Riverbed SteelHead 3070-SD, User Manual

Page: 93 / 124

Configuring High Availability on SteelHead SD | 93
Overview of HA on SteelHead SD
• Asymmetric - In asymmetric mode, different WANs are connected to the peer appliances. If there is
an appliance failure or a LAN-side fail over, the master appliance becomes to peer appliance.
Figure 10-3. Symmetric and asymmetric HA deployment examples at the branch
Layer 2 and Layer 3 support at the branch
With SteelHead SD 2.0, you can configure BGP and OSPF on the LAN branch.
You can configure iBGP between SteelHead SD HA peers if you want your overlay network to be
advertised between the two appliances so that their routing tables are kept in synchronization. Also, you
can have a combination of L2 and L3 zones so that if you have more than one LAN port configured, they
can be a mix of L2 and L3. SteelHead SD uses iBGP between the peers to redistribute the overlay and
connected routes.
LAN connectivity can be through either L2 switch domain or L3. In the case of a L3 LAN, connectivity is
established through dynamic routing. SteelHead SD supports:
• L3 LAN - You can redistribute static, connected, overlay, and WAN routes on both appliances in the
HA pair. Your client traffic can go to either appliance in the HA pair. Using route convergence, the
master processes the traffic and sends it on the overlay network.
• L2 LAN - With L2, you can have a switch on the LAN-side connected to SteelHead SDs that have the
same LAN zone with different IP address for each appliance. The system assigns a single virtual IP
address (VIP) on the zone that is owned by the master appliance. All traffic goes to the master
appliance where it sends it on the overlay network. If there is a failure, the VIP moves to the backup
appliance where it becomes the new master.
Multigroup VIP and Virtual Router Redundancy Protocol (VRRP) with a third-party router are not
supported at this time.