L4교육자료

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],1. Cache

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],1. Cache

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],1. Cache 캐시 서버 웹 서버 사용자 단말 Internet

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],1. Cache 캐시 서버 웹 서버 사용자 단말 L4 switch 또는 WCCP based router

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],1. Cache

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],2. L4 switch

[object Object],2. L4 switch Cache Cluster VPN Farm Firewall Farm HTTP, FTP Server Farm DNS Radius

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],2. L4 switch

[object Object],2. L4 switch Host B Host C Host A HTTP To A HTTP To B HTTP To C Cache Servers

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],2. L4 switch

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],2. L4 switch Clients HTTP DNS FTP HTTP Remote Backup/Overflow DNS FTP To 100.1.1.1 VIP 100.1.1.1 10.0.0.1 10.0.0.2

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],2. L4 switch

[object Object],[object Object],[object Object],2. L4 switch Internet FireWalls L4 Switch L4 Switch Internet Secured Network L4 Switch FireWalls L4 Switch Secured Network L4 Switch L4 Switch

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],3. AceDirector 3 (AD3)

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],3. AceDirector 3 (AD3) Multi-Gigabit switch backplane Management Module 4MB SRAM 2MB Flash Switch Modules Uplink Module 2MB 2MB ASIC 2MB RISC Fwd ASIC . . . . . RISC RISC Engine Fwd Engine RISC RISC RISC RISC 2MB ASIC RISC RISC Fwd Engine RISC

[object Object],3. AceDirector 3 (AD3) 256 K Filters 168 K URL Parsing 168 K Dynamic NAT 256 K WCR 168 K WCT with NAT 168 K SLB with NAT 336 K SLB(Server Load Balancing) 최대 Session Feature Set

[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],[object Object],3. AceDirector 3 (AD3)

[object Object],4. Configuration Cache server Client Client 10.254.100.100 10.51.1.84 10.51.1.110 Port 5

[object Object],4. Configuration Speed : 9600 Data bit : 8 Parity bit : none Stop bit : 1 Flow Cntl : none 5 3 2 To PC (female) 5 3 2 To AD3 (Male)

[object Object],4. Configuration Boot version 8.0.49 Press <esc> for maintenance kernel.... ACEdirector 3 Rebooted because of power cycle. Booting complete 23:51:08 Fri Dec 14, 2001: Version 8.0.49 from FLASH image1, factory default config block. Enter password: admin <-------- 화면에 표시되지 않음 System Information at 23:51:12 Fri Dec 14, 2001 ACEdirector 3 sysName: sysLocation: Last boot: 23:51:08 Fri Dec 14, 2001 (power cycle) MAC address: 00:60:cf:42:61:90 IP (If 1) address: 0.0.0.0 Hardware Revision: A Hardware Part No: 200009a02 Software Version 8.0.49 (FLASH image1), factory default configuration. The switch is booted with factory default configuration. To ease the configuration of the switch, a "Set Up" facility which will prompt you with those configuration items that are essential to the operation of the switch is provided. Would you like to run "Set Up" to configure the switch? [y/n] n ------------------------------------------------------------ [Main Menu] info - Information Menu stats - Statistics Menu cfg - Configuration Menu oper - Operations Command Menu boot - Boot Options Menu maint - Maintenance Menu diff - Show pending config changes [global command] apply - Apply pending config changes [global command] save - Save updated config to FLASH [global command] revert - Revert pending or applied changes [global command] exit - Exit [global command, always available] >> Main#

[object Object],4. Configuration >> Main# ------------------------------------------------------------ [Main Menu] info - Information Menu stats - Statistics Menu cfg - Configuration Menu oper - Operations Command Menu boot - Boot Options Menu maint - Maintenance Menu diff - Show pending config changes [global command] apply - Apply pending config changes [global command] save - Save updated config to FLASH [global command] revert - Revert pending or applied changes [global command] exit - Exit [global command, always available] Tab

[object Object],4. Configuration >> Main# /cfg/ip/if 1 ------------------------------------------------------------ [IP Interface 1 Menu] addr - Set IP address mask - Set subnet mask broad - Set broadcast address vlan - Set VLAN number ena - Enable IP interface dis - Disable IP interface del - Delete IP interface cur - Display current interface configuration >> IP Interface 1# addr 10.51.1.84 Current IP address: 0.0.0.0 New pending IP address: 10.51.1.84 Pending new subnet mask: 255.0.0.0 Pending new broadcast address: 10.255.255.255 Switch is set to use BOOTP for IP address assignment. Do you want to DISABLE the use of BOOTP? [y/n] n Use of BOOTP not changed. >> IP Interface 1# ena Current status: disabled New status: enabled >> IP Interface 1# apply ------------------------------------------------------------------ Apply complete; don't forget to "save" updated configuration. Also note that the following changes are still pending, waiting for a reset of the switch to take effect: Current value... new value... ------------------------------- Use of BOOTP enabled => disabled >> IP Interface 1#

[object Object],4. Configuration >> IP Interface 1# /cfg/slb/real 1 ------------------------------------------------------------ [Real server 1 Menu] rip - Set IP addr of real server name - Set server name weight - Set server weight maxcon - Set maximum number of connections tmout - Set minutes inactive connection remains open backup - Set backup real server inter - Set interval between health checks retry - Set number of failed attempts to declare server DOWN restr - Set number of successful attempts to declare server UP addlb - Add URL path for URL load balance remlb - Remove URL path for URL load balance remote - Enable/disable remote site operation proxy - Enable/disable client proxy operation submac - Enable/disable source MAC address substitution nocook - Enable/disable no available URL cookie operation exclude - Enable/disable exclusionary string matching ena - Enable real server dis - Disable real server del - Delete real server cur - Display current real server configuration >> Real server 1 # rip 10.51.1.110  cache server 의 IP Current real server IP address: 0.0.0.0 New pending real server IP address: 10.51.1.110 Warning: server did not respond to ping. >> Real server 1 # ena Current status: disabled New status: enabled >> Real server 1 # apply ------------------------------------------------------------------ Apply complete; don't forget to "save" updated configuration. >> Real server 1 #

[object Object],4. Configuration >> Real server 1 # /cfg/slb/group 1 ------------------------------------------------------------ [Real server group 1 Menu] metric - Set metric used to select next server in group content - Set health check content health - Set health check type backup - Set backup real server or group name - Set real server group name realthr - Set real server failure threshold add - Add real server rem - Remove real server del - Delete real server group cur - Display current group configuration >> Real server group 1# add 1 Real server 1 added to real server group 1. >> Real server group 1# apply ------------------------------------------------------------------ Apply complete; don't forget to "save" updated configuration. >> Real server group 1#

[object Object],4. Configuration >> Real server group 1# /cfg/slb/filt 2 ------------------------------------------------------------ [Filter 2 Menu] adv - Filter Advanced Menu smac - Set source MAC address dmac - Set destination MAC address sip - Set source IP address smask - Set source IP mask dip - Set destination IP address dmask - Set destination IP mask proto - Set IP protocol sport - Set source TCP/UDP port or range dport - Set destination TCP/UDP port or range action - Set action group - Set real server group for redirection rport - Set real server port for redirection nat - Set which addresses are network address translated invert - Enable/disable filter inversion ena - Enable filter dis - Disable filter del - Delete filter cur - Display current filter configuration

[object Object],4. Configuration >> Filter 2 # sip any  모든 source IP Current source address: any New pending source address: any >> Filter 2 # dip any  모든 destination IP Current destination address: any New pending destination address: any >> Filter 2 # proto tcp  tcp protocol Current protocol: any Pending new protocol: tcp >> Filter 2 # sport any  모든 source port Current source port or range: any Pending new source port or range: any >> Filter 2 # dport http  destination service port Current destination port or range: any Pending new destination port or range: http >> Filter 2 # action redir  동작 방식 정의 Current action: allow Pending new action: redir >> Filter 2 # rport http  redirection port Current real server port: 0 New pending real server port: http >> Filter 2 # group 1  이 filter 에 적용할 group 번호 Current real server group: 1 New pending real server group: 1 >> Filter 2 # ena Current status: disabled New status: enabled >> Filter 2 # apply ------------------------------------------------------------------ Apply complete; don't forget to "save" updated configuration. >> Filter 2 #

[object Object],4. Configuration >> Filter 2 # ../filt 224 ------------------------------------------------------------ [Filter 224 Menu] adv - Filter Advanced Menu smac - Set source MAC address dmac - Set destination MAC address sip - Set source IP address smask - Set source IP mask dip - Set destination IP address dmask - Set destination IP mask proto - Set IP protocol sport - Set source TCP/UDP port or range dport - Set destination TCP/UDP port or range action - Set action group - Set real server group for redirection rport - Set real server port for redirection nat - Set which addresses are network address translated invert - Enable/disable filter inversion ena - Enable filter dis - Disable filter del - Delete filter cur - Display current filter configuration >> Filter 224 # sip any Current source address: any New pending source address: any >> Filter 224 # dip any Current destination address: any New pending destination address: any >> Filter 224 # proto any Current protocol: any Pending new protocol: any >> Filter 224 # action allow Current action: allow Pending new action: allow >> Filter 224 # ena Current status: disabled New status: enabled >> Filter 224 # apply ------------------------------------------------------------------ Apply complete; don't forget to "save" updated configuration. >> Filter 224 #

[object Object],4. Configuration >> Filter 224 # ../port 5  client 가 연결되어 있는 port ------------------------------------------------------------ [SLB port 5 Menu] client - Enable/disable client processing server - Enable/disable server processing hotstan - Enable/disable hot-standby processing intersw - Enable/disable inter-switch processing proxy - Enable/disable use of PIP for ingress traffic pip - Set Proxy IP address for port filt - Enable/disable filtering add - Add filter to port rem - Remove filter from port cur - Display current port configuration >> SLB port 5# add 2  filter 2 추가 Filter 2 added to port 5. >> SLB port 5# add 224  filter 224 추가 Filter 224 added to port 5. >> SLB port 5# filt enable Current port 5 filtering: disabled New port 5 filtering: enabled >> SLB port 5# apply ------------------------------------------------------------------ Apply complete; don't forget to "save" updated configuration. Also note that the following changes are still pending, waiting for a reset of the switch to take effect: Current value... new value... ------------------------------- Filtering: Filter 2: Filter 224: >> SLB port 5#

[object Object],4. Configuration >> SLB port 5# ..  상위 메뉴 (layer 4) 로 이동 ------------------------------------------------------------ [Layer 4 Menu] real - Real Server Menu group - Real Server Group Menu virt - Virtual Server Menu filt - Filtering Menu port - Layer 4 Port Menu gslb - Global SLB Menu url - URL Resource Definition Menu sync - Config Synch Menu adv - Layer 4 Advanced Menu on - Globally turn Layer 4 processing ON off - Globally turn Layer 4 processing OFF cur - Display current Layer 4 configuration >> Layer 4# on Current status: OFF New status: ON >> Layer 4# apply ------------------------------------------------------------------ Apply complete; don't forget to "save" updated configuration. >> Layer 4#

[object Object],4. Configuration >> Layer 4# save Request will first copy the FLASH "active" config to "backup", then overlay FLASH "active" with new config. Confirm saving to FLASH [y/n]: y Compressing FLASH................ New config successfully saved to FLASH. Switch is currently set to use factory default config block on next boot. Do you want to change that to the active config block? [y/n] y Next boot will use active config block. >> Layer 4#

[object Object],4. Configuration >> Main# /info/slb  slb 모드로 이동 ------------------------------------------------------------ [Server Load Balancing Information Menu] sess - Session Table Information Menu real - Show real server information virt - Show virtual server information filt - Show redirect filter information port - Show port information gslb - Show GSLB information dump - Show all layer 4 information

[object Object],4. Configuration >> Main# /cfg/dump script start "ACEdirector 3" 4 /**** DO NOT EDIT THIS LINE! /* Configuration dump taken 3:21:16 Sat Dec 15, 2001 /* Version 8.0.49, Base MAC address 00:60:cf:42:61:90 /* /cfg/sys idle 5 bootp ena snmp w http ena wport 80 /* /* /* /* /* /cfg/port 1 ena tag dis pvid 1 cont 256 /cfg/port 1/fast speed any fctl both mode any auto on /cfg/port 2 ena tag dis pvid 1 cont 256 /cfg/port 2/fast speed any fctl both mode any auto on

[object Object],4. Configuration /cfg/port 3 ena tag dis pvid 1 cont 256 /cfg/port 3/fast speed any fctl both mode any auto on /cfg/port 4 ena tag dis pvid 1 cont 256 /cfg/port 4/fast speed 0? fctl none mode 0? auto off /cfg/port 5 ena tag dis pvid 1 cont 256 /cfg/port 5/fast speed any fctl both mode any auto on /cfg/port 6 ena tag dis pvid 1 cont 256 /cfg/port 6/fast speed any fctl both mode any auto on

[object Object],4. Configuration /cfg/port 7 ena tag dis pvid 1 cont 256 /cfg/port 7/fast speed any fctl both mode any auto on /cfg/port 8 ena tag dis pvid 1 cont 256 /cfg/port 8/fast speed any fctl both mode any auto on /cfg/port 9 ena tag dis pvid 1 cont 256 /cfg/port 9/gig fctl both auto on /* /* /* /* /* /* /* /* /* /*

[object Object],4. Configuration /cfg/ip rearp 10 metrc strict /cfg/ip/if 1 ena addr 10.51.1.84 mask 255.0.0.0 broad 10.255.255.255 vlan 1 /cfg/ip/frwd/on dirbr disabled /* /* /cfg/slb/url/redir cooki dis urlal ena nocache ena hash disable header dis host /cfg/slb/url/lb add "any" /* /* /cfg/slb on /cfg/slb/adv direc dis imask 255.255.255.255 mnet 0.0.0.0 mmask 255.255.255.255 pmask 255.255.255.255 grace dis btshf 0 matrix ena /cfg/slb/real 1 ena rip 10.51.1.110 weight 1 maxcon 200000

[object Object],4. Configuration backup none inter 2 remot dis tmout 10 retry 4 restr 8 proxy ena submac dis nocook dis exclude dis /cfg/slb/group 1 metric leastconns backup none healt tcp realthr 0 add 1 /* /* /cfg/slb/gslb/lookup lookups disabled /* /* /cfg/slb/filt 2 ena actio redir sip any smask 0.0.0.0 dip any dmask 0.0.0.0 proto tcp sport any dport http group 1 rport 80 /cfg/slb/filt 2/adv

[object Object],4. Configuration /cfg/slb/filt 224 ena actio allow sip any smask 0.0.0.0 dip any dmask 0.0.0.0 proto any /cfg/slb/filt 224/adv /cfg/slb/port 5/ filt ena add 2 add 224 /* /* /* /* /script end /**** DO NOT EDIT THIS LINE! >> Configuration#

[object Object],[object Object],[object Object],4. Configuration

[object Object],4. Configuration >> Main# boot ------------------------------------------------------ [Boot Options Menu] image - Select software image to use on next boot conf - Select config block to use on next boot tftp - Download new software image via TFTP reset - Reset switch [WARNING: Restarts Spanning Tree] cur - Display current boot options >> Boot Options# conf Currently set to use active config block on next boot. Specify new block to use ["active"/"backup"/"factory"]: factory Next boot will use factory default config block instead of active. >> Boot Options# reset Reset will use software "image1" and the factory default config block. >> Note that this will RESTART the Spanning Tree, >> which will likely cause an interruption in network service. Confirm reset [y/n]: y Resetting at 4:27:18 Sat Dec 15, 2001...

L4교육자료

Recommandé

Recommandé

Contenu connexe

Tendances

Tendances (20)

Similaire à L4교육자료

Similaire à L4교육자료 (20)

L4교육자료