Extreme Networks Px Series Installation And Configuration Manual Download Page 94

Page: 94 / 118

8-4

Px Series Application Switch Installation and Configuration Guide

Figure 8-1: Application switch using multiple VLANs.

For more information on configuring ESRP, see the ExtremeWare Software User Guide.

VRRP Automatic Synchronization

VRRP automatic synchronization (auto-sync) does two things:

•

Synchronizes a master VRRP to its backup by sending a set of configuration
commands from the master to the backup, replacing the corresponding commands

WS_019

Aggregation

Routing

Internet

WAN or

large Enterprise core

Standby Px1

Active Px1

ESRP
standby

SummitPx1 configured with
application aware VRRP

Connections to ESRP ports
configured for "host attach"

ESRP
active

Server racks

Server

Summary of Contents for Px Series

Page 1: ...rks Inc 3585 Monroe Street Santa Clara California 95051 888 257 3000 http www extremenetworks com Px Series Application Switch Installation and Configuration Guide Published April 2002 Part number 100...

Page 2: ...Networks logo are trademarks of Extreme Networks Inc which may be registered or pending registration in certain jurisdictions The Extreme Turbodrive logo is a service mark of Extreme Networks which m...

Page 3: ...2 Load Balancing Modes 1 3 Layer 4 Load Balancing 1 3 Layer 7 Load Balancing and Content Analysis 1 4 Port Rewrite 1 6 Getting Started on Load Balancing Configuration 1 6 2 Installing the SummitPx1 Ap...

Page 4: ...ce 4 2 Abbreviated Syntax and Command Completion 4 2 Syntax Symbols 4 2 Line Editing Keys 4 3 Specifying Text Values 4 3 Command History 4 4 Prompt Text 4 4 Configuring Management Access 4 4 Changing...

Page 5: ...s 5 4 Configuring Traffic Tagging 5 5 Configuration Example 5 6 6 Choosing Policies Persistence Modes and NAT Scheduling Policies 6 1 Persistence Modes 6 2 UDP Flow Persistence 6 3 Client IP Persisten...

Page 6: ...r the PxM 8 6 Using ESRP with the PxM 8 6 Configuring the PxM for Multiple VLANs 8 7 Configuring a Default Gateway 8 8 9 Health Checks Overview 9 1 Server Startup Pacing 9 2 Health Checking Procedure...

Page 7: ...SummitPx1TM and PxMTM This guide is intended for use by network administrators who are responsible for installing and setting up network equipment It assumes a basic working knowledge of Local area n...

Page 8: ...displays This typeface indicates command syntax or represents information as it appears on the screen The words enter and type When you see the word enter in this guide you must type something and the...

Page 9: ...Publications Related Publications The publications related to this one are ExtremeWare Software User Guide Px Series Application Switch Release Notes Documentation for Extreme products is available o...

Page 10: ...x Px Series Application Switch Installation and Configuration Guide Preface...

Page 11: ...This chapter contains the following sections Purpose of Server Load Balancing on page 1 1 Load Balancing Modes on page 1 3 Port Rewrite on page 1 6 Getting Started on Load Balancing Configuration on...

Page 12: ...evel of abstraction between the real servers and the Internet by configuring a virtual IP VIP address and port on the application switch The VIP has a globally reachable public IP address and correspo...

Page 13: ...user request using server selection policies It selects a server without looking at the content of the request The following server selection policies are supported by the Px series application switc...

Page 14: ...on cookies or the URL being requested by the client the application switch must actually look inside the client request Because this data request is only sent out after a connection is established th...

Page 15: ...rds the buffered data to the server The server sends any response to the application switch The application switch translates the IP source address and port numbers appropriately along with the TCP se...

Page 16: ...lication switch to perform load balancing operations you must consider the following Do you want to use full NAT or server only NAT mode For more information on NAT see Chapter 6 Do you want to use IP...

Page 17: ...rs that will be load balanced b Create groups of servers and put the real servers into them c Create a virtual service If the virtual service is layer 4 assign a server group to it If the virtual serv...

Page 18: ...1 8 Px Series Application Switch Installation and Configuration Guide...

Page 19: ...tion Switch on page 2 1 Determining the Location on page 2 4 Installing the SummitPx1 Application Switch on page 2 4 Setting Up Console Communication on page 2 6 Powering On the SummitPx1 on page 2 5...

Page 20: ...9 adapter to connect the console to a PC serial port using a straight 1 8 1 8 cable such as a standard category 3 or category 5 Ethernet cable The pinouts for the DB 9 adapter are shown in Table 2 2 o...

Page 21: ...itch rear view Power Socket The SummitPx1 automatically adjusts to the supply voltage The power supply operates down to 90 VAC The fuse is suitable for both 110 VAC and 220 240 VAC operation Serial Nu...

Page 22: ...should provide a minimum of 25mm 1 inch clearance No objects are placed on top of the unit Units are not stacked more than four high if the switch is free standing Installing the SummitPx1 Application...

Page 23: ...adhesive rubber pads Apply the pads to the underside of the device by sticking a pad at each corner of the device Up to four SummitPx1 application switches can be placed on top of one another Powerin...

Page 24: ...kstation with a Telnet facility can communicate with the application switch over a TCP IP network Telnet is enabled by default Use Telnet to connect to either the 10 100 Mbps Ethernet management port...

Page 25: ...u must first configure the switch IP parameters To manually configure the IP settings follow these steps 1 Connect a terminal or workstation running terminal emulation software to the serial managemen...

Page 26: ...it an IP address and subnetwork mask using the following command config mgmt ip ipaddress netmask bit length The 10 100BT port has a separate routing table By default no routes are installed in the ro...

Page 27: ...and removing modules is repeated here To manage the application switch locally you must connect a management console to the switch s Ethernet management port using a serial connection Do this in the...

Page 28: ...BlackDiamond 6808 until it makes contact with the backplane As the module begins to seat in the chassis the ejector injector handles begin to close 5 To close the ejector injector handles use both ha...

Page 29: ...4 Slide the module out of the chassis 5 If you are not going to install a replacement I O module cover the slot with a blank faceplate Otherwise follow the I O module installation procedure above 6 Re...

Page 30: ...3 4 Px Series Application Switch Installation and Configuration Guide...

Page 31: ...covers the following topics Using the Command Line Interface page 4 2 Configuring Management Access on page 4 4 Managing the PxM on page 4 7 Configuring VLANs on page 4 8 Configuring SNMP on page 4 9...

Page 32: ...rameter Typically this is the first three letters of the command The Px series application switch provides command completion by way of the Tab key If you enter a command using the abbreviated syntax...

Page 33: ...letes character to left of cursor and shifts remainder of line to left Delete or Ctrl D Deletes character under cursor and shifts remainder of line to left Ctrl K Deletes characters from under cursor...

Page 34: ...he command line prompt it indicates that you have outstanding configuration changes that have not been saved For example SummitPx1 19 The prompt ends with if you are logged in with user level privileg...

Page 35: ...h a sign For example SummitPx1 18 Changing the Default Passwords The switch is automatically configured with one account at each level with the names user and admin By default these accounts do not ha...

Page 36: ...es are case sensitive 4 Enter the password at the prompt Passwords can have up to 32 characters and are case sensitive 5 Re enter the password at the prompt Modifying Accounts To change the password o...

Page 37: ...cific syntax that applies to the PxM Table 4 3 Commands Unique to the PxM Command Description connect slot number Creates a PxM session for the specified slot show pxm interfaces slot number Displays...

Page 38: ...802 1q VLAN ID numbers rather than names You must configure the VLAN number on the system IP address For the SummitPx1 before configuring VLANs for the application switch itself you must enable VLAN t...

Page 39: ...Published by Prentice Hall Changes to SNMP settings are executed immediately and do not require the build command Table 4 4 describes how to configure SNMP settings for the application switch Table 4...

Page 40: ...rite community string is private A total of eight community strings can be configured on the application switch The community string for all authorized trap receivers must be configured on the applica...

Page 41: ...tch application is based on the Data Fellows SSH2 server implementation It is highly recommended that you use the F Secure SSH client products from Data Fellows corporation These applications are avai...

Page 42: ...f clients that can access the switch and specifying a TCP port to be used for communication By default if you have a security license SSH2 is enabled using TCP port 22 with no restrictions on client a...

Page 43: ...alid user name and password on the switch in order to log into the switch after the SSH2 session has been established For additional information on the SSH protocol refer to FIPS 186 Federal Informati...

Page 44: ...authentication key to use the SSH2 and SCP2 commands from the ExtremeWare command line interface To send commands to a remote system using SSH2 use the following command ssh2 cipher 3des blowfish port...

Page 45: ...similar to the UNIX top command The idle task BGTask shows 99 100 if nothing else is going on Checking Basic Connectivity The Px series application switch offers the following commands for checking b...

Page 46: ...level are To change the level of messages that are logged use the command config log display level The level argument is optional By default the level is set to b fatal messages To clear the log use t...

Page 47: ...spersed network resources The GlobalPx Content Director transparently directs clients and client DNS servers to the most appropriate POP to satisfy client requests Typically the physically closest POP...

Page 48: ...by scheduler ipaddr at time contacted by schedulers ipaddr ipaddr ipaddr current load num For more information see the GlobalPx Content Director Installation and User Guide Example Configuration In th...

Page 49: ...ble vlan config mgmt ipaddress 10 10 10 10 24 enable syslog config syslog ip 10 10 10 20 config nat mode full enable clipaging disable port gigabit proxy ip s config proxy ip 64 1 1 11 64 1 1 42 SNMP...

Page 50: ...4 20 Px Series Application Switch Installation and Configuration Guide...

Page 51: ...ge 5 6 Configuring Real Servers The real servers are the actual web or application servers that fulfill the client requests Typically there are one or more identical real servers each of which runs th...

Page 52: ...config server index 3 ipaddress 10 2 2 2 10 2 2 9 port 80 max connections 4000 weight 1 To remove a server or range of servers from the system use the following commands unconfig server index index un...

Page 53: ...up1 add server index 1 config server group name group1 add server ip address 10 10 10 2 config server group name group1 add server index 1 34 config server group name group1 add server ip address 10 1...

Page 54: ...umber protocol tcp udp L4 server group name name You can configure a layer 4 service on a VLAN using the optional vlan argument config service vip ip address vlan vlan name port number protocol tcp ud...

Page 55: ...ed persistence for the virtual service Although you configure cookies for the default domain the cookie information applies to the entire site See Chapter 6 for more information on cookies Configuring...

Page 56: ...the specified tag to the 802 1p header for packets directed to the server 0 7 dot1p to net tag Applies the specified tag to the 802 1p header for packets directed to the network 0 7 diffserv to svr ta...

Page 57: ...ig service vip 64 1 2 10 port 80 protocol tcp l4 server group name yourdomain system configuration config system ip 64 1 1 10 24 config default gateway 64 1 1 1 disable vlan config mgmt ipaddress 10 1...

Page 58: ...5 8 Px Series Application Switch Installation and Configuration Guide...

Page 59: ...mple on page 6 17 Scheduling Policies The Px series application switch uses scheduling policies in load balancing to select the real server to which to forward a client request Scheduling policies are...

Page 60: ...l of all servers is about equal and all servers provide the same content wrr weighted round robin Similar to round robin except that you can apply a weight to each server For example if server A has a...

Page 61: ...t IP persistence Cookie persistence SSL session identifier persistence UDP Flow Persistence A UDP flow is recycled if it is idle for the time specified by the UDP flow persistence timer To set this ti...

Page 62: ...establishing a session between the server and the client The client sends another request The application switch examines the IP address sees that the request is from client 125 12 1 1 The application...

Page 63: ...kiness When a client accesses a web server the web server can send the client a cookie The cookie can be programmed to contain many different pieces of information including The IP address of the web...

Page 64: ...ver 2 contain IP address 10 1 1 2 Cookies created by server 3 contain IP address 10 1 1 3 The website administrator configures the Px series application switch to use self identifying cookie persisten...

Page 65: ...will be forwarded to another server The following Perl example sends a cookie to the user s browser and handles the case of server failure If the chosen server fails then a request will come to a ser...

Page 66: ...ddress of HostIPAddr br n else print The cookie named SLBCookie was correctly set to ExistingHostCookie br n print No action was taken br n print end_html Hashed Cookie Persistence Using hashed cookie...

Page 67: ...e client always access the same web server that contains its cached information In addition before accessing the web server the client must login to the site and obtain a unique cookie The following t...

Page 68: ...contain the username user samsmith96754 Each subsequent request sent from the client to the website contains the cookie The client sends another data request to the website via the application switch...

Page 69: ...site administrator configures the Px series application switch to use learned cookie persistence mode and configures the name of the cookie to be tracked The client at IP address 65 11 11 11 transmits...

Page 70: ...mation Each subsequent request sent from the client to the website contains the cookie The application switch examines the cookie looks up the forwarding information in the database and sends each req...

Page 71: ...es to the whole service not just the default domain SSL Session Identifier Persistence Websites that use SSL encrypt all transmitted information in the SSL session except the SSL session identifier SS...

Page 72: ...called network address translation NAT Full NAT Mode In full NAT mode the server load balancer translates both the source and destination IP addresses those of the client and the server before sending...

Page 73: ...itch is running Boot the application switch for the proxy IP information to take effect Server only Half NAT Mode In half NAT mode the application switch only translates the server IP address when dis...

Page 74: ...d on both the application switch and the attached layer 3 switch To enable half NAT on the Px series application switch use the following command config nat mode server only On an Extreme switch use t...

Page 75: ...ode add ip ip address vlan vlan tag If VLAN tags are enabled you must specify the VLAN tag for gateway mode If gateway mode is enabled set up a policy rule on the server s default gateway to forward t...

Page 76: ...max con 500 weight 1 server groups config server group name yourdomain policy rr config server group name yourdomain add server index 1 3 config server group name ecom policy lc config server group n...

Page 77: ...guration config system ip 64 1 1 10 24 config default gateway 64 1 1 1 disable vlan config mgmt ipaddress 10 10 10 10 24 vlan 100 enable vlan enable syslog config syslog ip 10 10 10 20 config nat mode...

Page 78: ...6 20 Px Series Application Switch Installation and Configuration Guide...

Page 79: ...s a proxy and looking inside each request using domain or URL switching The chapter covers the following topics Domain and URL Switching on page 7 1 Configuring URL Switching on page 7 4 Creating Doma...

Page 80: ...g scenario Domain Switching Domain switching uses the requested domain name to select the appropriate server group For example in Figure 7 2 there are three server groups www buystuff com www speakyou...

Page 81: ...policy round robin weighted round robin least connections or weighted least connections to select a particular server within the server group The request is then forwarded to the selected server in s...

Page 82: ...into the request In addition to examining the domain name the Px series application switch examines the entire requested URL and matches it against a list of pattern rules Each of the pattern rules h...

Page 83: ...tion switch you have the flexibility to move these resources without changing dozens of links You can also split out different sections of your website virtually on the fly The larger the website the...

Page 84: ...uff com ebooks ISBNXXXXXXX is directed to server group 1 www buystuff com ebooks ISBNXXXXXXX is directed to server group 2 In fact a unique rule could be used for each book in the catalog with little...

Page 85: ...group 3 and so on This hierarchical approach has most of the advantages of the first approach and is also well suited to unindexed browsable static content All of the content can be browsed using a s...

Page 86: ...combinations The allowable wildcards are described in Table 7 1 Every layer 7 rule needs a default domain which can contain only a default pattern rule This rule is used to decide where to forward tra...

Page 87: ...st first enter the virtual service that you want to modify using the following command config service vip 10 65 31 201 port 8080 proto tcp l7 class http Then you can add new domains or delete an exist...

Page 88: ...fig server index 11 ip 64 1 1 71 port 80 max con 5000 weight 1 config server index 20 ip 64 1 1 80 port 80 max con 5000 weight 1 server groups config server group name appserv policy rr config server...

Page 89: ...e mov server group name media config pattern rule mp3 server group name media config domain name default config pattern rule default server group name yourdomain cookie name session id cookie type lea...

Page 90: ...Configuration Guide config snmp sysName balancer config snmp sysLocation Exodus Colo config snmp sysContact Web Admin config add trap receiver 10 10 10 21 public 162 config snmp add community readonl...

Page 91: ...redundant systems using VRRP an industry standard failover mechanism RFC 2338 In the event of the failure of the primary active system the secondary system automatically takes over for the failed syst...

Page 92: ...eWare Before configuring VRRP make the following decisions Select which system should initially be primary and which should be secondary Configure the secondary switch with a lower priority Assign a v...

Page 93: ...is being used for layer 2 redundancy or where VRRP or HSRP is being used for the layer 3 redundancy without problems Because the ESRP protocol in ExtremeWare is a custom layer 2 and 3 hybrid redundan...

Page 94: ...es two things Synchronizes a master VRRP to its backup by sending a set of configuration commands from the master to the backup replacing the corresponding commands WS_019 Aggregation Routing Internet...

Page 95: ...ow vrrp auto sync This displays the current state of synchronization For example Auto sync Enabled Master Partner IP Not Configured N A Backup Partner IP 10 65 4 250 Connected MD5 local config c409f49...

Page 96: ...ESRP master is the presence or absence of the heartbeat signal from the PxM to the MSM If there is an FPGA fatal error or if the PHY link fails the PxM stops sending the heartbeat signal and the ESRP...

Page 97: ...f it were the only VLAN See Using ESRP with the PxM on page 8 6 The following example ExtremeWare script sets up several VLANs as domain members of a master VLAN and configures ESRP for two redundant...

Page 98: ...v3 enable esrp vlan master Configuring a Default Gateway The Px series application switch supports two gateways If the primary default gateway router fails the application switch will change to a sec...

Page 99: ...lication switch supports the following types of health checks ICMP Ping Ensures that the host is reachable In general this does not provide any information about application health but provides the si...

Page 100: ...he following command config server startup pacing initial limit number of connections The initial maximum defaults to 5 connections To set the global interval use the following command config server s...

Page 101: ...se default timer settings locally on an individual server or globally If you set them globally the timers are modified on all hosts that use the default settings If health checks are enabled but not s...

Page 102: ...se the following command config server group name sg1 health check tcp open To check for a return code add the following command config server group name sg1 health check tcp open return HELLO HTTP he...

Page 103: ...ver group which take precedence over the global settings Use the following commands config server group name health check interval number of seconds config server group name health check retry interva...

Page 104: ...9 6 Px Series Application Switch Installation and Configuration Guide...

Page 105: ...contains the following sections Showing Traffic Statistics on page 10 1 Showing Configuration Details on page 10 3 Managing and Troubleshooting Operation on page 10 7 Showing Traffic Statistics Table...

Page 106: ...group config details summary Displays configuration commands detailed information such as current total and peak connections a summary of information such as total number of services show service ipa...

Page 107: ...obalPx Content Director agent show healthcheck config down summary details verbose Displays the current health check configuration show iparp Displays the current layer 2 ARP table entries show iprout...

Page 108: ...dex 2 ip 10 65 8 51 port 8080 config server index 40 ip 10 65 8 52 port 80 config server index 41 ip 10 65 8 53 port 80 server groups config server group name web1_layer4 policy rr server last resort...

Page 109: ...mac is resolved N mac is not resolved F forced down run than or than 0 number of consecutive passed or failed respectively ra restore after fa fail after left secs till next check index IP port proto...

Page 110: ...health checks REQ SENT applies to TCP and HTTP health checks IDLE PINGING ping sent waiting for response left The number of seconds left until the next health check run When positive the number of con...

Page 111: ...tions for the server Not shown for virtual services max connections The configured maximum number of connections for the server Not shown for virtual services run When positive the number of consecuti...

Page 112: ...og level Displays the contents of the switch log Level values are a errors displays error messages b fatal displays fatal messages c info displays informational messages d warning displays warning mes...

Page 113: ...4 2 using 4 2 community strings 4 10 configuring the system 2 6 connecting to console server 2 2 connectivity verifying 4 15 console port connecting to 2 6 description of 2 2 content analysis 1 4 conv...

Page 114: ...reating 5 3 layer 7 load balancing 1 4 layer 7 persistence 6 5 layer 7 virtual services 5 4 learned cookie persistence mode 6 5 6 10 least connections policy 6 2 line editing keys 4 3 load defined 4 1...

Page 115: ...ommands 10 1 SNMP community strings 4 10 configuring 4 9 settings 4 9 system contact 4 9 system location 4 9 system name 4 9 traps 4 10 socket power 2 3 SSL session identifier persistence 5 4 6 13 sta...

Page 116: ...iv Index Px Series Application Switch Installation and Configuration Guide...

Page 117: ...config proxy ip 6 15 config server index ipaddress 5 1 config server group health check fail after 9 5 config server group health check interval 9 5 config server group health check restore after 9 5...

Page 118: ...le server startup pacing 9 2 enable ssh2 4 12 enable sticky client ip 6 5 enable syslog 4 16 enable vlan 4 8 enable vrrp 8 2 8 3 H history 4 4 N nslookup 4 11 P ping 4 15 S scp 4 14 scp2 4 14 show acc...

Search results

Summary of Contents for Px Series

Reviews:

Related manuals for Px Series

Brands by name

Popular brands

Extreme Networks Px Series, Installation And Configuration Manual

Search results

Summary of Contents for Px Series

Reviews:

Related manuals for Px Series

Brands by name

Popular brands