Product Documentation

Advanced Deployments

Feb 06, 2014

This page has the configuration for advanced deployment modes: WCCP, high-availability, group mode, and proxy mode.

WCCP Configuration Tab

This page allows WCCP mode to be configured. In WCCP mode, the router sends data to the Appliance, which returns it after processing to the router. Both L2 and GRE transport are supported.

See WCCP Mode for the procedure for setting up your router and Appliance for use with WCCP.

High Availability (HA) Tab

Note: Clicking Update will terminate all open TCP connections.

This page allows you to set up Appliances as high-availability pairs, so that if one unit fails, the other will take over.

High Availability Status: One of Standalone, Primary, or Secondary. A standalone unit is not part of an HA pair. A primary unit is actively handling accelerated connections. A secondary unit is idle, ready to take over if the primary unit fails.

Partner High Availability Status: Status of the HA partner, if present.

SSL Common Name: Uniquely identifies this Appliance. You type this string into the Partner SSL Common Name field on your HA partner Appliance.

Virtual VIP Configuration: The virtual IP address used to manage the pair as a unit is not set here, but on the Configure Settings: UI page. A link is provided here.

VRRP VRID: This identifies the HA pair according to the VRRP (Virtual Router Redundancy Protocol) as defined in RFC 2338. The default value of 0 is not a valid VRRP VRID, which must be in the range of 1-255. If there are no other VRRP devices on the subnet containing the Appliance, the choice of a VRRP ID is arbitrary.

Note that, while the Appliance uses a VRRP ID (which is designed primarily for routers), the Appliance is not a router.

Partner SSL Common Name: Copy this from the Acceleration Partner’s SSL Common Name field.

Enabled: Turns high-availability functionality on or off. You will be warned that enabling or disabling high availability will terminate all open connections.

HA Partner Info Tab

Lists information about the HA partner unit, if configured

Figure 1. HA Partner Info Tab

HA VIP Address Tab

Repeats the VIP information from the Configure Settings: Network Adapters: IP Addresses tab.

Figure 2. HA VIP Address Tab

Group Mode Tab

Group mode is a means for allowing two or more redundant links to be shared by two or more inline Appliances, with no requirement that all the packets for a given connection pass through the same Appliance.

Group mode and the fields on the Group Mode page are fully explained in Group Mode.

Figure 3. Group Mode Tab

HA/Group Mode SSL Certificates Tab

When an Appliance is a member of a high-availability pair or group-mode group, these certificates and keys are used to authenticate each other.

Private keys and certificates are factory-installed, but can be replaced, if desired. Click Edit, and paste the new certificates and key in the boxes provided, replacing the old ones, then click Update.

Proxy Tab

In proxy mode, the Appliance masquerades locally as the remote system. Traffic for the remote system is then forwarded to a remote Appliance and then to the remote system itself.

Figure 4. Proxy Tab

Proxying involves address translation. The addresses are entered in the Proxy Configuration page.

With a proxy connection, one end of the connection may be left in inline mode. When this is done, the in-lined appliance requires no configuration.

When you enter a new proxy definition, the appliance pings the target address when you click Add. If the ping is unsuccessful, a warning icon is displayed and the target address is shown in red. However, the proxy entry is still active. On paths where pings are blocked but TCP traffic is not, the proxy definition will work in spite of the warning icon.