Nortel Web OS Switch Software Guía del usuario

50 Great Oaks Boulevard

San Jose, California 95119

408-360-5500 Main

408-360-5501 Fax

www.nortelnetworks.com

Web OS Switch Software

10.0 Application Guide

Part Number: 212777, Revision A, February 2002

Web OS 10.0 Application Guide

2212777-A, February 2002

rights reserved. Part Number: 212777, Revision A.

This document is protected by copyright and distributed under licenses restricting its use, copying,

distribution, and decompilation. No part of this document may be reproduced in any form by any means

without prior written authorization of Nortel Networks, Inc. Documentation is provided“as is” without

warranty of any kind, either express or implied, including any kind of implied or express warranty of non-

infringement or the implied warranties of merchantability or fitness for a particular purpose.

U.S. Government End Users: This document is provided with a “commercial item” as defined by FAR

2.101 (Oct 1995) and contains “commercial technical data” and “commercial software documentation” as

those terms are used in FAR 12.211-12.212 (Oct 1995). Government End Users are authorized to use this

documentation only in accordance with those rights and restrictions set forth herein, consistent with FAR

12.211- 12.212 (Oct 1995), DFARS 227.7202 (JUN 1995) and DFARS 252.227-7015 (Nov 1995).

Nortel Networks, Inc. reserves the right to change any products described herein at any time, and without

notice. Nortel Networks, Inc.assumes no responsibility or liability arising fromthe use of products

describedherein,exceptas expresslyagreedto inwritingby NortelNetworks,Inc.The useand purchaseof

this product does not convey a license under any patent rights, trademark rights, or any other intellectual

property rights of Nortel Networks, Inc.

Web OS, Alteon 180, Alteon 180e, Alteon 184, Alteon AD3, Alteon AD4, and ACEswitch are trademarks

of Nortel Networks, Inc. in the United States and certain other countries. Cisco®and EtherChannel®are

registered trademarks of Cisco Systems, Inc. in the United States and certain other countries. Check Point®

and FireWall-1®are trademarks or registered trademarks of Check Point Software Technologies Ltd. Any

other trademarks appearing in this manual are owned by their respective companies.

212777-A, February 2002 3

Contents

Preface 21

Who Should Use This Guide 21

What You’ll Find in This Guide 21

Typographic Conventions 23

Contacting Us 24

Part 1: Basic Switching & Routing

Chapter 1: Basic IP Routing 27

IP Routing Benefits 28

Routing Between IP Subnets 28

Example of Subnet Routing 31

Defining IP Address Ranges for the Local Route Cache 35

Border Gateway Protocol (BGP) 36

Internal Routing Versus External Routing 36

Forming BGP Peer Routers 37

BGP Failover Configuration 37

DHCP Relay 41

DHCP Overview 41

DHCP Relay Agent Configuration 42

Chapter 2: VLANs 43

VLAN ID Numbers 44

VLAN Tagging 44

VLANs and the IP Interfaces 45

VLAN Topologies and Design Issues 45

Example 1: Multiple VLANS with Tagging Adapters 46

Example 2: Parallel Links with VLANs 48

Web OS 10.0 Application Guide

Contents 212777-A, February 2002

VLANs and Spanning Tree Protocol 49

Bridge Protocol Data Units (BPDUs) 50

Multiple Spanning Trees 51

VLANs and Default Gateways 58

Segregating VLAN Traffic 58

Configuring the Local Network 60

Configuring Default Gateways per VLAN 60

VLANs and Jumbo Frames 63

Isolating Jumbo Frame Traffic using VLANs 63

Routing Jumbo Frames to Non-Jumbo Frame VLANs 64

Chapter 3: Port Trunking 65

Overview 65

Statistical Load Distribution 66

Built-In Fault Tolerance 66

Port Trunking Example 67

Chapter 4: OSPF 69

OSPF Overview 69

Types of OSPF Areas 70

Types of OSPF Routing Devices 71

Neighbors and Adjacencies 72

The Link-State Database 72

The Shortest Path First Tree 73

Internal Versus External Routing 73

OSPF Implementation in Web OS 74

Configurable Parameters 74

Defining Areas 75

Interface Cost 77

Electing the Designated Router and Backup 77

Summarizing Routes 77

Default Routes 78

Virtual Links 79

Router ID 80

Authentication 80

Host Routes for Load Balancing 82

OSPF Features Not Supported in This Release 82

Web OS 10.0 Application Guide

Contents

212777-A, February 2002

OSPF Configuration Examples 83

Example 1: Simple OSPF Domain 84

Example 2: Virtual Links 86

Example 3: Summarizing Routes 90

Example 4: Host Routes 92

Verifying OSPF Configuration 98

Chapter 5: Secure Switch Management 99

Setting Allowable Source IP Address Ranges 100

Secure Switch Management 101

Authentication and Authorization 101

Requirements 102

RADIUS Authentication and Authorization 103

RADIUS Authentication Features in Web OS 104

Web Switch User Accounts 105

Secure Shell and Secure Copy 107

Encryption of Management Messages 108

SCP Services 108

RSA Host and Server Keys 109

Radius Authentication 110

SecurID Support 110

Port Mirroring 113

Part 2: Web Switching Fundamentals

Chapter 6: Server Load Balancing 117

Understanding Server Load Balancing 118

Identifying Your Network Needs 118

How Server Load Balancing Works 119

Implementing Basic Server Load Balancing 121

Network Topology Requirements 122

Configuring Server Load Balancing 124

Additional Server Load Balancing Options 128

Extending SLB Topologies 136

Proxy IP Addresses 136

Mapping Ports 139

Direct Server Interaction 142

Delayed Binding 146

Web OS 10.0 Application Guide

Contents 212777-A, February 2002

Load Balancing Special Services 149

IP Server Load Balancing 149

FTP Server Load Balancing 150

Domain Name Server (DNS) Load Balancing 151

Real Time Streaming Protocol SLB 155

Wireless Application Protocol SLB 158

Intrusion Detection System Server Load Balancing 163

WAN Link Load Balancing 166

Chapter 7: Filtering 169

Overview 170

Filtering Benefits 170

Filtering Criteria 170

Stacking Filters 172

Overlapping Filters 172

The Default Filter 173

VLAN-based Filtering 174

Optimizing Filter Performance 176

Filter Logs 176

IP Address Ranges 178

Cache-Enabled versus Cache-Disabled Filters 178

TCP Rate Limiting 179

Configuring TCP Rate Limiting Filters 180

Tunable Hash for Filter Redirection 184

Filter-based Security 185

Network Address Translation 191

Static NAT 191

Dynamic NAT 193

FTP Client NAT 195

Matching TCP Flags 197

Matching ICMP Message Types 201

Web OS 10.0 Application Guide

Contents

212777-A, February 2002

Chapter 8: Application Redirection 203

Overview 204

Web Cache Redirection Environment 204

Additional Application Redirection Options 205

RTSP Web Cache Redirection 211

IP Proxy Addresses for NAT 213

Excluding Noncacheable Sites 215

Chapter 9: Virtual Matrix Architecture 217

Chapter 10: Health Checking 219

Real Server Health Checks 221

DSR Health Checks 222

Link Health Checks 223

Configuring the Switch for Link Health Checks 223

TCP Health Checks 224

ICMP Health Checks 224

Script-Based Health Checks 225

Configuring the Switch for Script-Based Health Checks 225

Script Format 226

Scripting Guidelines 227

Script Configuration Examples 227

Application-Specific Health Checks 230

HTTP Health Checks 231

UDP-Based DNS Health Checks 233

FTP Server Health Checks 234

POP3 Server Health Checks 235

SMTP Server Health Checks 236

IMAP Server Health Checks 237

NNTP Server Health Checks 238

RADIUS Server Health Checks 239

HTTPS/SSL Server Health Checks 240

WAP Gateway Health Checks 240

LDAP Health Checks 243

ARP Health Checks 245

Failure Types 246

Service Failure 246

Server Failure 246

Web OS 10.0 Application Guide

Contents 212777-A, February 2002

Chapter 11: High Availability 247

VRRP Overview 248

VRRP Components 248

VRRP Operation 251

Selecting the Master VRRP Router 251

Active-Standby Failover 252

Failover Methods 253

Active-Standby Redundancy 254

Active-Active Redundancy 255

Hot-Standby Redundancy 256

Synchronizing Configurations 258

Web OS Extensions to VRRP 259

Virtual Server Routers 259

Sharing/Active-Active Failover 260

Tracking VRRP Router Priority 261

High Availability Configurations 263

Active-Standby Virtual Server Router Configuration 263

Active-Active VIR and VSR Configuration 265

Active/Active Server Load Balancing Configuration 267

VRRP-Based Hot-Standby Configuration 275

Virtual Router Deployment Considerations 277

Mixing Active-Standby and Active-Active Virtual Routers 277

Synchronizing Active/Active Failover 277

Eliminating Loops with STP and VLANs 278

Assigning VRRP Virtual Router ID 280

Configuring the Switch for Tracking 280

Synchronizing Configurations 282

Stateful Failover of Layer 4 and Layer 7 Persistent Sessions 283

What Happens When a Switch Fails 284

Viewing Statistics on Persistent Port Sessions 286

Web OS 10.0 Application Guide

Contents

212777-A, February 2002

Part 3: Advanced Web Switching

Chapter 12: Global Server Load Balancing 289

GSLB Overview 290

Benefits 290

Compatibility with Other Web OS Features 290

How GSLB Works 291

Configuring GSLB 293

IP Proxy for Non-HTTP Redirects 304

How IP Proxy Works 305

Configuring Proxy IP Addresses 307

Verifying GSLB Operation 308

Configuring Client Site Preferences 308

Using Border Gateway Protocol for GSLB 312

Chapter 13: Firewall Load Balancing 313

Firewall Overview 314

Basic FWLB 316

Basic FWLB Implementation 317

Configuring Basic FWLB 319

Four-Subnet FWLB 326

Four-Subnet FWLB Implementation 327

Configuring Four-Subnet FWLB 329

Advanced FWLB Concepts 346

Free-Metric FWLB 346

Adding a Demilitarized Zone (DMZ) 349

Firewall Health Checks 351

Chapter 14: Virtual Private Network Load Balancing 353

Overview 354

Virtual Private Networks 354

How VPN Load Balancing Works 354

VPN Load-Balancing Configuration 356

Requirements 356

VPN Load-Balancing Configuration Example 356

Web OS 10.0 Application Guide

Contents 212777-A, February 2002

Chapter 15: Content Intelligent Switching 371

Overview 372

Parsing Content 373

HTTP Header Inspection 374

Buffering Content with Multiple Frames 374

Content Intelligent Server Load Balancing 375

URL-Based Server Load Balancing 375

Virtual Hosting 380

Cookie-Based Preferential Load Balancing 383

Browser-Smart Load Balancing 386

URL Hashing for Server Load Balancing 387

Header Hash Load Balancing 389

DNS Load Balancing 390

Layer 7 RTSP Load Balancing 392

Content Intelligent Web Cache Redirection 394

URL-Based Web Cache Redirection 395

HTTP Header-Based Web Cache Redirection 403

Browser-Based Web Cache Redirection 405

URL Hashing for Web Cache Redirection 406

Layer 7 RTSP Streaming Cache Redirection 409

Exclusionary String Matching for Real Servers 410

Configuring for Exclusionary URL String Matching 410

Regular Expression Matching 412

Standard Regular Expression Characters 412

Configuring Regular Expressions 413

Content Precedence Lookup 414

Requirements 415

Using the or and and Operators 415

Assigning Multiple Strings 416

Layer 7 Deny Filter 417

Este manual sirve para los siguientes modelos

Tabla de contenidos

Otros manuales de Software de Nortel

Nortel

Nortel ICB Manual de servicio

Nortel

Nortel V1 Manual de instrucciones

Nortel

Nortel 2070 Manual de usuario

Nortel

Nortel 3456 Manual de usuario

Nortel

Nortel Contact Center Manager Manual del producto

Nortel

Nortel 2350 Manual de usuario

Nortel

Nortel Symposium Agent Manual de usuario

Nortel

Nortel Voice Mail Guía de inicio rápido

Nortel

Nortel BCM 3.7 Manual de usuario

Nortel

Nortel Observe Manual de usuario

Nortel

Nortel ICB Guía de inicio rápido

Nortel

Nortel LinkPlexer Manual del operador

Nortel

Nortel Express Call Center Manual de usuario

Nortel

Nortel INM 5.0 Manual técnico

Nortel

Nortel Message Registration Instrucciones de funcionamiento e instalación

Nortel

Nortel PPS Manual de usuario

Nortel

Nortel Voice Mail Guía de configuración

Nortel

Nortel Contact Center Manager Manual de instrucciones

Nortel

Nortel ICB Manual de usuario

Nortel

Nortel Express Instrucciones de funcionamiento

Nortel

Nortel BCM200/400 Manual de usuario

Nortel

Nortel VPN Client Manual de usuario

Nortel

Nortel Alteon OS 40M2420 Manual de funcionamiento

Nortel

Nortel Attendant Console Manual de usuario

Manuales populares de Software de otras marcas

COMPRO

COMPRO COMPROFM Manual de usuario

Muratec

Muratec OFFICEBRIDGE ONLINE Manual de usuario

Oracle

Oracle Contact Center Anywhere 8.1 Manual de usuario

Adobe

Adobe 65007312 - Photoshop Lightroom Manual

Avaya

Avaya NULL One-X for RIM Blackberry Manual de usuario

HP ProLiant BL420c Manual de usuario

PS Audio

PS Audio PowerPlay Manual del propietario

Brady

Brady LOCKOUT PRO 3.0 Manual de servicio

Avaya

Avaya Interaction Center Manual de usuario

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manual

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manual de usuario

Oracle

Oracle Application 9i Manual de usuario

Acer

Acer RDM Manual de usuario

Canon

Canon Vixia HF21 Manual de usuario

Canon

Canon ZR950 Manual de usuario

Samsung

Samsung Auto Backup Manual de usuario

Polycom

Polycom Vortex EF2201 Instrucciones de instalación y funcionamiento

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manual de usuario