Steelhead SD Installation Guide, Version

Steelhead SD Installation Guide, Version
SteelHead SD Installation Guide
™
Models 570-SD, 770-SD, 3070-SD
Version SteelConnect 2.5, RiOS 9.2.1-cf1
April 2017
© 2017 Riverbed Technology, Inc. All rights reserved.
Riverbed and any Riverbed product or service name or logo used herein are trademarks of Riverbed. All other trademarks used
herein belong to their respective owners. The trademarks and logos displayed herein cannot be used without the prior written
consent of Riverbed or their respective owners.
Akamai® and the Akamai wave logo are registered trademarks of Akamai Technologies, Inc. SureRoute is a service mark of
Akamai. Apple and Mac are registered trademarks of Apple, Incorporated in the United States and in other countries. Cisco
is a registered trademark of Cisco Systems, Inc. and its affiliates in the United States and in other countries. EMC, Symmetrix,
and SRDF are registered trademarks of EMC Corporation and its affiliates in the United States and in other countries. IBM,
iSeries, and AS/400 are registered trademarks of IBM Corporation and its affiliates in the United States and in other
countries. Juniper Networks and Junos are registered trademarks of Juniper Networks, Incorporated in the United States and
other countries. Linux is a trademark of Linus Torvalds in the United States and in other countries. Microsoft, Windows, Vista,
Outlook, and Internet Explorer are trademarks or registered trademarks of Microsoft Corporation in the United States and in
other countries. Oracle and JInitiator are trademarks or registered trademarks of Oracle Corporation in the United States and
in other countries. UNIX is a registered trademark in the United States and in other countries, exclusively licensed through X/
Open Company, Ltd. VMware, ESX, ESXi are trademarks or registered trademarks of VMware, Inc. in the United States and in
other countries.
This product includes Windows Azure Linux Agent developed by the Microsoft Corporation (http://www.microsoft.com/).
Copyright 2016 Microsoft Corporation.
This product includes software developed by the University of California, Berkeley (and its contributors), EMC, and Comtech
AHA Corporation. This product is derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm.
The SteelHead Mobile Controller (virtual edition) includes VMware Tools. Portions Copyright © 1998-2016 VMware, Inc. All
Rights Reserved.
NetApp Manageability Software Development Kit (NM SDK), including any third-party software available for review with such
SDK which can be found at http://communities.netapp.com/docs/DOC-1152, and are included in a NOTICES file included
within the downloaded files.
For a list of open source software (including libraries) used in the development of this software along with associated
copyright and license agreements, see the Riverbed Support site at https//support.riverbed.com.
This documentation is furnished “AS IS” and is subject to change without notice and should not be construed as a
commitment by Riverbed. This documentation may not be copied, modified or distributed without the express authorization
of Riverbed and may be used only in connection with Riverbed products and services. Use, duplication, reproduction, release,
modification, disclosure or transfer of this documentation is restricted in accordance with the Federal Acquisition
Regulations as applied to civilian agencies and the Defense Federal Acquisition Regulation Supplement as applied to military
agencies. This documentation qualifies as “commercial computer software documentation” and any use by the government
shall be governed solely by these terms. All other use is prohibited. Riverbed assumes no responsibility or liability for any
errors or inaccuracies that may appear in this documentation.
Riverbed Technology
680 Folsom Street
San Francisco, CA 94107
www.riverbed.com
Part Number
712-00301-01
Contents
Welcome .............................................................................................................................................. 5
About this guide ...................................................................................................................... 5
Audience ........................................................................................................................... 5
Document conventions...................................................................................................... 5
Safety guidelines............................................................................................................... 6
Documentation and release notes ..................................................................................... 6
Contacting Riverbed ................................................................................................................ 6
1 - SteelHead SD Overview .................................................................................................................. 9
Introducing the SteelHead SD ................................................................................................. 9
SteelConnect SD-WAN service ........................................................................................ 10
SteelHead WAN optimization service .............................................................................. 10
Prerequisites......................................................................................................................... 11
Licensing............................................................................................................................... 13
Preparing your site for installation ........................................................................................ 14
2 - Installing the SteelHead SD.......................................................................................................... 17
Configuring the SteelConnect gateway .................................................................................. 17
Defining an organization.................................................................................................. 17
Adding shadow appliances.............................................................................................. 19
Registering appliances.................................................................................................... 19
Configuring the LAN-zone uplink ..................................................................................... 21
Obtaining the in-path interface IP address ............................................................................ 22
Obtaining the in-path gateway IP address ............................................................................. 22
Cabling the SteelHead SD appliance ..................................................................................... 23
Port definitions ............................................................................................................... 25
Port mappings 570, 770................................................................................................... 25
Port mappings 3070 ........................................................................................................ 25
Identifying the primary IP address for the SteelHead ............................................................ 26
Identifying the primary IP address for SteelHead when the SteelConnect gateway acts as
DHCP server ..................................................................................... 27
Configuring the in-path interface and default gateway in the SteelHead ............................... 29
Provisioning a SteelHead SD without a DHCP server using a USB drive.................................. 30
SteelHead SD Installation Guide
3
Contents
A - Appliance Technical Specifications.............................................................................................. 35
SteelHead SD 570-SD and 770-SD specifications ................................................................. 35
Status lights and ports.................................................................................................... 35
Technical specifications .................................................................................................. 37
Environmental specifications.......................................................................................... 38
SteelHead SD 3070-SD specifications................................................................................... 38
Status lights and ports.................................................................................................... 39
Technical Specifications ................................................................................................. 41
Power requirements and consumption ............................................................................ 42
Environmental specifications.......................................................................................... 42
4
SteelHead SD Installation Guide
Welcome
About this guide
Welcome to the SteelHead SD Installation Guide. This guide describes how to install the Riverbed
SteelHead SD (SteelHead SD).
Audience
This guide is written for storage and network administrators who are familiar with administering and
managing WANs using common network protocols such as TCP, CIFS, HTTP, FTP, and NFS.
This guide includes information relevant to these products and product features:

Riverbed SteelHead SD (SteelHead SD)

Riverbed SteelHead (SteelHead)

Riverbed SteelConnect (SteelConnect)

SteelConnect Manager (SCM)

SteelHead (virtual edition) (vSH)

SteelConnect Virtual Gateway (vGW)

Steel Operating System (SteelOS)

Riverbed command-line interface (CLI)
Document conventions
This guide uses the following standard set of typographical conventions.
Convention
Meaning
italics
Within text, new terms and emphasized words appear in italic typeface.
boldface
Within text, CLI commands, CLI parameters, and REST API properties appear in bold typeface.
Courier
Code examples appear in Courier font:
amnesiac > enable
amnesiac # configure terminal
<>
Values that you specify appear in angle brackets: interface <ip-address>
[]
Optional keywords or variables appear in brackets: ntp peer <ip-address> [version <number>]
SteelHead SD Installation Guide
5
Welcome
Contacting Riverbed
Convention
Meaning
{}
Elements that are part of a required choice appear in braces: {<interface-name> | ascii
<string> | hex <string>}
|
The pipe symbol separates alternative, mutually exclusive elements of a choice. The pipe
symbol is used in conjunction with braces or brackets; the braces or brackets group the
choices and identify them as required or optional: {delete <filename> | upload <filename>}
Safety guidelines
Follow the safety precautions outlined in the Safety and Compliance Guide when installing and setting
up your equipment.
Important: Failure to follow these safety guidelines can result in injury or damage to the equipment. Mishandling
of the equipment voids all warranties. Read and follow safety guidelines and installation instructions carefully.
Many countries require the safety information to be presented in their national languages. If this
requirement applies to your country, consult the Safety and Compliance Guide. Before you install,
operate, or service the Riverbed products, you must be familiar with the safety information. Refer to the
Safety and Compliance Guide if you don’t clearly understand the safety information provided in the
product documentation.
Documentation and release notes
The most current version of all Riverbed documentation can be found on the Riverbed Support site at
https://support.riverbed.com.
See the Riverbed Knowledge Base for any known issues, how-to documents, system requirements, and
common error messages. You can browse titles or search for keywords and strings. To access the
Riverbed Knowledge Base, log in to the Riverbed Support site at https://support.riverbed.com.
Each software release includes release notes. The release notes list new features, known issues, and
fixed problems. To obtain the most current version of the release notes, go to the Software and
Documentation section of the Riverbed Support site at https://support.riverbed.com.
Examine the release notes before you begin the installation and configuration process.
Contacting Riverbed
This section describes how to contact departments within Riverbed.

6
Technical support - Problems installing, using, or replacing Riverbed products? Contact Riverbed
Support or your channel partner who provides support. To contact Riverbed Support, open a
trouble ticket by calling 1-888-RVBD-TAC (1-888-782-3822) in the United States and Canada or +1
415-247-7381 outside the United States. You can also go to https://support.riverbed.com.
SteelHead SD Installation Guide
Contacting Riverbed
Welcome

Professional services - Need help with planning a migration or implementing a custom design
solution? Contact Riverbed Professional Services. Email proserve@riverbed.com or go to http://
www.riverbed.com/services/index.htm.

Documentation - Have suggestions about Riverbed’s online documentation or printed materials?
Send comments to techpubs@riverbed.com.
SteelHead SD Installation Guide
7
Welcome
8
Contacting Riverbed
SteelHead SD Installation Guide
1
SteelHead SD Overview
This chapter provides an overview of the SteelHead SD. It includes these sections:

“Introducing the SteelHead SD” on page 9

“Prerequisites” on page 11

“Licensing” on page 13

“Preparing your site for installation” on page 14
This guide describes how to install the SteelHead SD appliance. It doesn’t provide detailed information
about configuring and managing SD-WAN or WAN optimization features. For detailed information, see
the SteelConnect Manager User Guide and the SteelHead Management Console User’s Guide.
Introducing the SteelHead SD
The SteelHead SD delivers the benefits of SteelHead WAN optimization and SteelConnect SD-WAN
while providing the flexibility of a single box solution. Built on the same technology as the SteelHead,
the SteelHead SD reduces bandwidth utilization and speeds up application delivery and performance.
The SteelHead SD provides SteelConnect integration with the SteelOS run-time environment on the
570-SD, 770-SD, and 3070-SD appliances.
Figure 1-1. SteelHead SD Integration
Note: You can manage your WAN optimization features using the SteelCentral Controller for SteelHead (SCC) or
individual SteelHeads using the SteelHead Management Console.
SteelHead SD Installation Guide
9
SteelHead SD Overview
Introducing the SteelHead SD
The SteelHead SD is made up of these services:

SteelConnect SD-WAN

SteelHead WAN optimization
The overall appliance management is handled by the SteelConnect Manager (SCM). The WAN
optimization service is managed by SCC and the SD-WAN service is managed by SCM.
The SteelHead SD supports only physical in-path deployments and parallel High Availability (HA)
deployments. For detailed information about configuring HA using SteelConnect, see the SteelConnect
Manager User Guide.
If the WAN optimization service fails, traffic is passed through unoptimized and the SD-WAN service
remains fully operational. If the SD-WAN service fails, the gateway blocks traffic on its path.
SteelConnect SD-WAN service
SD-WAN service upgrades and downgrades are managed via SCM. SCM pushes the new software
version for SteelConnect according to the schedule that you set up in SCM.
The SD-WAN service requires an SCM subscription license.
Figure 1-2. SteelConnect SD-WAN virtual gateway
SteelHead WAN optimization service
The SteelHead WAN optimization service is responsible for delivering bandwidth and application
latency optimization.
The WAN optimization service on the SteelHead SD supports RIOS 9.2.1-cf1 or later.
Support for RiOS upgrades via the SCC or the SteelHead Management Console will be supported at a
future date.
10
SteelHead SD Installation Guide
Prerequisites
SteelHead SD Overview
You can use the SCC to manage multiple appliances or you can manage single instances of the WAN
optimization service using the SteelHead Management Console. For details, see the SteelCentral
Controller for SteelHead User’s Guide and the SteelHead Management Console User’s Guide.
Figure 1-3. SteelHead WAN optimization
Prerequisites
This section provides information about product dependencies and compatibility.
Hardware and software requirements
The SteelHead SD is comprised of the SteelHead WAN optimization and the SteelConnect SD-WAN
services on a CX570, 770-SD, or 3070-SD appliance.
Riverbed component
Hardware and software requirements
SteelHead SD appliance
SteelHead SD supports RIOS 9.2.1-cf1 or later. You can’t
downgrade the SteelHead SD.
The CX570 and 770-SD are desktop models.
The 3070-SD requires a 19-inch (483 mm) four-post rack. For
details, see the Rack Installation Guide.
SteelHead SD Management Console
The Management Console has been tested with all versions of
Chrome, Mozilla Firefox Extended Support Release version 38,
and Microsoft Internet Explorer 11.
JavaScript and cookies must be enabled in your Web browser.
SteelConnect and SteelConnect Manager
(SCM)
SteelHead SD requires SteelConnect 2.5 or later.
SteelCentral Controller for SteelHead (SCC)
If you use the SCC to manage the WAN optimization service, you
must have SCC 9.6.x or later installed.
SteelHead SD Installation Guide
SCM supports the latest version of the Chrome browser. SCM
requires a minimum screen resolution of 1280 x 720 pixels. We
recommend a maximum of 1600 pixels for optimal viewing.
11
SteelHead SD Overview
Prerequisites
Network interface card support
The SteelHead SD supports these network interface cards (NICs) on the 3070-SD model. For details
regarding installing additional NICs, see the Network and Storage Card Installation Guide.
NICs
Size (*)
Manufacturing Part #
Orderable Part #
Four-Port 1-GbE Copper Base-T
HHHL
410-00115-01
NIC-1-001G-4TX-BP
Two-Port 1-GbE Fiber SX
HHHL
410-00113-01
NIC-1-001G-2SX-BP
Four-Port 1-GbE Fiber SX
FHHL
410-00122-01
NIC-1-001G-4SX-BP
Two-Port 1-GbE Fiber LX
HHHL
410-00114-01 NIC-1-001G-2LX-BP
Four-Port 1-GbE Fiber LX
FHHL
410-00123-01
NIC-1-001G-4LX-BP
Two-Port 10-GbE Fiber SR
FHHL
410-00302-03
NIC-1-010G-2SR-BP
Two-Port 10-GbE Fiber LR
FHHL
410-00301-03
NIC-1-010G-2LR-BP
* HHHL = Half Height, Half Length, FHHL = Full Height, Half Length
Note: Although these are bypass NICs traditional to SteelHeads, bypass functionality isn’t supported on the
SteelHead SD.
Firewall requirements
With SteelHead SD, there’s no need to set up an elaborate firewall or forwarding rules to establish the
dynamic full mesh VPN or to gain connectivity to the cloud. After you register an appliance, it receives
its assigned configuration automatically in SCM.
For the SteelHead SD to connect with the SteelConnect virtual gateway, firewalls need to allow
Riverbed TCP options. The SteelHead SD can’t locate a gateway if a firewall strips out the TCP options
from optimized packets. You can configure the firewall to ignore or prevent stripping out the TCP option.
The Riverbed Support site (https://support.riverbed.com) has Knowledge Base articles that show
example configurations to allow discovery through different firewall types.
Ethernet network compatibility
The SteelHead SD appliance supports these Ethernet networking standards.
Ethernet standard
IEEE standard
Ethernet Logical Link Control (LLC)
IEEE 802.2 - 1998
Fast Ethernet 100BASE-TX
IEEE 802.3 - 2008
Gigabit Ethernet over Copper 1000BASE-T (All copper interfaces are autosensing for
speed and duplex.)
IEEE 802.3 - 2008
Gigabit Ethernet over Fiber 1000BASE-SX (LC connector)
IEEE 802.3 - 2008
Gigabit Ethernet over Fiber 1000BASE-LX
IEEE 802.3 - 2008
Gigabit Ethernet over Fiber 10GBASE-LR Single Mode
IEEE 802.3 - 2008
Gigabit Ethernet over 10GBASE-SR Multimode
IEEE 802.3 - 2008
12
SteelHead SD Installation Guide
Licensing
SteelHead SD Overview
SNMP-based management compatibility
SteelConnect SD-WAN service supports proprietary MIBs accessible through SNMPv2 and SNMPv3.
For detailed information about the SD-WAN service MIB, see the SteelConnect Manager User Guide.
The SteelHead WAN optimization supports proprietary MIBs accessible through SNMP, SNMPv1,
SNMPv2c, and SNMPv3, although some MIB items might only be accessible through SNMPv2 and
SNMPv3. For detailed information about the WAN optimization service MIB, see the SteelHead
Management Console User’s Guide.
Licensing
The SteelHead SD appliance requires licenses for the SteelConnect SD-WAN and SteelHead WAN
optimization services.
SteelConnect SD-WAN service licensing
The SteelConnect SD-WAN service requires a gateway management subscription license that is
managed by SCM.
After purchasing the SteelHead SD, you will receive an email with a token for the SD-WAN service
license. The token can be redeemed in the SCM and in return adds hardware nodes and licenses to your
organization. Each token is redeemable only once.
To redeem the SD-WAN service token
1. Open the email you received from Riverbed and copy the token.
2. Connect to SCM.
3. Choose Organization > Licenses.
4. Click Redeem Token and paste the token into the text box.
5. Click Submit.
SteelHead WAN optimization service licensing
The SteelHead WAN optimization service requires an MSPEC license. Once you connect the SteelHead
SD to the network, the system automatically contacts the Riverbed Licensing Portal to retrieve and
install license keys for the WAN optimization service.
If automatic licensing fails, go to the Riverbed Licensing Portal at https://licensing.riverbed.com/
index.htm and follow the instructions for retrieving your licenses. The licensing portal requires a unique
product such as a serial number, a license request key (activation code), or a token, depending on the
product. Online instructions guide you through the process.
To view licenses on a new SteelHead SD

Connect the new SteelHead to the network. The SteelHead must have access to the internet.
SteelHead SD Installation Guide
13
SteelHead SD Overview
Preparing your site for installation
The SteelHead automatically contacts the Riverbed Licensing Portal, which downloads and installs
the licenses. The Management Console Licensing page displays a success message, or the Alarm
Status page reports an actionable error message.
To replace expired licenses

Purchase new downloadable licenses to replace the expired license.
At the time of the next scheduled automatic license fetch, the SteelHead automatically contacts
the Riverbed License Portal and downloads the new licenses. The Management Console Licensing
page displays a success message or the Alarm Status page reports an actionable error message.
You don’t need to delete the expired license. The system uses the license with the latest expiration
date.
To fetch a license on demand
1. In the Management Console, choose Administration > Maintenance: Licenses to display the
Licenses page.
2. Click Fetch Updates Now.
The Management Console Licensing page displays a success message, or the Alarm Status page
reports an actionable error message.
Note: Only administrator users can fetch and install licenses. For detailed information on administrator and
monitor users, see the SteelHead Management Console User’s Guide.
Because each license key is generated for a specific appliance, ensure that you install your license key
on the appropriate appliance.
To install a license using the CLI
1. Connect to the CLI of the appliance and enter configuration mode.
For details see the Riverbed Command-Line Interface Reference Manual.
2. At the system prompt, enter these commands:
license install <the license key you retrieved from Riverbed Licensing Portal>
write memory
To install a license using the Management Console
1. Connect to the Management Console of the appliance.
For details, see the SteelHead Management Console User’s Guide.
2. Choose Administration > Maintenance: Licenses to display the Licenses page.
Preparing your site for installation
Before you begin, make sure your shipment contains all the items listed on the packing slip. If it doesn’t
please contact your sales representative.
14
SteelHead SD Installation Guide
Preparing your site for installation
SteelHead SD Overview
Your site must meet these requirements:

It is a standard electronic environment where the ambient temperature doesn’t exceed 40ºC
(104ºF) and the relative humidity doesn’t exceed 80% (noncondensing).

Ethernet connections are available within the standard Ethernet limit.

There is space on a standard four-post 19-inch Telco-type rack. For details about installing the
SteelHead in a rack, see the Rack Installation Guide or the printed instructions that were shipped
with the system. (If your rack requires special mounting screws, contact your rack manufacturer.)

A clean power source is available, dedicated to computer devices and other electronic equipment.
The appliance is completely assembled, with all the equipment parts in place and securely fastened.
The appliance is ready for installation with no further assembly is required.
SteelHead SD Installation Guide
15
SteelHead SD Overview
16
Preparing your site for installation
SteelHead SD Installation Guide
2
Installing the SteelHead SD
This chapter describes how to install the SteelHead SD. It includes these sections:

“Configuring the SteelConnect gateway” on page 17

“Obtaining the in-path interface IP address” on page 22

“Obtaining the in-path gateway IP address” on page 22

“Cabling the SteelHead SD appliance” on page 23

“Identifying the primary IP address for the SteelHead” on page 26

“Configuring the in-path interface and default gateway in the SteelHead” on page 29

“Provisioning a SteelHead SD without a DHCP server using a USB drive” on page 30
The SteelHead SD appliance consists of the SteelHead WAN optimization service and the SteelConnect
SD-WAN service through a gateway.
This chapter describes how to perform the initial installation for the SteelHead SD appliance. It doesn’t
provide detailed information about configuring and managing SD-WAN or WAN optimization features.
For detailed information, see the SteelConnect Manager User Guide and the SteelHead Management
Console User’s Guide.
Configuring the SteelConnect gateway
This section describes how to configure the SteelConnect gateway.
Defining an organization
SCM uses these terms to describe the network:

Organization - A company representing an end customer. You can assign administrative rights to
individual administrator accounts per organization. You can also manage appliances and licensing
per organization.

Site - A physical location of one or more office buildings, a hosting center, or a cloud location that
make up the organization. A site houses a SteelConnect gateway and uses a permanent DNS alias.
Every site requires a local network zone and at least one internet uplink. The zone is automatically
created when you create a site.

Zone - Layer 2 network segments or VLANs within sites that are VLAN-tagged traffic. A zone always
has a VLAN tag assigned to it.
SteelHead SD Installation Guide
17
Installing the SteelHead SD
Configuring the SteelConnect gateway
The SCM is delivered with a default organization and site. You add your company name and basic
information for your organization or change and customize this information later. For details about
defining an organization, network, sites, zones, and uplinks, see the SteelConnect Manager User Guide.
To log in to SCM
1. Using SCM URL emailed to you, log in to SCM using the default username admin and the default
password pppp.
After a successful log in, you're greeted by the dashboard.
Figure 2-1. SCM Dashboard
The dashboard map updates dynamically to keep an accurate visual overview of your network. You can
always refer to the dashboard map as you define your topology to make sure the deployment is
accurate.
To add sites
2. Choose Network Design > Sites.
3. Click New Site to expand the page.
4. Add a site tag: for example, headquarters.
5. Add the site’s location: for example, San Francisco.
6. Type the site’s address, country, and time zone.
7. Click Submit.
8. Repeat the steps for the remaining sites in your network topology.
A zone is automatically created when you create a site. You can modify a zone now or wait until you have
completed the installation process. For details, see the SteelConnect Manager User Guide.
18
SteelHead SD Installation Guide
Configuring the SteelConnect gateway
Installing the SteelHead SD
Adding shadow appliances
SCM stores all configurations, including your existing and future network plans. This means you can
either add an appliance when you physically have it or you can preplan and configure an appliance by
adding a shadow appliance and later drop the physical appliance into the topology with no further
configuration.
To add shadow appliances
1. Choose Appliances > Gateways.
2. Click Add appliances and select Create Shadow Appliance.
3. Select 570-SD Gateway, 770-SD Gateway, or 3070-SD Gateway from the model drop-down list.
4. Select the site where you want to deploy the shadow appliance from the site drop-down list.
5. Click Submit.
6. Repeat these steps for each of your appliances.
After adding the virtual gateways, the SCM automatically connects them using AutoVPN to create
secure VPN tunnels. Next, you’ll register the gateways to transform them from shadow appliances
to physical appliances.
7. Choose Network Design > Uplinks to see that SCM has automatically assigned uplinks to the new
gateways.
Before deploying the hardware, you can configure other SteelConnect features now or wait until later.
For details about configuring SteelConnect features, see the SteelConnect Manager User Guide.
Registering appliances
Now you register the physical devices to transform them from shadow appliances into physical
appliances using the SteelConnect gateway serial number.
The appliance is shipped with a label that has the SteelConnect gateway serial number. The
SteelConnect gateway serial number always begins with the prefix XN. Find that serial number and MAC
address on the appliance and write them down. (You will use the MAC address later in these
procedures.)
SteelHead SD Installation Guide
19
Installing the SteelHead SD
Configuring the SteelConnect gateway
The 3070-SD label is located on top of the appliance. The 570-SD and 770-SD labels are located on the
side of the appliance.
Figure 2-2. 3070 SteelConnect gateway serial number and MAC address
Important: Make sure you register your appliances using the SteelConnect serial number. If you don’t, the SCM
won’t autodetect the appliance when you register them.
To register a hardware appliance
1. Choose Appliances > Gateways to view the shadow appliances you just created.
Figure 2-3. Example of a shadow appliance
2. Select the shadow appliance to expand the page.
3. Choose Actions > Register hardware.
Figure 2-4. Registering appliances
4. Type the serial number. Make sure you use the SteelConnect gateway serial number located on your
appliance. The gateway serial number begins with XN.
5. Click Submit.
6. Repeat the steps to register the remaining appliances.
20
SteelHead SD Installation Guide
Configuring the SteelConnect gateway
Installing the SteelHead SD
The provisioning server hands off the appliance when it connects into the particular organization
and site. It gives the appliance its configuration, brings it online, performs all firmware upgrades,
and realizes your design on the appliance in the real world.
Configuring the LAN-zone uplink
Next, you verify the ports and configure the LAN-zone uplinks. The LAN-zone uplink is configured as an
uplink for the SteelHead WAN optimization service.
By default, the LAN port is disabled on the SteelHead SD appliances unless it is explicitly enabled. If
you don't enable the LAN zone port of the gateway, SD-WAN won’t see either the SteelHead WAN
optimization service or the clients on the LAN side of the network.
To configure the LAN zone uplink
1. Choose Ports and select the site and appliance from the drop-down list. The ports for the appliance
are displayed.
2. Click the LAN port you want to configure to expand the page.
Figure 2-5. Configuring the LAN zone port
3. Select Singlezone or Multizone for the Port mode.
4. Select the zone from the drop-down list
5. Click Submit.
SteelHead SD Installation Guide
21
Installing the SteelHead SD
Obtaining the in-path interface IP address
Next you need to obtain the IP addresses for the in-path interface and gateway from SCM so that you
can configure WAN optimization on the virtual SteelHead.
Obtaining the in-path interface IP address
You use the LAN-zone network IP address in SCM to configure the in-path interface on the virtual
SteelHead.
To obtain the in-path interface IP address
1. In SCM, choose Network Design > Zones and select the device to expand the page.
Figure 2-6. Obtaining the LAN IP address for the in-path interface
The LAN zone of the network is displayed under the IP tab. If the network IP address is
172.12.1.0/24, you can assign any IP address from 172.12.1.1 to 172.12.1.254 for the SteelHead inpath interface.
2. Write down the IP address. You will use this address when you configure the inpath0_0 interface for
WAN optimization.
Next you obtain the LAN-zone gateway IP address to configure the in-path gateway on the virtual
SteelHead.
Obtaining the in-path gateway IP address
You use the LAN-zone gateway IP address in SCM to configure the in-path gateway on the SteelHead.
To obtain the in-path gateway IP address
1. To obtain the IP address for the default gateway, choose Appliances and select the device to expand
the page.
22
SteelHead SD Installation Guide
Cabling the SteelHead SD appliance
Installing the SteelHead SD
2. Click the IPs tab.
Figure 2-7. Obtaining the LAN-zone IP address for the gateway
The in-path gateway IP address for the SteelHead is listed under the Zone gateway.
3. Write down the IP address. You will use address this when you configure the in-path gateway for the
inpath0_0 interface for WAN optimization.
Cabling the SteelHead SD appliance
In SteelHead deployments you typically have a one-to-one correlation in terms of LAN and WAN ports,
with the SteelHead SD, think in terms of LAN ports for the virtual SteelHead and WAN ports for the
SteelConnect virtual gateway. This will help you as you go forward in configuring the SteelHead SD.
You cable WAN ports (for example, WAN0_1, WAN0_2) to the corresponding networks that represent
your uplinks. You will only need to connect one LAN port, for example LAN0_0.
SteelHead SD Installation Guide
23
Installing the SteelHead SD
Cabling the SteelHead SD appliance
WAN ports require an IP address as they will represent the uplink configuration. The Steelhead in-path
interface must have an IP address and VLAN ID for the zone it is on.
Figure 2-8. 570-SD and 770-SD port locations
Figure 2-9. 3070-SC port locations
24
SteelHead SD Installation Guide
Cabling the SteelHead SD appliance
Installing the SteelHead SD
Port definitions
Port
Description
Primary
The management interface that enables you to connect to the SteelHead.
AUX
This port is not used for this release.
WANX_X
Connect the WAN port to a WAN router using a crossover cable.
For 570-SD and 770-SDs, the default internet access port is WAN0_0 or WAN0_1.
For 3070-SD, the default internet access port is WAN2_0 or WAN3_0.
On the 570-SD and 770-SD, the ports are labeled as WAN0_0 and WAN0_1. On the
3070-SD, the appliance uses the NIC in slot 3 for the default interface names so the
ports are labeled WAN3_0 and WAN3_1. If you ordered a custom NIC instead of the
default NIC for the appliance, then the NIC is installed in slot 2 and your NIC ports
will appear in SCM as WAN2_0 and WAN2_1.
LANX_X
Connect the LAN port to the LAN switch using a straight-through cable.
For 570-SD and 770-SDs, the ports are labeled as LAN0_0 and LAN0_1. On the 3070SD, the appliance uses the NIC in slot 3 for the default interface names so the ports
are labeled LAN3_0 and LAN3_1. If you ordered a custom NIC instead of the default
NIC for the appliance, then the NIC is installed in slot 2 and your NIC ports will
appear in SCM as LAN2_0 and LAN2_1.
Port mappings 570, 770
SteelHead SD
Interface
lan0_0 <->wan0_0
inpath0
lan0_1<->wan0_1
inpath1
Port mappings 3070
SteelHead SD
Interface
lan0_1 <->wan0_1
inpath0
lan2_0 <->wan2_0
inpath1
lan2_1 <->wan2_1
inpath2
lan3_0 <->wan3_0
inpath3
lan3_1 <->wan3_1
inpath4
To cable the SteelHead SD
1. Plug the straight-through cable into the Primary port of the SteelHead and a DHCP port on a LAN
switch. This must be a DHCP port that connects to a DHCP server. If you are not using a DHCP server,
see “Provisioning a SteelHead SD without a DHCP server using a USB drive” on page 30.
SteelHead SD Installation Guide
25
Installing the SteelHead SD
Identifying the primary IP address for the SteelHead
Figure 2-10. Connecting the Primary port to the LAN switch
2. Plug the straight-through cable into the LAN port of the SteelHead and the LAN port on the switch.
Figure 2-11. Connecting the LAN switch to the LAN port
3. Using the provided crossover cable, plug the cable into the WAN port of the SteelHead and the WAN
router. This must be a crossover cable.
Figure 2-12. Connecting the WAN port to the WAN router
Identifying the primary IP address for the SteelHead
There are three ways to identify the primary IP address of the SteelHead:

When the SCC is used to manage SteelHeads - If you’re using the SCC to manage the WAN
optimization service, you can obtain the primary IP address for each device in your network. SCC
automatically registers all SteelHeads it detects in your network and provides the IP address for
each in the Appliances page. For details on connecting to SCC, see the SteelCentral Controller for
SteelHead User’s Guide.

When an external server acts as DHCP server - Obtain the MAC address from the appliance and
search for the primary IP address on the DHCP server console. You can find the MAC address on the
appliance label (see Figure 2-2) or you can view it in SCM. To view the MAC address in SCM, choose
Ports and select the Primary port for the device. The MAC address is listed under the Info-Mode
tab.
26
SteelHead SD Installation Guide
Identifying the primary IP address for the SteelHead

Installing the SteelHead SD
When the SteelConnect gateway is the DHCP server - You can set the SteelConnect gateway to act
as a DHCP server and identify the primary IP address for the SteelHead in the SCM. For details, see
instructions below.
Identifying the primary IP address for SteelHead when the SteelConnect
gateway acts as DHCP server
In this example the SteelHead LAN and Primary ports are connected to same switch and the
SteelConnect gateway acts as DHCP server providing the primary IP address to of SteelHead.
To configure the gateway to act as a DHCP server
1. When you cable the SteelHead appliance, make sure you connect the LAN port and Primary port to
the same switch.
2. To set the gateway to act as a DHCP server, choose Networks Design > Zones and click the Gateways
tab.
3. Under Gateway assignments click Edit. (You can also add a new assignment if necessary.)
Figure 2-13. Editing gateway to act as DHCP server
SteelHead SD Installation Guide
27
Installing the SteelHead SD
Identifying the primary IP address for the SteelHead
4. Make sure the DHCP/RA Server is ON. (It will be green.)
Figure 2-14. DHCP/RA server is on
5. Choose Network Design > Ports to associate the LAN port to the appropriate Zone.
Figure 2-15. Associating LAN port
6. There are two ways to connect, one is through the switch and other is back-to-back:
– Through the switch - connect the LAN port and Primary port to the switch port and configure in
the same VLAN.
– Back-Back - connect the LAN port directly to the Primary port.
7. To identify the primary IP address for the SteelHead, choose Visibility > DHCP Leases:
– The MAC address/IP address will be available for the Primary port.
28
SteelHead SD Installation Guide
Configuring the in-path interface and default gateway in the SteelHead
Installing the SteelHead SD
– In the figure below, the primary IP address is 172.16.9.254.
Figure 2-16. DHCP leases showing the primary IP address
Configuring the in-path interface and default gateway in the
SteelHead
Next, you configure the in-path interface and default gateway on the SteelHead.
To configure the in-path interface and the default gateway for the WAN optimization service
1. Using the Primary IP address you obtained from SCC or the DHCP server, enter it in the location box
of your web browser using HTTPS. The sign in page for the SteelHead Management Console is
displayed.
2. Specify the default user login (admin) and password (password).
For detailed information about monitor users and role-based management users, see the
SteelHead Management Console User’s Guide.
3. Click Sign In to display the Dashboard.
4. Choose Networks > Networking: In-Path Interfaces.
Figure 2-17. In-Path Interfaces page
SteelHead SD Installation Guide
29
Installing the SteelHead SD
Provisioning a SteelHead SD without a DHCP server using a USB drive
5. Select the interface to expand the page.
Figure 2-18. Configuring the in-path interface
6. Type the IP address that you obtained from SCC. For details, see “Obtaining the in-path interface IP
address” on page 22.
7. Type the subnet mask address.
8. Type the IP address that you obtained in SCM for the default gateway. For details, see “Obtaining the
in-path gateway IP address” on page 22.
9. Click Apply.
10. You can refine your in-path WAN optimization settings using the SteelHead Management Console.
For details, see the SteelHead Management Console User’s Guide.
11. If you have not already done so, return to SCM and complete your gateway configuration. For details,
see the SteelConnect Manager User Guide.
Provisioning a SteelHead SD without a DHCP server using a USB
drive
Adding SteelHead SD to your network requires the appliance to contact the SteelConnect Manager,
which provides the initial configuration. In a scenario where no DHCP server is available in the existing
network, you can use offline provisioning.
30
SteelHead SD Installation Guide
Provisioning a SteelHead SD without a DHCP server using a USB drive
Installing the SteelHead SD
You can set up the configuration on SCM, even if the SteelHead SD is currently not present at the related
site.
You’ll need the serial number of the SteelHead SD to create an offline provisioning configuration file.
To provision a SteelHead SD without a DHCP server
1. Log in to SteelConnect Manager.
2. Choose Network Design > Sites > Add Site(s) > New site.
3. Specify at least the site tag, name, and city.
4. Click Submit.
Figure 2-19. Creating a site
5. Choose Network Design > Uplinks and click New Uplink.
6. Select the uplink for the new site to expand the page.
7. Select Type and select Static IP from the drop-down list.
8. Specify the IP address using this format x.x.x.x/xx.
9. Specify a valid gateway address for the static IP uplink.
SteelHead SD Installation Guide
31
Installing the SteelHead SD
Provisioning a SteelHead SD without a DHCP server using a USB drive
10. Click Submit. Repeat these steps for additional uplinks.
Figure 2-20. Creating a static IP uplink
To assign uplinks to the WAN ports of the appliance
1. Choose Ports > Sites and select the site you just created.
2. Under Appliances, select the SteelHead SD appliance to display the ports.
3. Select the WAN port you want to assign the uplink to. The page expands to display the port
information.
4. Under Info/Mode tab, select Port Mode > Uplink and select the Static IP uplink from the drop-down
list.
5. Click Submit. The WAN port will display the uplink you assigned to it.
Figure 2-21. Assigning the uplink to the WAN port
Now you are ready to download the configuration file (config file). Adhere to these guidelines:
32
SteelHead SD Installation Guide
Provisioning a SteelHead SD without a DHCP server using a USB drive
Installing the SteelHead SD

The config filename must not be modified.

The USB stick must be in FAT32 or ext3 format. If your USB has a different format, there are
numerous instructions on the internet describing how to format a USB.

Make sure you have all the sites and LAN/WAN ports configured with the appropriate sites, zones,
and uplinks before you download the config file from the SCM.
To download the config file to the USB stick
1. Choose Appliances > Add Appliances > Register Hardware Appliance.
2. Enter the serial number of the SteelHead SD and select the site you want to deploy the appliance.
3. Select the new SteelHead SD, and click Actions, and select Download config from the drop-down
list.
Figure 2-22. Downloading the config file
The system downloads a configuration file (config file) named with the SteelHead SD serial
number. The config file is downloaded to your laptop or computer, the default location will be
depend on your browser settings.
4. Copy the config file to the root directory on a FAT32 or ext3 formatted USB stick. If your USB has a
different format, there are numerous instructions on the internet describing how to format a USB.
5. Deploy the SteelHead SD on the site and power on the appliance. Wait at least 30 seconds until the
new appliance powers up correctly before plugging in the USB stick.
6. Plug in the USB stick to install the configuration setting in the config file. The SteelHead SD
connects to SCM with the configuration.
7. Reboot the SteelHead SD.
SteelHead SD Installation Guide
33
Installing the SteelHead SD
34
Provisioning a SteelHead SD without a DHCP server using a USB drive
SteelHead SD Installation Guide
A
Appliance Technical Specifications
This appendix describes the status lights, ports, and the technical and environmental specifications for
the SD-WAN-enabled 570-SD, 770-SD, and 3070-SD appliances. It includes these sections:

“SteelHead SD 570-SD and 770-SD specifications” on page 35

“SteelHead SD 3070-SD specifications” on page 38
SteelHead SD 570-SD and 770-SD specifications
This section describes the status lights, ports, and the technical and environmental specifications.
Status lights and ports
illustrates the status light and port locations.
Figure A-1. Front panel
SteelHead SD Installation Guide
35
Appliance Technical Specifications
SteelHead SD 570-SD and 770-SD specifications
Figure A-2. Back panel
This table summarizes the system LEDs.
LED
Status
System
Healthy = Blue
Degraded = Yellow
Critical = Red
Power Off = None
Power Button LED
System Off = No Light
Standby Mode = Yellow
Power On = Blue
Hard Drive LED
Activity = Blinks Blue
Failed Disk = Orange
Primary LED
Left LED
Link = Green
Activity = Blinks Green
Right LED
GB = Yellow
100 MB = Green
10 MB = No Light (with link on left LED)
LAN/WAN LEDs
Left LED
Link = Green
Activity = Blinks Green
Bypass/Disconnect = Yellow
Right LED
GB = Yellow
100 MB = Green
10 MB = No Light (with link on left LED)
36
SteelHead SD Installation Guide
SteelHead SD 570-SD and 770-SD specifications
Appliance Technical Specifications
Technical specifications
This table summarizes the technical specifications for the systems. The SteelHead SD supports all
available network interface cards (NICs) for the 570-SD and 770-SD. For details, see the Network and
Storage Card Installation Guide.
Specification
570-SD desktop L-M-H
770-SD desktop L-M-H
Power
(typical)
45 W
50 W
VA
(max)
63.8
66.8
BTU
145 BTU
165 BTU
Hard disk
1 x 320 GB 2.5” HDD
1 x 80 GB SSD
1 x 320 GB 2.5” HDD
1 x 160 GB SSD
RAM
8 GB
12 GB
Data store
70 GB SSD
150 GB SSD
Dimensions
(LxWxH)
13 x 8x 1.73 in.
13 x 8 x 1.73 in.
(330 x 204 x 44 mm)
(330 x 204 x 44 mm)
Weight
(without
packaging)
5.5 lb
2.4 kg
5.5 lb
2.4 kg
Voltage
frequency
100—240V
50 —60 Hz
100—240V
50—60 Hz
PSU
Single 84 W
External
Single 84 W
External
100—240Vac, 50/60Hz,
2-1 A
100—240Vac, 50/60Hz,
2-1 A
4/4
4/4
Included
ports/max no.
ports
SteelHead SD Installation Guide
37
Appliance Technical Specifications
SteelHead SD 3070-SD specifications
Environmental specifications
This table summarizes the environmental requirements for the systems.
Specification
570-SD desktop L-M-H
770-SD desktop L-M-H
Operating acoustic
45 dBA sound pressure (typical)
45 dBA sound pressure (typical)
Temperature (operating)
0º— 45º C
32º—113º F
0º—45º C
32º—113º F
Temperature (storage)
-40º—65º C
-40º—149º F
-40º—65º C
-40º—149º F
Relative humidity
20%—80%
noncondensing
20%—80%
noncondensing
Storage humidity
5%—95%
noncondensing
5%—95%
noncondensing
SteelHead SD 3070-SD specifications
This section describes the status lights, ports, technical and environmental specifications. The
SteelHead SD supports all available network interface cards (NICs) for the 3070-SD. For details, see the
Network and Storage Card Installation Guide.
38
SteelHead SD Installation Guide
SteelHead SD 3070-SD specifications
Appliance Technical Specifications
Status lights and ports
figures illustrate the status light and port locations.
Figure A-3. 3070-SD front panel with LEDs and buttons
Figure A-4. 3070-SD back panel
Note: By default, the SteelHead 3070-SD ships with a bypass card in slot 3. The default interface names are
LAN3_0, WAN3_0, LAN3_1, and WAN3_1. This appliance doesn’t have an inpath0_0 interface as found on earlier
appliances and by default the 3070-SD uses inpath3_0 and inpath3_1.
SteelHead SD Installation Guide
39
Appliance Technical Specifications
SteelHead SD 3070-SD specifications
This table summarizes the appliance LEDs and buttons.
Reference
LED/button
Description
1
System ID Button with
Integrated LED
Maintenance = Blue
Toggles the integrated ID LED and the blue server board ID LED on
and off. The System ID LED identifies the system for maintenance
when installed in a rack of similar server systems. You can also
remotely turn on and turn off the System ID LED using the IPMI
“Chassis Identify” command, which causes the LED to blink for 15
seconds.
A duplicate System ID LED is on the back of the appliance to the left
of the video port.
2
NMI Button
Pressing the NMI button puts the appliance in a halt state and issues
a nonmaskable interrupt (NMI). This helps when performing
diagnostics for a given issue where a memory download is necessary
to determine the cause of the problem. To prevent an inadvertent
system halt, the NMI button is located behind the front control panel
faceplate and is only accessible with the use of a small tipped tool
such as a pin or paper clip.
Network Activity LED
Link = Green
Activity = Blinks Green. The blink rate is consistent with the amount
of network activity.
3
10
Primary
Auxiliary
5
System Cold Reset Button
Pressing this button reboots the appliance.
6
System Status LED
The System Status LED shows the current health of the server
system.
The appliance doesn’t use the LEDs 4 and 9.
Healthy = Green
Degraded = Yellow
Critical = Blinks Yellow
A duplicate System ID LED is on the back of the appliance to the right
of the AUX port.
7
Power Button with
Integrated LED
System On = Green
System Off = No Light
8
Drive Activity
Activity = Blinks Green
LEDs on Disk Drives
Activity LED
Read/Write Activity = Blinks Green
Disk Fault LED
Failed Disk = Orange
RAID Rebuild = Blinks Orange
LEDs on Primary and AUX
Ports
Left LED
Link = Green
Activity = Blinks Green
Right LED
10 MB/sec data rate = No Light (with link on left LED)
100 MB/sec data rate = Green
1000 MB/sec data rate = Yellow
40
SteelHead SD Installation Guide
SteelHead SD 3070-SD specifications
Reference
Appliance Technical Specifications
LED/button
Description
LEDs on Default 4-Port
Copper Bypass Card
Link/Activity LED
Link = Green
Activity = Blinks Green
Speed/Bypass/Disconnect LED
1000Mbit/s = Yellow
100Mbit/s = Green
10Mbit/s = Off
Bypass = Blinks Green
Disconnect = Blinks Yellow
LEDs on Power Supply
Power On and Healthy = Green
Power Off = Off
Standby = Blinks Green
Power Lost But Second Power Supply Has Power = Amber
Power On With Warning Events (high temperature, high power, high
current, slow fan) = Blinks Amber
Technical Specifications
This table summarizes the technical specifications for the systems.
Specification
Form factor
1U
Hard disk
2 x 1000 GB, 2 SSD x 160
Data store
320 GB SSD
RAM
16 GB
Dimensions (LxWxH)
25.21 x 17.24 x 1.7 in.
(640.4 x 438 x 43.2 mm)
Weight (without packaging)
27 lb (12.2 kg)
Voltage frequency
100—127V, 200—240V
PSU
2 x 450 W
100—127Vac/8A, 50/60Hz
200—240Vac/4A, 50/60Hz
PCI-e expansion slots
2
Included ports/max no. ports
4/12
SteelHead SD Installation Guide
41
Appliance Technical Specifications
SteelHead SD 3070-SD specifications
Power requirements and consumption
This table summarizes the power specifications for the systems. The systems are rated at the following
power characteristics when operating at nominal AC input voltages (120 V and 230 V).
System
3070-SD
3070-SD
Configuration
All (L/M/H)
All (L/M/H)
PSU type
2 x 450 W
2 x 450 W
AC input
120 V
230 V
Max. amps.
1.54
.76
Max. watts
152.8
145.4
Typical watts
122
116
Max VA
154
147
Power factor
98.96
99.16
BTU (typical)
417
397
Environmental specifications
This table summarizes the environmental requirements for the systems.
Specification
Environmental requirements
Operating acoustic
7.0 BA sound power (typical)
52 dBa sound pressure
Temperature (operating)
10º - 35º C (50° - 95 F
Temperature (storage)
-40º - 158ºF (-40º - 70ºC)
Relative humidity
50% to 90%, noncondensing with a maximum wet bulb of
28ºC (at temperatures from 25º to 35ºC)
42
SteelHead SD Installation Guide
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising