Riverbed SteelHead 3070-SD, Руководство пользователя

Страница: 85 / 124

Configuring LAN-Side Internet Breakout on SteelHead SD | 85
9
Configuring LAN-Side Internet Breakout on
SteelHead SD
This topic describes how to configure LAN-side internet breakout on SteelHead SD appliances. It
includes these topics:
• “Overview of LAN-side internet breakout on SteelHead SD” on page 85
• “Configuring LAN-side internet breakout” on page 86
• “Troubleshooting” on page 89
These procedures describe LAN-side internet breakout for SteelHead SD 570-SD, 770-SD, and 3070-SD
appliances and the SteelConnect SDI-2030 gateway at the branch. For additional information, see the
SteelConnect Manager User Guide .
Overview of LAN-side internet breakout on SteelHead SD
With LAN-side internet breakout, you are able to forward internet-bound traffic on the LAN-side of the
network and avoid backhauling internet traffic. For details on internet breakout, see the
SteelConnect
Manager User Guide .
Prior to SteelConnect 2.12, internet breakout was only supported on the WAN-side of the network.
Internet breakout on the WAN-side of the network can occur in one of the following ways:
• Sending the packet to Zscaler or Cloudi-Fi over tunnels to the Zen nodes that break out from the
cloud firewalls.
• Locally using a direct-to-internet uplink or any other internet-capable uplink.
• Overlay the packet to the data center (DC) remote site and it breaks out from the DC site.
You configure LAN-side internet breakout by enabling the Underlay option for internet bound traffic as
a breakout preference. The Underlay option is available at the organization, site, and zone level.
Alternatively, you can also configure the Underlay option as a preferred path in a traffic rule.
Note: Specific routes are given higher preference than the default route so if the internet-bound traffic has a specific
route available on the appliance, the appliance honors that specific route irrespective of the configured internet
breakout preference.
When the Underlay option is the preferred breakout option, make sure that a default route is available on
the appliance so that the internet traffic is routed on the interface from where the default route (0.0.0.0/
0) is learned. You can configure underlay internet breakout on any interface, not just the LAN interface.