Document Outline

• Welcome Screen
• Contents
• Figures
• Tables
• New Features
• Preface
  • Who Should Use This Guide
  • What You’ll Find in This Guide
    • Part 1: Basic Switching & Routing
    • Part 2: Web Switching Fundamentals
    • Part 3: Advanced Web Switching
  • Typographic Conventions
  • Contacting Us
• Part 1: Basic Switching & Routing
  • Basic IP Routing
    • IP Routing Benefits
    • Routing Between IP Subnets
    • Example of Subnet Routing
      • Using VLANs to Segregate Broadcast Domains
    • Defining IP Address Ranges for the Local Route Cache
    • Border Gateway Protocol (BGP)
      • Internal Routing Versus External Routing
      • Forming BGP Peer Routers
      • BGP Failover Configuration
    • DHCP Relay
      • DHCP Overview
      • DHCP Relay Agent Configuration
  • VLANs
    • VLAN ID Numbers
    • VLAN Tagging
    • VLANs and the IP Interfaces
    • VLAN Topologies and Design Issues
      • Example1: Multiple VLANS with Tagging Adapters
      • Example2: Parallel Links with VLANs
    • VLANs and Spanning Tree Protocol
      • Bridge Protocol Data Units (BPDUs)
        • Determining the Path for Forwarding BPDUs
      • Multiple Spanning Trees
        • Why Do We Need Multiple Spanning Trees?
        • Example of a Four-Switch Topology with a Single Spanning Tree
        • Switch-Centric Spanning Tree Protocol
        • VLAN Participation in Spanning Tree Groups
        • Configuring Multiple Spanning Tree Groups
    • VLANs and Default Gateways
      • Segregating VLAN Traffic
      • Configuring the Local Network
      • Configuring Default Gateways per VLAN
    • VLANs and Jumbo Frames
      • Isolating Jumbo Frame Traffic using VLANs
      • Routing Jumbo Frames to Non-Jumbo Frame VLANs
  • Port Trunking
    • Overview
      • Statistical Load Distribution
      • Built-In Fault Tolerance
    • Port Trunking Example
  • OSPF
    • OSPF Overview
      • Types of OSPF Areas
      • Types of OSPF Routing Devices
      • Neighbors and Adjacencies
      • The Link-State Database
      • The Shortest Path First Tree
      • Internal Versus External Routing
    • OSPF Implementation in WebOS
      • Configurable Parameters
      • Defining Areas
        • Assigning the Area Index
        • Using the Area ID to Assign the OSPF Area Number
        • Attaching an Area to a Network
      • Interface Cost
      • Electing the Designated Router and Backup
      • Summarizing Routes
      • Default Routes
      • Virtual Links
      • Router ID
      • Authentication
      • Host Routes for Load Balancing
      • OSPF Features Not Supported in This Release
    • OSPF Configuration Examples
      • Example 1: Simple OSPF Domain
      • Example 2: Virtual Links
        • Configuring OSPF for a Virtual Link on Switch #1
        • Configuring OSPF for a Virtual Link on Switch #2
        • Other Virtual Link Options
      • Example 3: Summarizing Routes
      • Example 4: Host Routes
        • Configuring OSPF for Host Routes on Web Switch #1
        • Configuring OSPF for Host Routes on Web Switch 2
      • Verifying OSPF Configuration
  • Secure Switch Management
    • Setting Allowable Source IP Address Ranges
    • Secure Switch Management
      • Authentication and Authorization
      • Requirements
    • RADIUS Authentication and Authorization
      • RADIUS Authentication Features in Web OS
      • Web Switch User Accounts
    • Secure Shell and Secure Copy
      • Encryption of Management Messages
      • SCP Services
      • RSA Host and Server Keys
      • Radius Authentication
      • SecurID Support
        • Configuring SSH/SCP
        • Some Supported Client Commands
    • Port Mirroring
• Part 2: Web Switching Fundamentals
  • Server Load Balancing
    • Understanding Server Load Balancing
      • Identifying Your Network Needs
      • How Server Load Balancing Works
    • Implementing Basic Server Load Balancing
      • Network Topology Requirements
      • Configuring Server Load Balancing
      • Additional Server Load Balancing Options
        • Supported Services and Applications
        • Disabling and Enabling Real Servers
        • IP Address Ranges Using imask
        • Health Checks for Real Servers
        • Configuring Multiple Services
        • Metrics for Real Server Groups
        • Weights for Real Servers
        • Connection Time-outs for Real Servers
        • Maximum Connections for Real Servers
        • Backup/Overflow Servers
    • Extending SLB Topologies
      • Proxy IP Addresses
      • Mapping Ports
        • Mapping a Virtual Server Port to a Real Server Port
        • Mapping a Single Virtual Server Port to Multiple Real Server Ports
      • Direct Server Interaction
        • Using Direct Server Return
        • Using Direct Access Mode
        • Assigning Multiple IP Addresses
        • Using Proxy IP Addresses
        • Mapping Ports
        • Monitoring Real Servers
      • Delayed Binding
        • Configuring Delayed Binding
        • Detecting SYN Attacks
    • Load Balancing Special Services
      • IP Server Load Balancing
      • FTP Server Load Balancing
        • FTP Network Topology Restrictions
        • Configuring FTP Server Load Balancing
      • Domain Name Server (DNS) Load Balancing
        • Preconfiguration Tasks
        • Configuring UDP-based DNS Load Balancing
        • Configuring TCP-based DNS Load Balancing
      • Real Time Streaming Protocol SLB
        • How RTSP Server Load Balancing Works
        • RTSP Implementation
        • Configuring RTSP Load Balancing
      • Wireless Application Protocol SLB
        • Using RADIUS Static Session Entries
        • Using RADIUS Snooping
        • Preconfiguring WAP Server Load Balancing
        • Enabling Wireless Application Protocol SLB
        • Configuring RADIUS Snooping
      • Intrusion Detection System Server Load Balancing
        • How Intrusion Detection Server Load Balancing Works
        • Configuring IDS Server Load Balancing
      • WAN Link Load Balancing
        • How WAN Link Load Balancing Works
        • Configuring WAN Link Load Balancing
  • Filtering
    • Overview
      • Filtering Benefits
      • Filtering Criteria
      • Stacking Filters
      • Overlapping Filters
      • The Default Filter
      • VLAN-based Filtering
        • Configuring VLAN-based Filtering
      • Optimizing Filter Performance
      • Filter Logs
      • IP Address Ranges
      • Cache-Enabled versus Cache-Disabled Filters
    • TCP Rate Limiting
      • Configuring TCP Rate Limiting Filters
        • Basic TCP Rate Limiting Filter
        • TCP Rate Limiting Filter Based on Source IP Address
        • TCP Rate Limiting Filter Based on Virtual Server IP Address
    • Tunable Hash for Filter Redirection
    • Filter-based Security
      • Configuring a Filter-Based Security Solution
    • Network Address Translation
      • Static NAT
        • Configuring Static NAT
      • Dynamic NAT
        • Configuring Dynamic NAT
      • FTP Client NAT
        • Configuring Active FTP Client NAT
    • Matching TCP Flags
      • Configuring the TCP Flag Filter
    • Matching ICMP Message Types
  • Application Redirection
    • Overview
      • Web Cache Redirection Environment
      • Additional Application Redirection Options
        • Web Cache Configuration Example
        • Delayed Binding for Web Cache Redirection
    • RTSP Web Cache Redirection
      • RTSP Web Cache Redirection Example
    • IP Proxy Addresses for NAT
    • Excluding Noncacheable Sites
  • Virtual Matrix Architecture
    • Proxy IP Addresses and VMA
  • Health Checking
    • Real Server Health Checks
    • DSR Health Checks
      • Configuring the Switch for DSR Health Checks
    • Link Health Checks
      • Configuring the Switch for Link Health Checks
    • TCP Health Checks
    • ICMP Health Checks
    • Script-Based Health Checks
      • Configuring the Switch for Script-Based Health Checks
      • Script Format
      • Scripting Guidelines
      • Script Configuration Examples
        • Script Example 1: A Basic Health Check
        • Script Example 2: GSLB URL Health Check
        • Verifying Script-Based Health Checks
    • Application-Specific Health Checks
      • HTTP Health Checks
        • Configuring the Switch for HTTP Health Checks
      • UDP-Based DNS Health Checks
        • Configuring the Switch for UDP-based Health Checks
      • FTP Server Health Checks
        • Configuring the Switch for FTP Health Checks
      • POP3 Server Health Checks
        • Configuring the Switch for POP3 Health Checks
      • SMTP Server Health Checks
        • Configuring the Switch for SMTP Health Checks
      • IMAP Server Health Checks
        • Configuring the Switch for IMAP Health Check
      • NNTP Server Health Checks
        • Configuring the Switch for NNTP Health Checks
      • RADIUS Server Health Checks
        • Configuring the Switch for RADIUS Server Content Health Checks
        • Configuring the Switch for RADIUS Secret and Password
      • HTTPS/SSL Server Health Checks
      • WAP Gateway Health Checks
        • WSP Content Health Checks
        • Configuring the Switch for WSP Content Health Checks
        • WTLS Health Checks
        • Configuring the Switch for WTLS Health Checks
      • LDAP Health Checks
        • Configuring the Switch for LDAP Health Checks
        • Determining the Version of LDAP
    • ARP Health Checks
      • Configuring the Switch for ARP Health Checks
    • Failure Types
      • Service Failure
      • Server Failure
  • High Availability
    • VRRP Overview
      • VRRP Components
        • Virtual Interface Router
        • Virtual Router MAC Address
        • Owners and Renters
        • Master and Backup Virtual Router
      • VRRP Operation
      • Selecting the Master VRRP Router
      • Active-Standby Failover
    • Failover Methods
      • Active-Standby Redundancy
      • Active-Active Redundancy
      • Hot-Standby Redundancy
        • Virtual Router Group
        • Hot-Standby and Inter-Switch Port States
      • Synchronizing Configurations
    • WebOS Extensions to VRRP
      • Virtual Server Routers
      • Sharing/Active-Active Failover
      • Tracking VRRP Router Priority
    • High Availability Configurations
      • Active-Standby Virtual Server Router Configuration
      • Active-Active VIR and VSR Configuration
      • Active/Active Server Load Balancing Configuration
        • Task 1: Background Configuration
        • Task 2: SLB Configuration
        • Task 3: Virtual Router Redundancy Configuration
        • Task 4: Configuring Switch 2
      • VRRP-Based Hot-Standby Configuration
        • Configuration Procedure
    • Virtual Router Deployment Considerations
      • Mixing Active-Standby and Active-Active Virtual Routers
      • Synchronizing Active/Active Failover
      • Eliminating Loops with STP and VLANs
        • Using Spanning Tree Protocol to Eliminate Loops
        • Using VLANs to Eliminate Loops
      • Assigning VRRP Virtual Router ID
      • Configuring the Switch for Tracking
      • Synchronizing Configurations
    • Stateful Failover of Layer 4 and Layer 7 Persistent Sessions
      • What Happens When a Switch Fails
        • Stateful Failover Configuration Example
      • Viewing Statistics on Persistent Port Sessions
• Part 3: Advanced Web Switching
  • Global Server Load Balancing
    • GSLB Overview
      • Benefits
      • Compatibility with Other Web OS Features
      • How GSLB Works
    • Configuring GSLB
      • Example GSLB Topology
      • GSLB Requirements
      • Task 1: Configure the Basics at the California Site
      • Task 2: Configure the California Switch for Standard SLB
      • Task 3: Configure the California Site for GSLB
      • Task 4: Configure the Basics at the Denver Site
      • Task 5: Configure the Denver Switch for Standard SLB
      • Task 6: Configure the Denver Site for GSLB
    • IP Proxy for Non-HTTP Redirects
      • How IP Proxy Works
      • Configuring Proxy IP Addresses
    • Verifying GSLB Operation
    • Configuring Client Site Preferences
    • Using Border Gateway Protocol for GSLB
  • Firewall Load Balancing
    • Firewall Overview
    • Basic FWLB
      • Basic FWLB Implementation
      • Configuring Basic FWLB
        • Configure the Dirty-Side Web Switch
        • Configure the Clean-Side Web Switch
    • Four-Subnet FWLB
      • Four-Subnet FWLB Implementation
      • Configuring Four-Subnet FWLB
        • Configure the Routers
        • Configure the Firewalls
        • Configure Connectivity for the Primary Dirty-Side Web Switch
        • Configure Connectivity for the Secondary Dirty-Side Web Switch
        • Configure Connectivity for the Primary Clean-Side Web Switch
        • Configure Connectivity for the Secondary Clean-Side Web Switch
        • Verify Proper Connectivity
        • Configure VRRP Support on the Secondary Dirty-Side Web Switch
        • Configure VRRP Support on the Secondary Clean-Side Web Switch
        • Complete the Configuration of the Primary Dirty-Side Web Switch
        • Complete the Configuration of the Primary Clean-Side Web Switch
    • Advanced FWLB Concepts
      • Free-Metric FWLB
        • Free-Metric with Basic FWLB
        • Free-Metric with Four-Subnet FWLB
      • Adding a Demilitarized Zone (DMZ)
      • Firewall Health Checks
        • Firewall Service Monitoring
        • Physical Link Monitoring
        • Using HTTP Health Checks
  • Virtual Private Network Load Balancing
    • Overview
      • Virtual Private Networks
      • How VPN Load Balancing Works
    • VPN Load-Balancing Configuration
      • Requirements
      • VPN Load-Balancing Configuration Example
        • Configure the First Clean-Side Switch (CA)
        • Configure the Second Clean-Side Switch (CB)
        • Configure the First Dirty-Side WebSwitch (DA)
        • Configure the Second Dirty-Side WebSwitch (DB)
        • Test Configurations and General Topology
        • Test the VPN
  • Content Intelligent Switching
    • Overview
      • Parsing Content
      • HTTP Header Inspection
      • Buffering Content with Multiple Frames
    • Content Intelligent Server Load Balancing
      • URL-Based Server Load Balancing
        • Configuring URL-Based Server Load Balancing
        • Statistics for URL-Based Server Load Balancing
      • Virtual Hosting
        • Virtual Hosting Configuration Overview
        • Configuring the “Host” Header for Virtual Hosting
      • Cookie-Based Preferential Load Balancing
        • Configuring Cookie-Based Preferential Load Balancing
      • Browser-Smart Load Balancing
      • URL Hashing for Server Load Balancing
        • Virtual Server Load Balancing of Nontransparent Caches
        • Configuring URL Hashing
      • Header Hash Load Balancing
      • DNS Load Balancing
      • Layer 7 RTSP Load Balancing
    • Content Intelligent Web Cache Redirection
      • URL-Based Web Cache Redirection
        • Network Address Translation Options
        • Configuring URL-Based Web Cache Redirection
        • Viewing Statistics for URL-Based Web Cache Redirection
      • HTTP Header-Based Web Cache Redirection
      • Browser-Based Web Cache Redirection
      • URL Hashing for Web Cache Redirection
        • Example 1: Hashing on the URL
        • Example 2: Hashing on the Host Header Field Only
        • Example 3: Hashing on the Source IP address
      • Layer 7 RTSP Streaming Cache Redirection
    • Exclusionary String Matching for Real Servers
      • Configuring for Exclusionary URL String Matching
    • Regular Expression Matching
      • Standard Regular Expression Characters
      • Configuring Regular Expressions
    • Content Precedence Lookup
      • Requirements
      • Using the or and and Operators
      • Assigning Multiple Strings
    • Layer 7 Deny Filter
      • Configuring a Layer 7 Deny Filter
  • Persistence
    • Overview of Persistence
      • Using Source IP Address
      • Using Cookies
      • Using SSL Session ID
    • Cookie-Based Persistence
      • Permanent and Temporary Cookies
      • Cookie Formats
      • Cookie Properties
      • Client Browsers that Do Not Accept Cookies
      • Cookie Modes of Operation
        • Insert Cookie Mode
        • Passive Cookie Mode
        • Rewrite Cookie Mode
      • Configuring Cookie-Based Persistence
        • Setting Expiration Timer for Insert Cookie
        • Example 1: Setting the Cookie Location
        • Example 2: Parsing the Cookie
        • Example 3: Using Passive Cookie Mode
        • Example 4: Using Rewrite Cookie Mode
    • Server-Side Multi-Response Cookie Search
      • Configuring Server-Side Multi-Response Cookie Search
    • SSL Session ID-Based Persistence
      • How SSL Session ID-Based Persistence Works
        • Configuring SSL Session ID-Based Persistence
  • Bandwidth Management
    • Overview
    • Bandwidth Policies
      • Rate Limits
      • Bandwidth Policy Configuration
    • Data Pacing
    • Classification Criteria
      • Server Output Bandwidth Control
      • Application Bandwidth Control
      • Combinations
      • Precedence
      • Bandwidth Classification Configuration
      • Frame Discard
      • URL-Based Bandwidth Management
      • HTTP Header-Based Bandwidth Management
      • Cookie-Based Bandwidth Management
    • Bandwidth Statistics and History
      • Statistics Maintained
      • Statistics and Management Information Bases
    • Packet Coloring (TOS bits) for Burst Limit
    • Operational Keys
    • Configuring Bandwidth Management
      • Additional Configuration Examples
        • User/Application Fairness Example
      • Preferential Services Examples
        • Web Site Preference Example
        • URL-Based Bandwidth Management Example
        • Cookie-Based Bandwidth Management Example
        • Security Management Example
• Glossary
• Index