP addresses. Physical in-path
configurations are suitable for any location where the total bandwidth is within the limits of the installed
Steelhead appliance. For a detailed figure, see “Choosing a Network Deployment” on page 57.
For detailed information about in-path deployments, see the Steelhead Appliance Deployment Guide.
Avoiding Duplex Mismatch
Before you begin the configuration process, ensure that your LAN and WAN interfaces have the same
duplex settings.
The Steelhead appliance automatically negotiates duplex settings. If one end of the link is set to autonegotiate and the other end of the link is not set to auto-negotiate, the duplex settings on the network device
default to half-duplex. This duplex mismatch passes traffic, but it causes late collisions and results in
degraded optimization. To achieve maximum optimization set your network devices to 100 and full.
To avoid duplex mismatches, manually configure the duplex settings on your:
„
router
„
swtich
„
Steelhead appliance WAN interface
„
Steelhead appliance LAN interface
„
Steelhead appliance Primary interface
The following can be signs of a duplex mismatch:
„
On the Reports > Diagnostics > System Logs page, you see errors for sends, receives, CRC, and short
sends.
„
You cannot connect to an attached device.
„
You can connect to a device when you choose auto-negotiation, but you cannot connect to that same
device when you manually set the speed or duplex.
„
Slow performance across the network.
For detailed information about checking for duplex mismatches, see Chapter 3, “Troubleshooting.”
The Configuration Wizard
The configuration wizard automatically starts when you log into the CLI for the first time.
The following rules apply to the configuration wizard:
„
Press Enter to enter the default value.
„
Press '?' for help.
„
Press Ctrl-B to go back to the previous step.
If you quit the configuration wizard, you can restart it from the Steelhead CLI. You must be in configuration
mode to restart the configuration wizard.
Steelhead Appliance Installation and Configuration Guide
65
Installing and Configuring the Steelhead Appliance
Configuring In-Path Steelhead Appliances
To restart the configuration wizard
„
Enter the following set of commands at the system prompt:
> enable
# configure terminal
(config) # configuration jump-start
For detailed information about the CLI, see the Riverbed Command-Line Interface Reference Manual.
To configure the Steelhead appliance in an in-path deployment
1. If you have a Steelhead Central Management Console (CMC) appliance installed in your network to
manage multiple Steelhead appliances you can use it to automatically configure them.
Do you want to auto-configure using a CMC? no
If you answer yes, you are prompted for the CMC host name or IP address. The host name or IP
address is used to contact the CMC. The default value is set to riverbedcmc. If you enter no, the wizard
continues.
Tip: If you mistakenly answer yes, to return to the wizard from the CLI, enter the configuration jump-start command
from configuration mode. For detailed information, see the “To restart the configuration wizard” on page 66.
2. To start the configuration wizard, enter yes at the system prompt. For example:
Do you want to use the configuration wizard for initial configuration? yes
3. Complete the configuration wizard steps on the client-side and the server-side Steelhead appliances as
described in the following table.
Wizard Prompt
Description
Example
Step 1: Host name?
Enter the host name for the Steelhead
appliance.
Step 1: hostname? amnesiac
Step 2: Use DHCP on the
primary interface?
You are given the option to enable the
DHCP to automatically assign an IP
address to the primary interface for
the Steelhead appliance.
Step 2: Use DHCP? no
Riverbed recommends that you do not
set DHCP.
The default value is no.
Step 3: Primary IP address?
Enter the IP address for the Steelhead
appliance.
Step 3: Primary IP address?
Step 4: Netmask?
Enter the netmask address.
Step 4: Netmask? 255.255.0.0
Step 5: Default gateway?
Enter the default gateway for the
Steelhead appliance.
Step 5: Default gateway? 10.0.0.1
Step 6: Primary DNS server?
Enter the primary DNS server IP
address.
Step 6: Primary DNS server?
66
10.10.10.6
10.0.0.2
Steelhead Appliance Installation and Configuration Guide
Configuring In-Path Steelhead Appliances
Installing and Configuring the Steelhead Appliance
Wizard Prompt
Description
Example
Step 7: Domain name?
Enter the domain name for the
network where the Steelhead
appliance is to reside.
Step 7: Domain name? example.com
If you set a domain name, you can
enter host names in the system
without the domain name.
Step 8: Admin password?
Riverbed strongly recommends that
you change the default administrator
password at this time. The password
must be a minimum of 6 characters.
Step 8: Admin password? xxxyyy
The default administrator password is
password.
Step 9: SMTP server?
Enter the SMTP server. External DNS
and external access for SMTP traffic is
required for email notification of
events and failures to function.
Step 9: SMTP server? natoma
Important: Make sure you provide a
valid SMTP server to ensure email
notifications for events and failures.
Step 10: Notification email
address?
Enter a valid email address to which
notification of events and failures are
to be sent.
Step 10: Notification email
Step 11: Set the primary interface
speed?
Enter the speed on the primary
interface (that is, the Steelhead
appliance). Make sure this value
matches the settings on your router or
switch.
Step 11: Set the primary interface
speed? [auto] auto
address? example@xample.com
The default value is auto.
Step 12: Set the primary interface
duplex?
Enter the duplex mode on the primary
interface. Make sure this value
matches the settings on your router or
switch. The default value is auto.
Step 12: Set the primary interface
Step 13: Would you like to
activate the in-path
configuration?
Enter yes at the system prompt to
configure in-path support. An in-path
configuration is a configuration in
which the Steelhead appliance is in
the direct path of the client and server.
Step 13: Would you like to
duplex? [auto] auto
activate the in-path
configuration? yes
For detailed information about inpath configurations, see the Steelhead
Appliance Deployment Guide.
Step 14: In-Path IP address?
Enter the in-path IP address for the
Steelhead appliance.
Step 14: In-Path IP address?
Step 15: In-Path Netmask?
Enter the in-path netmask address.
Step 15: In-Path Netmask?
255.255.0.0
Step 16: In-Path Default
gateway?
Enter the in-path default gateway (the
WAN gateway).
Step 16: In-Path Default Gateway?
Step 17: Set the in-path: LAN
interface speed?
Enter the in-path, LAN interface
speed. Make sure this value matches
the settings on your router or switch.
Step 17: Set the in-path: LAN
10.11.11.6
10.11.11.16
interface speed? [auto] auto
The default value is auto.
Steelhead Appliance Installation and Configuration Guide
67
Installing and Configuring the Steelhead Appliance
Configuring In-Path Steelhead Appliances
Wizard Prompt
Description
Example
Step 18: Set the in-path: LAN
interface duplex?
Enter the in-path, LAN duplex. Make
sure this value matches the settings on
your router or switch.
Step 18: Set the in-path: LAN
interface duplex? [auto] auto
The default value is auto.
Step 19: Set the in-path: WAN
interface speed?
Enter the in-path, WAN interface
speed. Make sure this value matches
the settings on your router or switch.
Step 19: Set the in-path: WAN
interface speed? [auto] auto
The default value is auto.
Step 20: Set the in-path: WAN
interface duplex?
Enter the in-path, WAN duplex speed.
Make sure this value matches the
setting on your router or switch.
Step 20: Set the in-path: WAN
interface duplex? [auto] auto
The default value is auto.
4. The system confirms your settings.
You have entered the following information:
1. Hostname: amnesiac
2. Use DHCP on primary interface: no
3. Primary IP address: 10.10.10.6
4. Netmask: 255.255.0.0
5. Default gateway: 10.0.0.1
6. Primary DNS server: 10.0.0.2
7. Domain name: example.com
8. Admin password: xxxyyy
9. SMTP server: natoma
10. Notification email address: example@example.com
11. Set the primary interface speed: auto
12. Set the primary interface duplex: auto
13. Would you like to activate the in-path configuration: yes
14. In-Path IP address: 10.11.11.6
15. In-Path Netmask: 255.255.0.0
16. In-Path Default gateway: 10.11.11.16
17. Set the in-path:LAN interface speed: auto
18. Set the in-path:LAN interface duplex: auto
19. Set the in-path:WAN interface speed: auto
20. Set the in-path:WAN interface duplex: auto
To change an answer, enter the step number to return to.
Otherwise hit <enter> to save changes and exit.
Choice:
The Steelhead appliance configuration wizard automatically saves your configuration settings.
5. To log out of the system, enter the following command at the system prompt:
amnesiac> exit
68
Steelhead Appliance Installation and Configuration Guide
Configuring In-Path Steelhead Appliances
Installing and Configuring the Steelhead Appliance
Connecting the Steelhead Appliance to Your Network
You use a standard ethernet straight-through and crossover cables to connect to your network in an in-path
configuration. Make sure you use the correct cables to establish your network connections:
„
Straight-through cables - Primary and LAN ports on the appliance to the LAN switch.
„
Cross-over cable - WAN port on the appliance to the WAN router.
To connect to your network
1. Plug the straight-through cable into the Primary port of the Steelhead appliance and the LAN switch.
This can be any port on your LAN switch configured to connect to a host.
Figure 2-6. Connecting the Primary Port to the LAN Switch
2. Identify the straight-through cable that connects your LAN switch to your WAN router. Unplug the end
connected to the WAN router.
Figure 2-7. Disconnecting the WAN Router
3. Plug the straight-through cable that you disconnected from the WAN router into the LAN port of the
Steelhead appliance.
Figure 2-8. Connecting the LAN Switch to the LAN Port
Steelhead Appliance Installation and Configuration Guide
69
Installing and Configuring the Steelhead Appliance
Configuring In-Path Steelhead Appliances
4. Using the provided crossover cable, plug the cable into the WAN port of the Steelhead appliance and
the WAN router. This must be a crossover cable.
Figure 2-9. Connecting the WAN Port to the WAN Router
Note: If you have a four or six-port bypass card, repeat Step 1 through Step 4. For detailed information about installing
additional bypass cards, see the Network Interface Card Installation Guide.
You can now optimize WAN traffic using the Steelhead appliance.
Verifying Your Connections
Perform the following tasks to verify that you have properly connected the Steelhead appliance.
To verify your connections
1. Verify that you can connect to the CLI using one of the following devices:
„
An ASCII terminal or emulator that can connect to the serial console. It must have the following
settings: 9600 baud, 8 bits, no parity, 1 stop bit, vt100, and no flow control.
„
A computer with a Secure Shell (ssh) client that is connected to the Steelhead appliance Primary port.
2. At the system prompt, enter the following command:
ssh admin@host.domain
or
ssh admin@ipaddress
3. You are prompted for the administrator password. This is the password you set in the configuration
wizard.
4. At the system prompt, ping from the management interface.
ping -I <primary-IP-address> <primary-default-gateway>
5. At the system prompt, ping from the in-path default gateway.
ping -I <in-path-IP-address> <in-path-default-gateway>
70
Steelhead Appliance Installation and Configuration Guide
Configuring In-Path Steelhead Appliances
Installing and Configuring the Steelhead Appliance
Figure 2-10. Resolving IP Connectivity
Steelhead Appliance Installation and Configuration Guide
71
Installing and Configuring the Steelhead Appliance
Configuring In-Path Steelhead Appliances
Connecting to the Management Console
After you configure the Steelhead appliance, you can check and modify your configuration settings and
view performance reports and system logs in the Management Console. You can connect to the
Management Console through any supported Web browser.
To connect to the Management Console you must know the host, domain, and administrator password that
you assigned in the configuration wizard.
Note: Cookies and JavaScript must be enabled in your Web browser.
To connect to the Management Console
1. Enter the URL for the Management Console in the location box of your Web browser:
protocol://host.domain
–
protocol is http or https. HTTPS uses the SSL protocol to ensure a secure environment. If you use
HTTPS to connect you are prompted to inspect and verify the SSL key.
–
host is the host name you assigned to the Steelhead appliance during initial configuration. If your
DNS server maps that IP address to a name, you can specify the DNS name.
–
domain is the full domain name for the Steelhead appliance.
Note: Alternatively, you can specify the IP address instead of the host and domain.
The Management Console appears, displaying the Login page.
Figure 2-11. Login Page
72
Steelhead Appliance Installation and Configuration Guide
Configuring In-Path Steelhead Appliances
Installing and Configuring the Steelhead Appliance
2. In the Username text box, type the user login: admin, monitor, a login from a RADIUS or TACACS+
database, or any local accounts created using the Role-Based Accounts feature. The default login is
admin.
Users with administrator (admin) privileges can configure and administer the Steelhead appliance.
Users with monitor (monitor) privileges can view the Steelhead appliance reports, user logs, and
change their own password. A monitor user cannot make configuration changes.
3. In the Password text box, type the password you assigned in the configuration wizard of the Steelhead
appliance. (The Steelhead appliance is shipped with the default password: password.)
4. Click Log In to display the Home page.
The Home page summarizes the current status of your system.
Verifying Your Configuration
Perform the following tasks to verify that you have properly configured the Steelhead appliance.
If you selected auto-negotiation (auto) for your in-path and primary interfaces, you must make sure that
the Steelhead appliance negotiated the speed and duplex at the rate your devices expect. For example,
ensure settings are auto on the LAN and WAN and 100 FULL on the LAN and WAN. You can verify your
speed and duplex settings in the Configure > Networking > Inpath0_0 page and the Configure >
Networking > Base Interfaces page of the Management Console.
To check for speed and duplex errors
1. In the Management Console, go to the Reports >Diagnostics > System Logs page.
2. Check the system logs for duplex or speed errors.
3. Go to the Reports > Networking > Current Connections page.
4. Check for duplex and speed errors.
5. If you find errors, change the speed and duplex settings on your LAN and WAN interface in the
Configure > Networking > Inpath 0_0 page.
To verify optimization in an in-path configuration
1. Go to the Reports > Optimization > Bandwidth Optimization in the Management Console to verify
optimization.
2. Map a remote drive on a client machine.
3. Drag and drop a 1 MB file from the client to the remote server.
Ensure that the server is located across the WAN.
4. Drag and drop the 1 MB file again.
Performance improves significantly.
Steelhead Appliance Installation and Configuration Guide
73
Installing and Configuring the Steelhead Appliance
Configuring Out-of-Path Steelhead Appliances
Configuring Out-of-Path Steelhead Appliances
In an out-of-path deployment, the Steelhead appliance is not in the direct path between the client and the
server. Servers see the IP address of the server-side Steelhead appliance rather than the client-side IP
address.
An out-of-path configuration is suitable for data center locations where physical in-path or logical in-path
configurations are not possible. For a detailed figure, see “Choosing a Network Deployment” on page 57.
For detailed information about out-of-path deployments, see the Steelhead Appliance Deployment Guide.
Before You Begin
Before you begin the configuration process, check the duplex and speed settings on the router and switch
that connects to your Steelhead appliance. Make sure the settings on the router, switch, and the Steelhead
appliance match. For example, ensure settings are auto speed and duplex on the LAN and WAN or 100
FULL on the LAN and WAN. If the settings do not match, optimization might be degraded.
The configuration wizard automatically starts when you log into the Steelhead CLI for the first time. For
detailed information about the configuration wizard and how to restart it, see “The Configuration Wizard”
on page 65.
Important: In an out-of-path configuration, the client-side Steelhead appliance is configured as an in-path device and
the server-side Steelhead appliance is configured as an out-of-path device.
To configure the server-side Steelhead appliance in an out-of-path deployment
1. If you have a Central Management Console appliance installed in your network to manage multiple
Steelhead appliances you can use it to automatically configure them.
Do you want to auto-configure using a CMC? no
If you enter yes, you are prompted for the CMC host name or IP address. The host name or IP address
is used to contact the CMC. The default value is set to riverbedcmc. If you enter no, the wizard
continues.
2. To start the configuration wizard, enter yes at the system prompt. For example:
Do you want to use the configuration wizard for initial configuration? yes
Tip: If you mistakenly answer no, to return to the wizard from the CLI, enter the configuration jump-start command
from configuration mode. For detailed information, see the “To restart the configuration wizard” on page 66.
74
Steelhead Appliance Installation and Configuration Guide
Configuring Out-of-Path Steelhead Appliances
3.
Installing and Configuring the Steelhead Appliance
Complete the configuration wizard steps on the client-side and server-side.
Wizard Prompt
Description
Example
Step 1: Host name?
Enter the host name for the Steelhead
appliance.
Step 1: Hostname? amnesiac
Step 2: Use DHCP on the
primary interface?
You are given the option to enable the
DHCP to automatically assign an IP
address to the primary interface for
the Steelhead appliance.
Step 2: Use DHCP? no
Riverbed recommends that you do not
set DHCP.
The default value is no.
Step 3: Primary IP address?
Enter the IP address for the Steelhead
appliance.
Step 3: Primary IP address?
10.10.10.6
Step 4: Netmask?
Enter the netmask address.
Step 4: Netmask? 255.255.0.0
Step 5: Default gateway?
Enter the default gateway for the
Steelhead appliance.
Step 5: Default gateway?
10.0.0.1
Step 6: Primary DNS server?
Enter the primary DNS server IP
address.
Step 6: Primary DNS server?
10.0.0.2
Step 7: Domain name?
Enter the domain name for the
network where the Steelhead
appliance is to reside.
Step 7: Domain name? example.com
If you set a domain name, you can
enter host names in the system
without the domain name.
Step 8: Admin password?
Riverbed strongly recommends that
you change the default administrator
password at this time. The password
must be a minimum of 6 characters.
Step 8: Admin password? xxxyyy
The default administrator password is
password.
Step 9: SMTP server?
Enter the SMTP server. External DNS
and external access for SMTP traffic is
required for email notification of
events and failures to function.
Step 9: SMTP server? natoma
Important: Make sure you provide a
valid SMTP server to ensure email
notifications for events and failures.
Step 10: Notification email
address?
Enter a valid email address to receive
email notification of events and
failures.
Step 10: Notification email
address? example@example.com
Step 11: Set the primary interface
speed?
Enter the speed on the primary
interface (that is, the Steelhead
appliance). Make sure this value
matches the settings on your router or
switch.
Step 11: Set the primary
interface speed? [auto] auto
The default value is auto.
Steelhead Appliance Installation and Configuration Guide
75
Installing and Configuring the Steelhead Appliance
Configuring Out-of-Path Steelhead Appliances
Wizard Prompt
Description
Example
Step 12: Set the primary interface
duplex?
Enter the duplex mode on the primary
interface, type a value at the system
prompt. Make sure this value matches
the settings on your router or switch.
The default value is auto.
Step 12: Set the primary
interface duplex? [auto] auto
Step 13: Would you like to
activate the in-path
configuration?
Enter no at the system prompt to
configure in-path support. An in-path
configuration is a configuration in
which the Steelhead appliance is in
the direct path of the client and server.
Step 13: Would you like to
activate the in path
configuration? no
For detailed information about inpath configurations, see the Steelhead
Appliance Deployment Guide.
Step 14: Would you like to
activate the out-of-path
configuration?
Enter yes at the system prompt to
configure out-of-path support. An
out-of-path configuration is a
configuration in which the Steelhead
appliance is not in the direct path of
the client and server.
Step 14: Would you like to
activate the out-of-path
configuration? [no] yes
For detailed information about inpath configurations, see the Steelhead
Appliance Deployment Guide.
The system confirms your settings.
You have entered the following information:
Step 1: Hostname? amnesiac
Step 2: Use DHCP on primary interface? no
Step 3: Primary IP address? 10.10.10.6
Step 4: Netmask? 255.255.0.0
Step 5: Default gateway? 10.0.0.1
Step 6: Primary DNS server? 10.0.0.2
Step 7: Domain name? example.com
Step 8: Admin password? xxxyyyy
Step 9: SMTP server? natoma
Step 10: Notification email address? example@example.com
Step 11: Set the primary interface speed? auto
Step 12: Set the primary interface duplex? auto
Step 13. Would you like to activate the in-path configuration: no
Step 14: Would you like to activate the out-of-path configuration? yes
To change an answer, enter the step number to return to.
Otherwise hit <enter> to save changes and exit.
The Steelhead appliance configuration wizard automatically saves your configuration settings.
4. To log out of the system, enter the following command at the system prompt:
amnesiac> exit
76
Steelhead Appliance Installation and Configuration Guide
Configuring Out-of-Path Steelhead Appliances
Installing and Configuring the Steelhead Appliance
Connecting the Steelhead Appliance to Your Network
You use a standard ethernet straight-through cable to connect the Primary port of the Steelhead appliance
to the LAN switch in an out-of-path configuration.
To connect the Steelhead appliance to your network
„
Plug the straight-through cable into the Primary port of the Steelhead appliance and the LAN switch.
This can be any port on your LAN switch which is configured to connect to a host.
Figure 2-12. Connecting the Primary Port and LAN Switch
Configuring the Client-Side Appliance
In an out-of-path configuration, you configure the client-side Steelhead appliance in the same way as an inpath configuration. For optimization to occur, you must define a fixed-target rule on the client-side
Steelhead appliance that points to the out-of-path, server-side Steelhead appliance. You can define fixedtarget rules using the Management Console or the CLI.
For detailed information about the Management Console, see the Steelhead Management Console User’s Guide.
For detailed information about the CLI, see the Riverbed Command-Line Interface Reference Manual.
The following procedures describe how to configure in-path rules using the Management Console.
To configure the client-side Steelhead appliance
1. Follow the procedures for an in-path configuration. For details, see “Configuring In-Path Steelhead
Appliances” on page 65.
2. Connect to the Management Console. For details, see “Connecting to the Management Console” on
page 72.
Steelhead Appliance Installation and Configuration Guide
77
Installing and Configuring the Steelhead Appliance
Configuring Out-of-Path Steelhead Appliances
3. Go to the Configure > Optimization > In-path Rules page.
Figure 2-13. In-Path Rules Page
4. Under In-path Rules, click Add a New In-Path Rule to display the in-path rule configuration options.
5. For Type, select Fixed-Target from the drop-down list.
6. For Target Appliance IP Address, specify the IP address and port number for the peer Steelhead
appliance.
Use the following format: 0.0.0.0/0. The IP address must be the Primary Port IP address on the target
Steelhead appliance. The default port is 7810.
7. Optionally, if you have a backup, out-of-path, Steelhead appliance in your system (that is, failover
support): for Backup Appliance IP Address, specify the IP address and port for the backup appliance in
the Backup IP and Port text boxes.
Use the following format: 0.0.0.0/0. The default port is 7810.
8. Click Add Rule to apply the rule to the running configuration.
9. Click Save to write your settings to memory.
For detailed information about verifying your connections and configuration settings, see “Verifying
Your Connections” on page 70 and “Verifying Your Configuration” on page 73.
You can now optimize WAN traffic using the Steelhead appliance.
78
Steelhead Appliance Installation and Configuration Guide
CHAPTER 3
Troubleshooting
This chapter describes how to troubleshoot the Steelhead appliance installation. It includes the following
sections:
„
“Troubleshooting” on page 79
„
“Resetting a Lost Password” on page 90
„
“Network Integration Checklist” on page 91
Troubleshooting
This section describes how to troubleshoot the following:
„
“Cables” on page 80
„
“Duplex Mismatch” on page 80
„
“SMB Signing (before RiOS v5.5)” on page 81
„
“In-Path Steelhead Appliances Connection” on page 81
„
“Oplock Issues” on page 82
„
“CIFS Overlapping Open Optimization Denies Multi-User Access” on page 83
„
“IP address Configuration” on page 84
„
“Asymmetric Routing” on page 85
„
“Packet Ricochet” on page 85
„
“Packet Ricochet—Internet Control Messaging Protocol (ICMP) Redirects” on page 86
„
“Auto-Discovery Failure” on page 87
„
“Protocol Optimization Errors” on page 88
„
“Server-Side Out-of-Path Connection Caveats” on page 88
„
“Specific Problems” on page 89
Steelhead Appliance Installation and Configuration Guide
79
Troubleshooting
Troubleshooting
Cables
Improper cabling prevents smooth traffic flows between the Steelhead appliance and the router or switch.
Solution
To ensure that traffic flows when the Steelhead appliance is optimizing traffic, and when the Steelhead
appliance transitions to bypass mode, use the appropriate crossover or straight-through cable to connect
the Steelhead appliance to a router or switch. Verify the cable selection by removing the power cable from
the appliance, and then test connectivity through it. Make sure you have connected your cables as follows:
„
Steelhead appliance to router: crossover cable
„
Steelhead appliance to switch: straight-through cable
„
Steelhead appliance to Steelhead appliance: crossover cable
„
Steelhead appliance to a host: crossover cable
Duplex Mismatch
The following symptoms occur due to a duplex mismatch:
„
Access is not faster after configuring the Steelhead appliance.
„
The interface counters display error messages. An alarm or log message about error counts appears.
„
The pass-through rule is ineffective. (This is a definite indication of duplex mismatch.)
„
There are many retransmissions in packet traces.
„
You cannot connect to an attached device.
„
You can connect with a device when you choose auto-negotiation, but you cannot connect with the
same device when you manually set the speed or duplex.
„
Good performance for one direction of data flow, but poor performance in the opposite direction.
Possible Cause
„
You have probably set the duplex value for your router to 100Full (fixed) and for the Steelhead
appliance to Auto.
Example
The following example shows applications that appear slower with Steelhead appliances configured in an
in-path deployment. The timed performance numbers to transfer a 20MB file over FTP are:
„
no Steelhead appliance – 3:16
„
cold Steelhead appliance – 5:08
„
warm Steelhead appliance – 3:46
Adding a pass-through rule for an application does not help. Slow connections appear as optimized in the
Management Console on the Current Connections report page. However, stopping the Steelhead appliance
service while leaving the system powered on and an in-path configuration returns performance to original
levels.
80
Steelhead Appliance Installation and Configuration Guide
Troubleshooting
Troubleshooting
Solutions
To resolve the duplex mismatch error:
„
Connect to the Steelhead appliance CLI and enter the flood-ping command to check the duplex
mismatch:
ping –f –I >in-path-ip> –s 1400 <clientIP>
„
Change the interface speed and duplex to match.
„
Ensure there is a speed and duplex match between each in-path interface and its peer network
interface. If they do not match, you might have a large number of errors on the interface when it is in
the bypass mode, because the switch and the router are not set with the same duplex settings. Also,
ensure connectivity when service is down.
If matching speed and duplex do not reduce collisions or errors, try hard-setting one end and autosetting the other. Try the half-duplex mode.
„
If all combinations fail, as a last resort, add an intermediary hub or switch that is more compatible with
both network interfaces.
SMB Signing (before RiOS v5.5)
The following symptoms occur due to SMB signing errors in Steelhead appliances running a version of
RiOS before v5.5:
„
File access is not faster or tasks such as drag-and-drop are fast (10 times) but applications are not (2
times).
„
Log messages about signed connections appear.
„
Logs contain error=SMB_SHUTDOWN_ERR_SEC_SIG_REQUIRED messages.
Possible Cause
„
The Windows server has SMB signing set to REQUIRED and the client to ENABLED.
Solutions
To resolve SMB signing errors, do one of the following:
„
Change the server to not require SMB signing.
„
Connect to the Steelhead appliance CLI and enter the command:
protocol cifs secure-sig-opt enable
„
Connect to the Steelhead Management Console and select Configure > Optimization > CIFS and
disable Optimize Connections with Security Signatures (that do not require signing). For details, see
the Steelhead Management Console User’s Guide.
„
If log messages persist, try disabling SMB signing requirements on servers or clients.
In-Path Steelhead Appliances Connection
When there are Steelhead appliances with in-path connection issues, the two sites are connected in-path and
you can ping them, but they cannot connect to each other to optimize data.
Steelhead Appliance Installation and Configuration Guide
81
Troubleshooting
Troubleshooting
Possible Cause
The firewall is running port filtering and drops your probe packets. The firewall is filtering the IP and port
address of the source and destination (bandwidth limitation) systems.
Solutions
To resolve the Steelhead appliance connection issue:
„
open port 7800 on both firewalls.
„
use the port visibility mode.
„
if there is no encryption, place the Steelhead appliance after the firewall.
Oplock Issues
The following symptoms occur due to opportunistic lock (oplock) issues:
„
File access is not faster or tasks such as drag-and-drop are fast but applications might benefit from
acceleration.
„
The Current Connections report page in the Management Console (select Reports > Networking >
Current Connections) displays slow connections as optimized.
Possible Causes
„
The client is running an old anti-virus software such as McAfee v4.5, the most common type, which
competes with the application for an oplock instead of opening as read-only. The antivirus causes
multiple file opens.
„
The server has oplocks disabled.
Example
You can open a previously-accessed file in 5 seconds on PC1, but you cannot open the same file under 24
seconds on PC2. If you close the file on PC1, you can open it in 5 seconds on PC2. However, it takes you 24
seconds to open the same file on PC1.
Solutions
Windows Common Internet File System (CIFS) uses oplock to determine the level of safety the OS or the
application has in working with a file. Oplock is a lock that a client requests on a file in a remote server.
An oplock controls the consistency of optimizations such as read-ahead. Oplock levels are reduced when
you make conflicting opens to a file.
To prevent any compromise to data integrity, the Steelhead appliance only optimizes data when a client has
exclusive access to the data.
When an oplock is not available, the Steelhead appliance does not perform application-level latency
optimization but still performs Scalable Data Referencing (SDR) and data compression as well as TCP
optimization. Therefore, even without the benefits of latency optimization, Steelhead appliances still
increase WAN performance, but not as effectively as when application optimizations are available.
To resolve oplock issues:
„
82
Upgrade your anti-virus software to the latest version.
Steelhead Appliance Installation and Configuration Guide
Troubleshooting
Troubleshooting
„
Use Filemon (sysinternals) to check for file access.
„
Enable CIFS Overlapping Opens (by default, this function is enabled). For details, see “CIFS
Overlapping Open Optimization Denies Multi-User Access” on page 83.
„
Ensure that the server has oplock enabled by verifying registry settings on Windows servers or the
Filer configuration (for NetApp or EMC servers).
„
Run a packet analyzer such as Wireshark and determine that the server grants oplocks when the client
opens a file.
„
Check whether the client is running an anti-virus software that is scanning the files over the WAN or
that the anti-virus software does not break the oplock.
CIFS Overlapping Open Optimization Denies Multi-User Access
The CIFS overlapping open optimization issue prevents a client from accessing a file when different clients
access the file at the same time.
Solution
To resolve the CIFS overlapping open optimization issue, configure CIFS overlapping open optimization
on the client-side Steelhead appliance as follows:
1. Connect to the Steelhead Management Console. For details, see the Steelhead Management Console User’s
Guide.
2. Choose Configure > Optimization > CIFS to display the CIFS page.
Figure 3-1. CIFS Page
Steelhead Appliance Installation and Configuration Guide
83
Troubleshooting
Troubleshooting
3. Under Overlapping Open Optimization (Advanced), complete the configuration as described in the
following table.
Control
Description
Enable Overlapping Open
Optimization
Enables overlapping opens to obtain better performance with applications that
perform multiple opens on the same file (for example, CAD applications). By
default, this setting is disabled.
Note: Enable this setting on the client-side Steelhead appliance.
With overlapping opens enabled, the Steelhead appliance optimizes data where
exclusive access is available (when locks are granted). When an oplock is not
available, the Steelhead appliance does not perform application-level latency
optimizations but still performs SDR and compression on the data as well as
TCP optimizations.
Note: If a remote user opens a file that is optimized using the overlapping
opens feature and a second user opens the same file, they might receive an error
message if the file fails to go through a v3.x.x or later Steelhead appliance or if it
does not go through a Steelhead appliance (for example, certain applications
that are sent over the LAN). If this occurs, you should disable overlapping
opens for such applications.
Use the radio buttons to set either an include list or exclude list of file types
subject to overlapping opens optimization.
Optimize only the following
extensions
Specify a list of extensions you want to include in overlapping opens
optimization.
Optimize all except the following
extensions
Specify a list of extensions you do not want to include, for example, you should
specify any file extensions that use Enable Applock Optimization.
4. Click Apply to apply your settings to the current configuration.
5. Click Save to save your settings permanently.
IP address Configuration
If you have not configured IP addresses correctly, the Steelhead appliances cannot connect to each other or
to your network.
Solutions
To verify the IP address has been configured correctly:
„
Ensure the Steelhead appliances are reachable through the IP address, by pinging their primary and inpath interfaces.
„
Ensure that the Steelhead appliances in the network can reach each other through their own interfaces.
Connect to the Steelhead appliance CLI. For details, see the Riverbed Command-Line Interface Reference
Manual. Enter the following command to ping from a specific in-path interface on a Steelhead
appliance to another in-path interface:
ping -f -I {Local-Steelhead appliance-Inpath-IP} -s 1400 {Remote-Steelhead appliance-InpathIP}
„
Ensure that the default gateways, both for the Steelhead appliance and for its in-path interfaces, are
correct.
„
For physical or virtual in-path installations, verify that the server-side Steelhead appliance can be autodiscovered by the client-side Steelhead appliance.
84
Steelhead Appliance Installation and Configuration Guide
Troubleshooting
Troubleshooting
Connect to the Steelhead appliance CLI. For details, see the Riverbed Command-Line Interface Reference
Manual. Enter the command:
tproxytrace -i inpath0_0 <example-server-IP-address>:<example-server-TCP-port>
This causes the Steelhead appliance to generate a fake TCP SYN packet, destined for the specified IP
address and TCP port, and send it to the specified in-path interface. A remote Steelhead appliance
should respond if it sees the SYN packet.
„
Verify that the client-side Steelhead appliance is visible to the server-side Steelhead appliance.
Connect to the Steelhead appliance CLI. For details, see the Riverbed Command-Line Interface Reference
Manual. Enter the command:
tproxytrace -i inpath0_0 <example-client-IP-address>: <example-client-TCP-port>
Asymmetric Routing
If there is an asymmetric routing issue, many connections fail during data transfer or they fail to start.
Possible Cause
Asymmetric routing occurs when a TCP connection takes one path to the destination and another when
returning to the source. If the Steelhead appliance sees only the LAN to WAN or only the WAN to LAN
packets, it cannot optimize the data.
Solutions
To resolve the asymmetric routing issue, do one of the following:
„
„
Rank the following solutions from most to least preferable with respect to complexity and cost and
select one:
–
configure a fixed-target rule.
–
use a logical in-path configuration such as WCCP or PBR.
–
use four-port or six-port Steelhead appliance.
–
configure connection forwarding with two Steelhead appliances.
Remove the asymmetry.
Packet Ricochet
The following symptoms occur due to packet ricochet:
„
Performance is less than expected
„
The following log message appears:
» [fionr taelrcreeapdt/y lnoactaltekde rnceoln/neiccotireo.n c:119426.316]
8.n7a3t._1c5h:e1c6k1: 1 SYN ==> packet 192.168.208.12:80 ==> 192.168.72.9:7801
Possible Cause
Traffic to the LAN is travelling to the WAN router on the way to the LAN.
Steelhead Appliance Installation and Configuration Guide
85
Troubleshooting
Troubleshooting
Solutions
To resolve packet ricochet issues:
„
Change the in-path gateway to the LAN router.
„
Add static routes to LAN subnets through the LAN router.
„
Enable in-path simplified routing.
Packet Ricochet—Internet Control Messaging Protocol (ICMP)
Redirects
The following symptoms occur due to packet ricochet ICMP redirects:
„
Connections fail on first attempt, but succeed on second attempt.
„
On one or both sites, the in-path interface on the Steelhead appliance is on a different network than the
local host.
„
There are no in-path routes defined.
Possible Causes
„
Traffic to the LAN is travelling to the WAN router on the way to the LAN, but the router drops the
packet.
„
Outer connections to clients or servers are routed through the WAN interface to the WAN gateway, and
then routed through the Steelhead appliance to the next hop LAN gateway.
„
The WAN router is probably dropping the SYN from the Steelhead appliance before issuing an ICMP
redirect.
Solutions
To resolve the packet ricochet ICMP redirects issue, do one of the following:
„
Change the router ICMP configuration to forward the packet or turn off ICMP redirect.
„
Change the in-path gateway to the LAN router.
„
Add static routes to LAN subnets through the LAN router.
„
Enable in-path simplified routing. For details, see “Simplified Routing” on page 86.
„
Add in-path routes to local destinations to prevent the ICMP redirect and subsequent drop
Simplified Routing
Simplified routing changes the process used to select the destination Ethernet address for packets
transmitted from in-path interfaces.
Simplified routing collects the IP address for the next hop MAC address from each packet it receives to
address traffic. With simplified routing, you can use either the WAN or LAN-side device as a default
gateway. The Steelhead appliance learns the right gateway to use by watching where the switch or router
sends the traffic, and by associating the next-hop Ethernet addresses with IP addresses. Enabling simplified
routing eliminates the need to add static routes when the Steelhead appliance is in a different subnet from
the client and the server.
86
Steelhead Appliance Installation and Configuration Guide
Troubleshooting
Troubleshooting
Without simplified routing, if a Steelhead appliance is installed in a different subnet from the client or
server, you must define one router as the default gateway and static routes for the other routers so that
traffic is not redirected back through the Steelhead appliance. In some cases, even with the static routes
defined, the Access Control List (ACL) on the default gateway can still drop traffic that should have gone
through the other router. Enabling simplified routing eliminates this issue.
Simplified routing has the following constraints:
„
You cannot enable WCCP.
„
The default route must exist on each Steelhead appliance in your network.
Tip: For detailed information, see the Steelhead Appliance Deployment Guide.
To enable simplified routing
1. Choose Configure > Networking > Simplified Routing to display the Simplified Routing page.
Figure 3-2. Simplified Routing Page
2. Under Mapping Data Collection Setting, complete the configuration as described in the following table.
Control
Description
Collect Mappings From
Select one of the following options from the drop-down list:
• None - Do not collect mappings.
• Destination Only - Collects destination MAC data. Use this option in
connection forwarding deployments. This is the default setting.
• Destination and Source - Collect mappings from destination and source
MAC data. Use this option in connection forwarding deployments.
• All - Collect mappings for destination, source, and inner MAC data. Also
collect data for connections that are un-natted (connections that are not
translated using NAT). You cannot enable this option in connection
forwarding deployments. Riverbed recommends that you use this option to
maximize the effects of simplified routing.
3. Click Apply to save your settings to the running configuration.
4. Click Save to save your settings permanently.
Auto-Discovery Failure
When auto-discovery fails, all traffic passes through with the Steelhead appliance in-path (physically or
logically).
Steelhead Appliance Installation and Configuration Guide
87
Troubleshooting
Troubleshooting
Possible Causes
„
Cisco PIX 7.x or Raptor firewalls
„
Satellite
„
Intrusion Detection System (IDS) or Intrusion Prevention System (IPS)
Solutions
„
Create a fixed-target rule on the client-side Steelhead appliance.
„
Specify the Target Appliance IP Address and its port as 7800 on the opposite Steelhead appliance
(in-path without auto-discovery).
„
Configure end nodes (firewalls) to allow your probe to pass through.
„
Configure the Steelhead appliance IP address as the friendly IP address for IDS or IPS.
„
Cisco PIX Firewall IOS v7.0 might block the auto-discovery probe. Some firewall configurations strip
TCP options or drop packets with these options. You can keep this configuration and switch to fixedtarget rules or change the configuration on the firewall.
Protocol Optimization Errors
When there are protocol optimization errors, the Steelhead appliance does not optimize expected protocols.
Solutions
To resolve protocol optimization errors, check:
„
that connections have been successfully established.
„
that Steelhead appliances on the other side of a connection are turned on.
„
for secure or interactive ports that are preventing protocol optimization.
„
for any pass-through rules that could be causing some protocols to pass-through the Steelhead
appliances unoptimized.
„
that the LAN and WAN cables are not inadvertently swapped.
Server-Side Out-of-Path Connection Caveats
The following are the caveats for a server-side out-of-path (OOP) Steelhead appliance connection:
„
OOP configuration does not support auto-discovery. You must create a fixed-target rule on the clientside Steelhead appliance.
„
You must create an OOP connection from an in-path or logical in-path Steelhead appliance and direct it
to port 7810 on the primary interface of the server-side Steelhead appliance. This setting is mandatory.
„
Interception is not supported on the primary interface.
88
Steelhead Appliance Installation and Configuration Guide
Troubleshooting
„
„
Troubleshooting
An OOP configuration provides non-transparent optimization from the server perspective. Clients
connect to servers, but servers treat it like a server-side Steelhead appliance connection. This affects:
–
log files.
–
server-side ACLs.
–
bi-directional applications such as rsh.
You can use OOP configurations along with in-path or logical in-path configurations.
Specific Problems
The following section describes specific problems you might encounter in the Steelhead appliance.
Problem
Solution
The show interfaces CLI command
displays 4294967295 as the number
of errors on an interface.
The bypass card is not properly installed; reinstall it. For details, see the
Network Interface Card Installation Guide.
The power light on a Steelhead
appliance model 510, 1010, or 2010
comes on for less than one second,
and then fades.
Contact Riverbed Support at https://support.riverbed.com. It is possible the
appliance has a defective power supply that needs to be replaced.
The Steelhead appliance blocks
traffic when going into bypass
mode.
If a Steelhead appliance blocks traffic when going into bypass mode, verify
that connections to its neighboring devices are correctly configured. Ensure
that the cable from the Steelhead appliance to the switch is a straight-through
cable and the cable from the Steelhead appliance to the router is a crossover
cable. Also, ensure that there are no network speed or duplex mismatches.
The Steelhead appliance does not
come out of bypass mode when the
network connection is restored.
If a Steelhead appliance does not come out of bypass mode, verify that:
• The in-path interface has an IP address. For example, at the system
prompt, enter the show interfaces CLI command.
• In-path interception is enabled. For example, at the system prompt, enter
the show in-path CLI command. Expected results are:
Enabled: yes
Optimizations Enabled On: inpath0_0
• The bypass service is running. For example, at the system prompt, enter
the show service CLI command. To enable the Steelhead appliance service
if it is not running, use the CLI command service enable.
• You have a valid and active SH10BASE license. Your license file should
also contain entries for SH10CIFS and SH10EXCH licenses, even if they
have not been activated. For example, at the system prompt, enter the
show licenses CLI command. For questions about licenses, contact
Riverbed Support at https://support.riverbed.com.
The Steelhead appliance fails to
boot.
Ensure that:
• The power strip or the uninterruptable power supply (UPS) the Steelhead
appliance is plugged into is turned on and is functioning properly.
• The rocker switch on the back of the Steelhead appliance (Series xx10,
xx20) is turned on. (When on, the rocker switch is in the depressed, or 1
position.)
• For a Steelhead appliance model 3010 or 5010, press the start button twice.
Steelhead Appliance Installation and Configuration Guide
89
Troubleshooting
Resetting a Lost Password
Resetting a Lost Password
To reset your password, you must have access to the serial console or monitor and must be able to see the
entire boot process to perform these steps:
1. Start, or reboot the appliance.
2. When prompted, press any key to continue.
3. Immediately press E. You should see a GNU GRUB menu.
„
For a Steelhead appliance upgraded to v4.0 from v2.0 or v3.0, the menu prompts you to select the
Riverbed Steelhead appliance, diagnostics, or a restore or recovery image. Select Riverbed Steelhead
appliance and skip to Step 5.
„
For a Steelhead appliance manufactured with v4.0 (that has not had previous versions installed), the
menu prompts you to select the disk image to use. Continue with Step 4.
„
For software versions prior to v4.0, the menu displays root and kernel parameters. Skip to Step 6.
4. Press V or ^ to select the disk image to boot.
5. Press E. A GRUB menu appears, with options similar to the following:
----------------0: root (hd0,1)
1: kernel /vmlinuz ro root=/dev/sda5 console=tty0 console=ttyS0,9600n8
-----------------
6. Press V or ^ to select the kernel boot parameters entry.
7. Press E to edit the kernel boot parameters. The CLI displays a partially completed line of text similar to
the following:
kernel /vmlinuz ro root=/dev/sda5 console=tty0 console=ttyS0,9600n8
8. The line of text contains two console= entries. Modify this line as follows:
–
If you are accessing the Steelhead appliance remotely, delete the console=tty0 entry.
–
If you are accessing the Steelhead appliance directly (through a keyboard and monitor connected to
the appliance), delete the console=ttyS0 entry.
–
At the end of the line, type a space and append with single fastboot. It is important to type a space
before single.
Tip: Use the arrow keys to access the entire command line.
9. Press Enter.
10. Press the B key to continue booting. The system starts.
11. At the command prompt, enter /sbin/resetpw.sh. The password is blank.
90
Steelhead Appliance Installation and Configuration Guide
Network Integration Checklist
Troubleshooting
12. Type reboot and press Enter to reboot the appliance.
Network Integration Checklist
Before you begin configuring the Steelhead appliance, check the following configuration settings:
„
Speed and duplex.
„
QoS integration.
„
Multi-hop optimization.
„
Packet ricochet.
„
VPN: Ensure the encryption is on the WAN side of the Steelhead appliance.
„
Firewall: Ensure probes are passed, especially Cisco PIX and Raptor. If inside the Steelhead appliance,
try probe caching for src IP rules; if outside, check firewall performance.
„
In-path: Is it a VLAN trunk? (Configure trunking).
„
Incorrectly designed load balancing implementations.
„
Remove or manage asymmetry.
„
Fail-to-wire or fail-to-block, you need Link State Protocol (LSP) for quicker convergence.
„
WCCP or VLAN bridge: Router model and IOS revision.
„
Does the network use Network Address Translation (NAT) or Port Address Translation (PAT)?
Steelhead Appliance Installation and Configuration Guide
91
Troubleshooting
92
Network Integration Checklist
Steelhead Appliance Installation and Configuration Guide
APPENDIX A
Installing the DC Power Supply
This appendix describes how to install DC (Direct Current) power supply. It includes the following sections:
„
“DC Power Supply Specifications and LED Indicators” on page 93
„
“Requirements for Steelhead Appliances with DC Input Power” on page 94
„
“DC Supply and Ground Conductor Requirements” on page 94
„
“Overcurrent Protection Requirements” on page 95
„
“Connecting the DC Power Supply to the Steelhead Appliance” on page 95
DC Power Supply Specifications and LED Indicators
This section describes the technical specifications and LED indicators for the DC power supply.
Technical Specifications
The DC power supply operates within the following parameters.
DC Power Supply Specifications
Overall Capacity
600W
Peak VA
650W
Output Voltage
+12V (min 13.3, max 14.5), +5VSB (min 5.7, max 6.5)
DC Voltage
-43DC to -66DC (Rated as -48VDC/-60VDC)
Inrush Current
60A
A/C dropout total (msec)
20msec @ 60%load; 12msec @ 100% loading
Binary Flags
Hot Swap Support, Auto Switch, and PFC
Peak Wattage
Set for: 12sec, 650 Watts
Temperature (Operating)
0º - 40º C (outside ambient)
Temperature (Storage)
-40º - 70º C (outside ambient)
Steelhead Appliance Installation and Configuration Guide
93
Installing the DC Power Supply
Requirements for Steelhead Appliances with DC Input Power
DC Power Supply Specifications
Humidity
Operating: To 20%-80% relative humidity (non-condensing)
Non-Operating: To 5%-95% relative humidity (non-condensing)
Altitude
Operating: up to 10,000 meters
Non-operating: up to 10,000 meters
LED Indicators
The DC power supply has the following LED indicators
Power Supply Condition
LED
No DC power to all power supplies.
OFF
Power supply critical event causing a shutdown; failure, OCP,
OVP, fan failure.
AMBER
Power supply warning events where the power supply continues
to operate; high temperature, high power, high current, slow fan.
BLINK AMBER
Input DC present / Only 5VSB on (Power Supply off).
BLINK GREEN
Output ON and OK.
GREEN
Requirements for Steelhead Appliances with DC Input Power
The following restrictions apply to the Steelhead appliances with DC input power:
„
The DC version of the system must be installed in a restricted-access location. A restricted-access
location is an area intended for qualified or trained personnel only and has access controlled by a
locking mechanism such as a key lock or an access card system.
„
The system must not be directly connected to a centralized DC power source.
„
The system must be connected to a DC power source.
DC Supply and Ground Conductor Requirements
The system must meet the following requirements:
„
94
Power supply connections through the input connector: 12 AWG (between the system and the power
source). There are three conductors:
„
-48V (negative terminal)
„
Chassis ground connection
„
-48V Return (positive terminal)
Steelhead Appliance Installation and Configuration Guide
Overcurrent Protection Requirements
„
Installing the DC Power Supply
System ground conductor: 12 AWG (to be connected to the chassis)
Note: Depending on the DC power source, the -48V (negative terminal) might be marked with a minus ( - ) symbol, and
the -48 Return (positive terminal) might be marked with a positive ( + ) symbol.
Caution: When attaching the DC power supply, you must restrict the connection of the Steelhead appliance to the DC
power source to minimize the possibility that transient energy will appear on the main input to the equipment. The DC
power source must be in the same premises as the Steelhead appliance. The Steelhead appliance cannot be in one
building with the power source in another building.
Overcurrent Protection Requirements
The following requirements must be adhered to:
„
Overcurrent protection devices must be provided as part of each equipment rack.
„
Circuit breakers must be located between the DC power source and the Steelhead appliance. Use one
20A fast-trip double-pole DC-rated circuit breaker for each power supply.
Note: Overcurrent protection devices must meet applicable national and local electrical safety codes and be approved
for the intended application.
Connecting the DC Power Supply to the Steelhead Appliance
The following sections describes how to connect the DC power supply to the Steelhead appliance.
To connect the DC power supply
1. Turn off the power from the DC power source using the circuit breakers.
Caution: Do not proceed with these instructions until you have turned off the power from the DC power source through
the circuit breakers.
Steelhead Appliance Installation and Configuration Guide
95
Installing the DC Power Supply
Connecting the DC Power Supply to the Steelhead Appliance
2. Identify the parts of the DC power supply.
Figure 3-3. DC Power Supply
Yellow
To -48V on DC Source
DC Plug
Black
To the Power Supply
To Ground on DC Source
To Power Supply
Green/Yellow
To the Chassis
3. Locate the three wires that make up the DC power supply:
„
-48V (negative terminal) = Yellow
„
Chassis ground = Green/Yellow
„
-48V Return (positive terminal) = Black
Note: Depending on the DC power source, the -48V (negative terminal) might be marked with a minus ( - ) symbol, and
the -48 Return (positive terminal) might be marked with a positive ( + ) symbol.
4. Ensure the circuit breaker to your power source is turned off.
Caution: Do not proceed with these instructions you have turned off the power from the DC power source through the
circuit breakers.
5. Route the power cables in the rack and secure the cables with nylon tie wraps.
6. Connect the chassis ground wire (Green/Yellow) to the chassis and the facility earth ground. Ensure
that this connection has proper bonding.
7. Connect the -48V Return (Black) to ground on the DC power source.
8. Connect the -48V (Yellow) to the DC power source.
9. Connect the DC plug to the Steelhead appliance power supply units.
96
Steelhead Appliance Installation and Configuration Guide
Acronyms and Abbreviations
AAA. Authentication, Authorization, and Accounting.
ACL. Access Control List.
ACK. Acknowledgment Code.
ACS. (Cisco) Access Control Server.
AD. Active Directory.
ADS. Active Directory Services.
AES. Advanced Encryption Standard.
APT. Advanced Packaging Tool.
AR. Asymmetric Routing.
ARP. Address Resolution Protocol.
BDP. Bandwidth-Delay Product.
BW. Bandwidth.
CA. Certificate Authority.
CAD. Computer Aided Design.
CDP. Cisco Discovery Protocol.
CHD. Computed Historical Data.
CIFS. Common Internet File System.
CLI. Command-Line Interface.
CMC. Central Management Console.
CPU. Central Processing Unit.
Steelhead Appliance Installation and Configuration Guide
97
Acronyms and Abbreviations
CRL. Certificate Revocation List.
CRM. Customer Relationship Management.
CSR. Certificate Signing Request.
CSV. Comma-Separated Value.
DC. Domain Controller.
DER. Distinguished Encoding Rules.
DES. Data Encryption Standard.
DHCP. Dynamic Host Configuration Protocol.
DID. Deployment ID.
DMZ. Demilitarized Zone.
DNS. Domain Name Service.
DR. Data Replication.
DSA. Digital Signature Algorithm.
DSCP. Differentiated Services Code Point.
ECC. Error-Correcting Code.
ERP. Enterprise Resource Planning.
ESD. Electrostatic Discharge.
FCIP. Fiber Channel over IP
FDDI. Fiber Distributed Data Interface.
FIFO. First in First Out.
FIPS. Federal Information Processing Standards.
FSID. File System ID.
FTP. File Transfer Protocol.
GB. Gigabytes.
GMT. Greenwich Mean Time.
GPO. Group Policy Object.
GRE. Generic Routing Encapsulation.
98
Steelhead Appliance Installation and Configuration Guide
Acronyms and Abbreviations
GUI. Graphical User Interface.
HFSC. Hierarchical Fair Service Curve.
HSRP. Hot Standby Routing Protocol.
HSTCP. High-Speed Transmission Control Protocol.
HTTP. HyperText Transport Protocol.
HTTPS. HyperText Transport Protocol Secure.
ICA. Independent Computing Architecture.
ICMP. Internet Control Message Protocol.
ID. Identification Number.
IETF. Internet Engineering Task Force.
IGP. Interior Gateway Protocol.
IKE. Internet Key Exchange.
IOS. (Cisco) Internetwork Operating System.
IP. Internet Protocol.
IPMI. Intelligent Platform Management Interface.
IPSec. Internet Protocol Security Protocol.
ISL. InterSwitch Link. Also known as Cisco InterSwitch Link Protocol.
L2. Layer-2.
L4. Layer-4.
LAN. Local Area Network.
LDAP. Lightweight Directory Access Protocol.
LED. Light-Emitting Diode.
LRU. Least Recently Used.
LZ. Lempel-Ziv.
MAC. Media Access Control.
MAPI. Messaging Application Protocol Interface.
MDI, MDI-X. Medium Dependent Interface-Crossover.
Steelhead Appliance Installation and Configuration Guide
99
Acronyms and Abbreviations
MEISI. Microsoft Exchange Information Store Interface.
MIB. Management Information Base.
MOTD. Message of the Day.
MS GPO. Microsoft Group Policy Object.
MS SMS. Microsoft Systems Management Server.
MS-SQL. Microsoft Structured Query Language.
MSFC. Multilayer Switch Feature Card.
MSI Package. Microsoft Installer Package.
MTU. Maximum Transmission Unit.
MX-TCP. Max-Speed TCP.
NAS. Network Attached Storage.
NAT. Network Address Translate.
NFS. Network File System.
NIS. Network Information Services.
NSPI. Name Service Provider Interface.
NTLM. Windows NT LAN Manager.
NTP. Network Time Protocol.
OSI. Open System Interconnection.
OSPF. Open Shortest Path First.
PAP. Password Authentication Protocol.
PBR. Policy-Based Routing.
PCI. Peripheral Component Interconnect.
PEM. Privacy Enhanced Mail.
PFS. Proxy File Service.
PKCS12. Public Key Cryptography Standard #12.
PRTG. Paessler Router Traffic Grapher.
PSU. Power Supply Unit.
100
Steelhead Appliance Installation and Configuration Guide
Acronyms and Abbreviations
QoS. Quality of Service.
RADIUS. Remote Authentication Dial-In User Service.
RAID. Redundant Array of Independent Disks.
RCU. Riverbed Copy Utility.
ROFS. Read-Only File System.
RPC. Remote Procedure Call.
RSA. Rivest-Shamir-Adleman Encryption Method by RSA Security.
RSP. Riverbed Services Platform.
SA. Security Association.
SAP. System Application Program.
SCP. Secure Copy Program.
SCEP. Simple Certificate Enrollment Protocol.
SCPS. Space Communications Protocol Standards.
SDR. Scalable Data Referencing.
SDR-A. Scalable Data Referencing - Adaptive.
SDR-M. Scalable Data Referencing - Memory.
SEL. System Event Log.
SFQ. Stochastic Fairness Queuing.
SMB. Server Message Block.
SMI. Structure of Management Information.
SMTP. Simple Mail Transfer Protocol.
SNMP. Simple Network Management Protocol.
SOAP. Simple Object Access Protocol
SPAN. Switched Port Analyzer.
SQL. Structured Query Language.
SRDF. Symmetric Remote Data Facility
SRDF/A. Symmetric Remote Data Facility/Asynchronous
Steelhead Appliance Installation and Configuration Guide
101
Acronyms and Abbreviations
SSH. Secure Shell.
SSL. Secure Sockets Layer.
SYN. Synchronize.
SYN/ACK. Synchronize/Acknowledgement.
TA. Transaction Acceleration.
TACACS+. Terminal Access Controller Access Control System.
TCP. Transmission Control Protocol.
TCP/IP. Transmission Control Protocol/Internet Protocol.
ToS. Type of Service.
TP. Transaction Prediction.
TTL. Time to Live.
U. Unit.
UDP. User Diagram Protocol.
UNC. Universal Naming Convention.
URL. Uniform Resource Locator.
USM. User-based Security Model.
UTC. Universal Time Code.
VACM. View-Based Access Control Model.
VGA. Video Graphics Array.
VLAN. Virtual Local Area Network.
VoIP. Voice over IP.
VWE. Virtual Window Expansion.
WAN. Wide Area Network.
WCCP. Web Cache Communication Protocol.
WOC. WAN Optimization Controller.
XOR. Exclusive OR logic.
102
Steelhead Appliance Installation and Configuration Guide
Index
A
AC power, connecting 63
Appliance
connecting to 64
installing 57, 79
powering on 63
Appliance ports, definitions of 62
Application Streamlining, overview of 14
Auto-Discovery process, overview of 15
Auto-discovery rule, overview of 16
Auto-discovery, enhanced, overview of 15
Auxiliary port, definition of 62
B
Blocked traffic in bypass mode 89
Boot failure 89
Bypass cards
errors on 89
interface naming convention 43, 46, 48,
52, 54, 62
Bypass mode
troubleshooting 89
troubleshooting for 89
Bypass mode, definition of 16
C
Client-side appliance, configuring 77
CMC compatibility 9
CMC, overview of 15
Configuration information, required 60
configuration jump-start command, restarting the wizard 66
Configuration wizard
about 65
restarting 66
Configuration, verifying 70, 73
Connecting
LAN switch to LAN port, illustration
of 69
Primary port to LAN switch, illustration
of 69, 77
WAN port to WAN router, illustration
of 70
Console port, definition of 62
D
Data Streamlining, overview of 14
Deny rules, overview of 16
Discard rules, overview of 16
Steelhead Appliance Installation and Configuration Guide
Documentation, contacting 12
Duplex and speed, checking your
settings 74
E
Environmental specifications 27
Error 4294967295 89
Ethernet network compatibility 9
F
Fail-to-block mode
bypass cards for 18
overview of 18
Failure modes
fail-to-block, overview of 18
Fixed-target rules, overview of 16
Four-Port Copper Gig-E Bypass card
illustration of 52
status lights 52
I
In-Path rules, overview of 16
In-path, configuring 65
Interface naming convention 43, 46, 48,
52, 54, 62
K
Known issues 11
L
LAN port, definition of 62
LAN switch, connecting 69
LED Descriptions
Model 250, 550 29
Model 3020, 3520, 5520, 6020, and
6120 40
Model 50, 100, 200, and 300 37
LED Descriptions for Model 520, 1020,
1520, 2020 Rev-A, Rev-B 40
Logical in-path WCCP deployment, diagram of 58
Login page 72
M
Management Streamlining, overview
of 15
Manufacturing part numbers 49
Model 1050, 2050, front and back
panel 30
103
Index
Model 1050, 2050, status lights 30
Model 2050, 6050, front and back panel 31
Model 250, 550, front and back panel 29
Model 250, 550, status lights 29
Model 3000, 3010, 5000, 5010, back
panel 38
Model 3000, 3010, 5000, 5010, front
panel 38
Model 3020, 3520, 5520, 6020, 6120, front
panel 40
Model 3020, 3520, 5530, 6020, 6120, back
panel 41
Model 500, 510, 1000, 1010, 2000, 2001,
2010, front panel 37
Model 500, 520, 1000, 1010, 2000, 2001,
2010, back panel 37
Model 5050, 6050, status lights 31
Model 520, 1020, 1520, 2020 Rev-A, back
panel 39
Model 520, 1020, 1520, 2020 Rev-A, front
panel 39
Model 520, 1020, 1520, 2020 Rev-B, back
panel 39
Model 520, 1020, 1520, 2020 Rev-B, front
panel 39
Model 7050, front and back panel 34
Model 7050, status lights 34
Models 1020, 1520, 2020, no 64-bit VM
support 9, 25
Models 250 and 550, no 64-bit VM
support 9, 23
N
Network, connecting to 69
O
Online documentation 11
Online notes 11
Out-of-path deployment, diagram of 59
Out-of-path, configuring 74
P
Pass-through rules, overview of 16
Peering rules, overview of 16
Physical in-path deployment, diagram
of 58
Physical in-path, overview of 58
Ports, definitions of 62
Power light 89
Preparing your site 60
Primary port, connecting 69
Primary port, definition of 62
Product inventory 59
Professional services, contacting 12
SDR, overview of 14
Series 250, 550, status lights 29
SNMP compatibility 10
Specifications, physical and power 22
Speed and duplex, checking your
settings 74
Status lights
Four-Port Gig-E Bypass card 52
Model 3000, 3010, 5000, 5010 38
Model 500, 510, 1000, 1010, 2000, 2001,
2010 37
Series 250, 550 29
Two-Port Fast-Ethernet Bypass
Card 49
Two-Port Fiber Gig-E Bypass card 54
Two-Port Fiber Gig-E Bypass card
CMP-00062 44, 45, 47
Two-Port Gig-E Bypass card-A 50
Two-Port Gig-E Bypass card-B 51
Steelhead Mobile Controller, overview
of 15
T
Technical support, contacting 12
Traffic, blocked in bypass mode 89
Transport Streamlining, overview of 14
Two-Port Fast-Ethernet Bypass card
CMP-00005, illustration of 43
Two-Port Fast-Ethernet Bypass Card,
illustration of 49
Two-Port Fast-Ethernet Bypass card,
illustration of 49
Two-Port Fiber Gig-E Bypass card CMP00062, illustration of 44, 45, 47
Two-Port Fiber Gig-E Bypass card, illustration of 54
Two-Port Gig-E Bypass card-A, illustration of 50
Two-Port Gig-E Bypass card-B, illustration of 51
V
Virtual in-path deployments, overview
of 58
VMs, no 64-bit support 9, 23, 25
W
WAN port, connecting 70
WAN port, definition of 62
WAN router, disconnecting 69
Wizard, about 65
Wizard, restarting 66
R
Release notes 11
Required equipment 60
Riverbed Services Platform, 32-bit and 64bit support 9
RSP, 32-bit and 64-bit support 9
S
Safety guidelines 11
Scalable Data Referencing, overview of 14
104
Index
Download PDF
Similar pages