SteelFusion Edge Installation and Configuration Guide

Transcription

1 SteelFusion Edge Installation and Configuration Guide Appliances 2100, 2200, 3100, 3200, and 5100 Version 4.0 June 2015

2 2015 Riverbed Technology, Inc. All rights reserved. Riverbed, SteelApp, SteelCentral, SteelFusion, SteelHead, SteelScript, SteelStore, Steelhead, SteelHead (in the cloud), SteelHead (virtual edition), Granite, SteelHead Interceptor, Stingray, Whitewater, WWOS, RiOS, Think Fast, AirPcap, BlockStream, FlyScript, SkipWare, TrafficScript, TurboCap, WinPcap, Mazu, OPNET, and Cascade are all trademarks or registered trademarks of Riverbed Technology, Inc. (Riverbed) in the United States and other countries. Riverbed and any Riverbed product or service name or logo used herein are trademarks of Riverbed. All other trademarks used herein belong to their respective owners. The trademarks and logos displayed herein cannot be used without the prior written consent of Riverbed or their respective owners. Akamai and the Akamai wave logo are registered trademarks of Akamai Technologies, Inc. SureRoute is a service mark of Akamai. Apple and Mac are registered trademarks of Apple, Incorporated in the United States and in other countries. Cisco is a registered trademark of Cisco Systems, Inc. and its affiliates in the United States and in other countries. EMC, Symmetrix, and SRDF are registered trademarks of EMC Corporation and its affiliates in the United States and in other countries. IBM, iseries, and AS/400 are registered trademarks of IBM Corporation and its affiliates in the United States and in other countries. Juniper Networks and Junos are registered trademarks of Juniper Networks, Incorporated in the United States and other countries. Linux is a trademark of Linus Torvalds in the United States and in other countries. Microsoft, Windows, Vista, Outlook, and Internet Explorer are trademarks or registered trademarks of Microsoft Corporation in the United States and in other countries. Oracle and JInitiator are trademarks or registered trademarks of Oracle Corporation in the United States and in other countries. UNIX is a registered trademark in the United States and in other countries, exclusively licensed through X/Open Company, Ltd. VMware, ESX, ESXi are trademarks or registered trademarks of VMware, Inc. in the United States and in other countries. This product includes Windows Azure Linux Agent developed by the Microsoft Corporation ( Copyright 2012 Microsoft Corporation. This product includes software developed by the University of California, Berkeley (and its contributors), EMC, and Comtech AHA Corporation. This product is derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm. The SteelHead Mobile Controller (virtual edition) includes VMware Tools. Portions Copyright VMware, Inc. All Rights Reserved. NetApp Manageability Software Development Kit (NM SDK), including any third-party software available for review with such SDK which can be found at and are included in a NOTICES file included within the downloaded files. For a list of open source software (including libraries) used in the development of this software along with associated copyright and license agreements, see the Riverbed Support site at https//support.riverbed.com. This documentation is furnished AS IS and is subject to change without notice and should not be construed as a commitment by Riverbed. This documentation may not be copied, modified or distributed without the express authorization of Riverbed and may be used only in connection with Riverbed products and services. Use, duplication, reproduction, release, modification, disclosure or transfer of this documentation is restricted in accordance with the Federal Acquisition Regulations as applied to civilian agencies and the Defense Federal Acquisition Regulation Supplement as applied to military agencies. This documentation qualifies as commercial computer software documentation and any use by the government shall be governed solely by these terms. All other use is prohibited. Riverbed assumes no responsibility or liability for any errors or inaccuracies that may appear in this documentation. Riverbed Technology 680 Folsom Street San Francisco, CA Phone: Fax: Web: Part Number

3 Contents Preface...1 About This Guide...1 Audience...2 Document Conventions...2 Documentation and Release Notes...2 Contacting Riverbed...3 Chapter 1 - Introducing the SteelFusion Edge Appliance...5 Introducing SteelFusion...5 SteelFusion Edge Appliance Architecture...7 Hypervisor Node...7 RiOS Node...8 New Features...8 Hardware and Software Dependencies...9 Hardware and Software Dependencies...9 Available BlockStore Space...10 License Requirements...10 Firewall Requirements...11 SNMP-Based Management Compatibility...11 Ethernet Network Compatibility...12 Migrating Data from the SteelHead EX Appliance...12 Chapter 2 - Managing Riverbed Licenses...13 Riverbed Licensing Methods...13 Automatic Licensing...14 Manual Licensing Using the Riverbed Licensing Portal...15 Retrieving Licenses Using the Riverbed Licensing Portal...15 Installing Your License Keys...15 SteelFusion Edge Installation and Configuration Guide iii

4 Contents Chapter 3 - Installing and Configuring the SteelFusion Edge Appliance...17 Deploying the SteelFusion Edge Appliance...17 Checking Your Inventory...18 Preparing Your Site for Installation...19 Site Requirements...19 SteelFusion Edge Ports...20 Network Interface Cards...21 Avoiding Duplex Mismatch...22 Completing the Configuration Checklist...23 Powering On the Appliance...23 Configuring SteelFusion Edge Appliances...24 Connecting the SteelFusion Edge to Your Network...24 Connecting Virtual Machines to the SteelFusion Edge Appliance...26 Running the Configuration Wizard...26 Verifying You Are Connected to the Appliance...30 Connecting to the Management Console...32 Verifying WAN Optimization...33 Checking for Speed and Duplex Errors...34 Next Steps...34 Index...35 iv SteelFusion Edge Installation and Configuration Guide

5 Preface Welcome to the SteelFusion Edge Installation and Configuration Guide. Read this preface for an overview of the information provided in this guide and for an understanding of the documentation conventions used throughout. It includes these sections: About This Guide on page 1 Documentation and Release Notes on page 2 Contacting Riverbed on page 3 About This Guide This guide describes how to install and configure the SteelFusion Edge appliance (Edge appliance). For the appliance specifications, status lights, and ports, see the SteelFusion Edge Hardware Installation and Maintenance Guide. This guide includes information relevant to these products and product features: Riverbed SteelFusion Edge appliance (Edge appliance) Riverbed SteelFusion Core appliance (Core) Riverbed Optimization System (RiOS) Riverbed SteelHead CX (SteelHead) Riverbed SteelHead EX (EX) SteelCentral Controller for SteelHead (SCC) Riverbed command-line interface (CLI) This guide is intended to be used together with the following documentation: SteelFusion Edge Hardware Installation and Maintenance Guide SteelFusion Edge Management Console User s Guide SteelFusion Core and Edge Deployment Guide SteelFusion Command-Line Interface Reference Manual SteelFusion Core Installation and Configuration Guide SteelFusion Core Management Console User s Guide SteelFusion Edge Installation and Configuration Guide 1

6 Preface Documentation and Release Notes Audience This guide is written for storage and network administrators familiar with administering and managing WANs using common network protocols such as TCP, CIFS, HTTP, FTP, and NFS. Document Conventions This manual uses the following standard set of typographical conventions to introduce new terms, illustrate screen displays, describe command syntax, and so forth. Convention italics boldface Courier Meaning Within text, new terms and emphasized words appear in italic typeface. Within text, CLI commands, CLI parameters, and REST API properties appear in bold typeface. Code examples appear in Courier font: amnesiac > enable amnesiac # configure terminal < > Values that you specify appear in angle brackets: interface <ip-address> [ ] Optional keywords or variables appear in brackets: ntp peer <ip-address> [version <number>] { } Elements that are part of a required choice appear in braces: {<interface-name> ascii <string> hex <string>} The pipe symbol separates alternative, mutually exclusive elements of a choice. The pipe symbol is used in conjunction with braces or brackets; the braces or brackets group the choices and identify them as required or optional: {delete <filename> upload <filename>} Safety Guidelines Follow the safety precautions outlined in the Safety and Compliance Guide when installing and setting up your equipment. Caution: Failure to follow these safety guidelines can result in injury or damage to the equipment. Mishandling of the equipment voids all warranties. Read and follow safety guidelines and installation instructions carefully. Many countries require the safety information to be presented in their national languages. If this requirement applies to your country, consult the Safety and Compliance Guide. Before you install, operate, or service the Riverbed products, you must be familiar with the safety information. Refer to the Safety and Compliance Guide if you do not clearly understand the safety information provided in the product documentation. Documentation and Release Notes To obtain the most current version of all Riverbed documentation, go to the Riverbed Support site at If you need more information, see the Riverbed Knowledge Base for any known issues, how-to documents, system requirements, and common error messages. You can browse titles or search for keywords and strings. To access the Riverbed Knowledge Base, log in to the Riverbed Support site at 2 SteelFusion Edge Installation and Configuration Guide

7 Contacting Riverbed Preface Each software release includes release notes. The release notes identify new features in the software as well as known and fixed problems. To obtain the most current version of the release notes, go to the Software and Documentation section of the Riverbed Support site at Examine the release notes before you begin the installation and configuration process. Contacting Riverbed This section describes how to contact departments within Riverbed. Technical support - If you have problems installing, using, or replacing Riverbed products, contact Riverbed Support or your channel partner who provides support. To contact Riverbed Support, open a trouble ticket by calling RVBD-TAC ( ) in the United States and Canada or outside the United States. You can also go to Professional services - Riverbed has a staff of professionals who can help you with installation, provisioning, network redesign, project management, custom designs, consolidation project design, and custom coded solutions. To contact Riverbed Professional Services, proserve@riverbed.com or go to Documentation - The Riverbed Technical Publications team continually strives to improve the quality and usability of Riverbed documentation. Riverbed appreciates any suggestions you might have about its online documentation or printed materials. Send documentation comments to techpubs@riverbed.com. SteelFusion Edge Installation and Configuration Guide 3

8 Preface Contacting Riverbed 4 SteelFusion Edge Installation and Configuration Guide

9 CHAPTER 1 Introducing the SteelFusion Edge Appliance This chapter provides an overview of SteelFusion Edge appliance (Edge appliance), including an overview of the Edge hardware platform, new features, hardware and software dependencies, and migrating data from the SteelHead EX appliance. It includes these sections: Introducing SteelFusion on page 5 New Features on page 8 Hardware and Software Dependencies on page 9 Migrating Data from the SteelHead EX Appliance on page 12 Introducing SteelFusion SteelFusion is a converged infrastructure solution, encompassing all branch services such as server, storage, networking, and WAN optimization. SteelFusion is a dual-ended system comprised of two logical components: SteelFusion Edge and SteelFusion Core. SteelFusion Core is a physical or virtual appliance in the data center that mounts all LUNs that need to be made available to applications and servers at a the branch from the centralized storage array. SteelFusion Core appliances communicate across the WAN with the SteelFusion Edge appliances at the branch. SteelFusion Edge (Edge appliance) is a physical appliance that is located at the branch. The Edge appliance provides a virtualized environment that hosts the branch application servers. The Edge appliance also provides RiOS WAN optimization (depending on your order), and BlockStream enabled storage. SteelFusion delivers local user performance to applications and data, while enabling the centralization of these applications and data, instant recovery, and lower total operating costs. You can access applications that run locally in your branch while the data is maintained and protected in your data center. SteelFusion Edge Installation and Configuration Guide 5

10 Introducing the SteelFusion Edge Appliance Introducing SteelFusion The following diagram shows a typical SteelFusion deployment. Figure 1-1. Typical SteelFusion Deployment For detailed information about SteelFusion and how it works, see the SteelFusion Edge Management Console User s Guide and the SteelFusion Core and Edge Deployment Guide. The following terminology will help you understand SteelFusion and its features. Virtualization - All software and hardware concerning the installation, deployment, and management of the hypervisor and virtual machines (VMs). Virtualization encompasses both RiOS and hypervisor hardware nodes. Hypervisor - VMware virtualization software running on bare-metal hardware that creates and runs VMs. Virtual Services Platform (VSP) - A component of the RiOS software that describes the management, communication, and reporting of the hypervisor. RiOS node - Hardware node that manages and controls WAN optimization, storage, and VSP are deployed. Hypervisor node - Hardware node where hypervisor hardware resources and software are deployed. Interconnects - Internal TCP network used to communicate to and from RiOS and the hypervisor nodes. 6 SteelFusion Edge Installation and Configuration Guide

11 Introducing SteelFusion Introducing the SteelFusion Edge Appliance SteelFusion Edge Appliance Architecture The Edge hardware platform contains two distinct computing nodes within a single chassis: RiOS node and Hypervisor node. The physical node design provides true hardware resource separation and isolation. These two compute nodes, the RiOS node and the hypervisor node, are connected through Gbps Ethernet interconnects that allow both nodes to communicate for management, networking, and storage data. Figure 1-2. SteelFusion Edge Architecture Each node has its own resources, for example each node has its own sensors for temperature, voltage, and DIMMs. Storage for the Hypervisor node is provided from the RiOS node via the Gbps interconnects using iscsi. Hypervisor Node The Hypervisor node is a bare-metal virtualization platform that enables you to run multiple VMs on the Edge appliance. With the Hypervisor node, you can consolidate multiple basic services in the branch such as Active Directory (AD), Domain Name Service (DNS), print server, and file server. You install and run VMs directly from the Hypervisor node of the Edge appliance. The hypervisor uses the ESXi 5.5U2 software as the virtualization platform. The hypervisor is included in the Edge appliance and does not require a separate download. After you install the Edge appliance, you set up the hypervisor using the Edge Management Console Installer. You set up and configure VMs through the VMware vsphere Client or a licensed vcenter. You must install the VMware vsphere Hypervisor Client, which enables monitoring and management of a single instance of ESX or ESXi server. You can download the vsphere applications from the VMware Web site, or you can download the vsphere Client from the hypervisor host. The Hypervisor node enables you to connect to the hypervisor serial console using the RiOS CLI command hypervisor console. You can also perform debugging by connecting via SSH to the hypervisor baseboard management controller (BMC) internal IP address. For detailed information, see the SteelFusion Command- Line Interface Reference Manual and the SteelFusion Edge Hardware Installation and Maintenance Guide. SteelFusion Edge Installation and Configuration Guide 7

12 Introducing the SteelFusion Edge Appliance New Features RiOS Node The RiOS node incorporates SteelHead RiOS v9.0 features to provide WAN optimization. All features available with RiOS v9.0 are available on the Edge appliance. You manage the storage and networking components using the SteelFusion Management Console, and utilize VMware vsphere Client or vcenter to interact with the hosted VMs. The RiOS node also includes the VSP management software for virtualization. The RiOS node provides BlockStream iscsi storage for the hypervisor datastores. You configure the space allotted to the BlockStream iscsi storage using the SteelFusion Management Console Hypervisor Installer. For detailed information about the Hypervisor Installer, see the SteelFusion Edge Management Console User s Guide. Networking Interfaces The Edge hardware platform includes: Management interfaces - Management network ports for the RiOS node are provided using the primary (PRI) and auxiliary (AUX) interfaces. SteelHead bypass Interfaces - SteelHead bypass ports are provided on the RiOS node through a preinstalled NIC (LANX_Y, WANX_Y). Storage interfaces - Storage ports for external iscsi or high availability connections for SteelFusion are provided on the RiOS node via the storage ports (eth0_0, eth0_1). Hypervisor data interfaces - For the Hypervisor node, any of the four data ports labeled gbe 0_0, gbe0_1, gbe0_2, gbe0_3 can be used for virtualization depending on the hypervisor configuration. You configure these ports during the initial configuration using the Edge Management Console Hypervisor Installer and manage them using VMware vsphere Client or vcenter. New Features These features are available in Edge v4.0: New hardware platform - SteelFusion Edge appliance v4.0 ships on a new 1U and 2U hardware platform: models 2100, 2200, 3100, 3200, and The SteelFusion Edge hardware architecture contains two distinct computing nodes within a single chassis: RiOS node and Hypervisor node. The RiOS node provides WAN optimization, BlockStream storage, and VSP functionality. The Hypervisor node provides VMware ESXi v5.5 virtualization support. ESXi v5.5 support - This release updates the approved vsphere version to v5.5 update 2. SteelFusion Core v4.0 support - SteelFusion Edge v4.0 includes the SteelFusion Core v4.0 features. You can also connect a SteelFusion Core v3.6 to a SteelFusion Edge v4.0 for BlockStream support. 8 SteelFusion Edge Installation and Configuration Guide

13 Hardware and Software Dependencies Introducing the SteelFusion Edge Appliance Local LUNs on the branch - SteelFusion Edge v4.0 modifies the storage subsystem used by VMs on the Hypervisor node; the VM ESXi datastore is now accessed through iscsi rather than through local storage access. This feature enables support for VMware features like vmotion (with appropriate additional licenses) and also simplifies centralized protection in the data center when consolidated using a SteelFusion Core. Note: The SteelHead EX appliance applies only to the xx60 hardware platforms the SteelFusion Edge appliance v4.0 (models 21000, 2200, 3100, 3200, 5100) applies to all deployments of the product, whether there is a SteelFusion Core appliance deployed or not. Hardware and Software Dependencies This section describes the hardware and software dependencies for the appliance. It includes the following sections: Hardware and Software Dependencies on page 9 Available BlockStore Space on page 10 License Requirements on page 10 Firewall Requirements on page 11 SNMP-Based Management Compatibility on page 11 Ethernet Network Compatibility on page 12 Hardware and Software Dependencies This table summarizes the hardware and software requirements for the Edge appliance. Riverbed Component SteelFusion Edge SteelFusion Edge Management Console SteelFusion Core, SteelFusion Core Management Console Hardware and Software Requirements 19-inch (483-mm) two-post or four-post rack. Any computer that supports a Web browser with a color image display. The Management Console has been tested with Mozilla Firefox Extended Support Release version 24.0 and Microsoft Internet Explorer v8.0 and v9.0. JavaScript and cookies must be enabled in your Web browser. v3.6 or later SteelFusion Edge Installation and Configuration Guide 9

14 Introducing the SteelFusion Edge Appliance Hardware and Software Dependencies Riverbed Component Hardware and Software Requirements SteelHead, SteelHead Management Console RiOS v9.0 VMware vsphere Hypervisor v5.5update 2 (v5.5u2) You can download the vsphere applications from the VMware Web site, or you can download the vsphere Client from the hypervisor host. The Edge appliance ships with a Riverbed specific VMware vsphere Hypervisor license. This license enables basic hypervisor functions such as monitoring and management of a single instance of an ESXi server. Available BlockStore Space This section describes the available BlockStore, usable storage, and the maximum pinnable storage. SteelFusion Edge Model BlockStore (GB) Usable Storage (GB) Maximum Pinnable Storage (GB) This refers to the space after RAID configuration for the entire BlockStore. This refers to the space available to store LUNs after accounting for the metadata. The metadata uses approximately 8% of the size of the BlockStore. This refers to the maximum space that can be reserved by pinned LUNs. This is lower than usable storage to ensure that a minimum amount of space is reserved for writes ,500 1,381 1, ,500 3,224 2, ,400 6,818 6, ,200 14,005 12,604 Note: The Edge Management Console Installer displays the available physical storage using base 2 (that is, 1024 bytes = 1 KB) rather than base 10 (that is, 1000 bytes = 1 KB). The base 10 figure is used in this table and the specification sheet for the appliance. Please be aware of the slight difference between these figures when you are calculating the available space for your deployment. For example, when 2.6 TB is displayed in the Edge Installer it represents 2.9 TB of available space. License Requirements The following Riverbed licenses are mandatory for virtualization in the appliance: VSPBASE - The VSP base license to manage virtualization and VSP operations. This software that is part of RiOS software. VSPESXI - License to install the embedded ESXi software. 10 SteelFusion Edge Installation and Configuration Guide

15 Hardware and Software Dependencies Introducing the SteelFusion Edge Appliance After installing and connecting the Edge appliance, the Riverbed Licensing Portal is automatically contacted to retrieve and install the required license keys onto the Edge appliance. If either of the licenses have expired or are about to expire, an alarm is triggered in the Management Console Alarms page. For detailed information about Riverbed licensing, see Automatic Licensing on page 14. The Edge appliance ships with an embedded VMware ESXi vsphere Hypervisor license. This license is the free bare-metal hypervisor that virtualizes servers so you can consolidate your applications on less hardware. This license enables basic hypervisor functions without support for more advanced vsphere features such as vcenter, vmotion, high availability, and so on. If you need additional features beyond what the embedded vsphere Hypervisor license provides, you will need to purchase a license upgrade through your VMware reseller. There are two types of licenses that you can purchase to enable vcenter support: vsphere license - This license is installed into the vsphere instance of the Edge appliance. This license controls the infrastructure capabilities of the hypervisor, for example: vmotion, evmotion, distributed resource scheduler (DRS), high availability (HA), fault tolerance (FT). It does not restrict how many appliances can be connected to vcenter. You can purchase this license and add it to your ESXi instance in vcenter. vcenter Server license - This license is installed onto the vcenter server. There are two levels for this license: foundation and standard. The foundation license provides management tools for up to three vsphere hosts. The standard license provides large scale management of VMware vsphere deployments for up to 1000 vsphere hosts. If you want to manage more than three ESXi hosts, you must purchase the vcenter Server license. Riverbed recommends purchasing a vcenter Server license as it enables monitoring and management of multiple ESX, ESXi, and GSX servers. In addition, the vcenter Server license provides infrastructure services such as vmotion, evmotion, DRS, HA, and FT. Changing Your VMware License If you prefer to use your own VMware license rather than the Riverbed embedded vsphere Hypervisor license, you can change the VMware license when you run the Hypervisor Installer in the Edge Management Console. You can access the Hypervisor Installer either from the Management Console Dashboard or from Virtualization > Installer: Installer. For detailed information about changing your VMware license in the Hypervisor Installer, see the SteelFusion Edge Management Console User s Guide. Firewall Requirements Riverbed recommends that you deploy the Edge appliance behind your firewall. The ports 7800 and 7810 must be open. SNMP-Based Management Compatibility The Edge appliance supports a proprietary Riverbed MIB accessible through SNMP. SNMPv1 (RFCs 1155, 1157, 1212, and 1215), SNMPv2c (RFCs 1901, 2578, 2579, 2580, 3416, 3417, and 3418), and SNMPv3 are supported, although some MIB items might be accessible only through SNMPv3 and SNMPv2. SNMP support allows the Edge to be integrated into network management systems such as Hewlett Packard OpenView Network Node Manager, BMC Patrol, and other SNMP-based network management tools. SteelFusion Edge Installation and Configuration Guide 11

16 Introducing the SteelFusion Edge Appliance Migrating Data from the SteelHead EX Appliance Ethernet Network Compatibility The Edge appliance supports the following Ethernet networking standards: Ethernet Logical Link Control (LLC) (IEEE ) Fast Ethernet 100BASE-TX (IEEE ) Gigabit Ethernet over Copper 1000BASE-TX The Edge ports support the following connection types and speeds: Primary - 10BASE-T, 100BASE-TX, and 1000BASE-TX, autonegotiating Auxiliary - 10BASE-T, 100BASE-TX, and 1000BASE-TX, autonegotiating gbe0_0 to gbe0_3-10base-t, 100BASE-TX, 1000BASE-TX, depending on configuration eth0_0 to eth0_1-10base-t, 100BASE-TX, 1000BASE-TX, depending on configuration The Edge appliance supports VLAN tagging (IEEE 802.1Q ). It does not support the ISL protocol. All copper interfaces are autosensing for speed and duplex (IEEE ). The Edge appliance automatically negotiates speed and duplex mode for all data rates and supports full duplex mode and flow control (IEEE ). Migrating Data from the SteelHead EX Appliance There is no upgrade path from SteelHead EX appliance to the Edge appliance as they are different products that run on different hardware platforms. If your SteelFusion deployment previously consisted of a BlockStream-enabled SteelHead EX appliance and a SteelFusion Core appliance, and if your data is backed by a SteelFusion Core, you can migrate your data to the SteelFusion Edge appliance. To migrate the data, you unmap the LUN from the SteelHead EX appliance and rejoin that LUN to the new Edge appliance. 12 SteelFusion Edge Installation and Configuration Guide

17 CHAPTER 2 Managing Riverbed Licenses This chapter describes the Riverbed licensing methods and how to manage Riverbed licenses. It includes these sections: Riverbed Licensing Methods on page 13 Automatic Licensing on page 14 Manual Licensing Using the Riverbed Licensing Portal on page 15 Riverbed Licensing Methods A license is a string issued by Riverbed that embeds information that ties the license to data to prevent tampering. After you install the license, the system saves it in the configuration database and enables the functionality associated with the license. Riverbed employs the following licensing methods: Automatic licensing - After you connect your appliance to the network, the appliance automatically contacts the Riverbed Licensing Portal and downloads and installs the licenses. Manual licensing - You can manually fetch and activate licenses for Riverbed products using the Riverbed Licensing Portal. To retrieve license keys, follow the instruction at Token method - You use tokens to activate Riverbed software, such as the Virtual SteelCentral Controller for SteelHead Mobile, Virtual SteelStore, and Virtual SteelFusion Core. For detailed information, see the respective installation guides for these products. Factory licensing - You can have all your Riverbed licenses installed at the factory for a small fee. SteelFusion Edge Installation and Configuration Guide 13

18 Managing Riverbed Licenses Automatic Licensing Automatic Licensing Automatic licensing allows the appliance, once connected to the network, to automatically contact the Riverbed Licensing Portal to retrieve and install license keys onto the appliance. Automatic licensing simplifies inventory management and provides an automated mechanism of fetching licenses for Riverbed products without having to manually activate individual appliances and licenses. If you are behind a firewall, you can retrieve licenses at the Riverbed Licensing Portal using the option or by downloading and XML file to the appliance. For detailed information, see Retrieving Licenses Using the Riverbed Licensing Portal on page 15. Automatic licensing also works over a Web proxy. For details on setting up a Web proxy, see the SteelHead Management Console User s Guide. Note: If automatic licensing fails, an error message is displayed in the Management Console. Go to the Riverbed Licensing Portal and follow the instructions for retrieving your licenses. To view licenses on a new appliance Connect the new appliance to the network. The appliance automatically contacts the Riverbed Licensing Portal, which downloads and installs the licenses. The Management Console Licensing page displays a success message, or the Alarm Status page reports an actionable error message. To replace expired licenses Purchase new downloadable licenses to replace the expired license. At the time of the next scheduled automatic license fetch, the appliance automatically contacts the Riverbed License Portal and downloads the new licenses. The Management Console Licensing page displays a success message or the Alarm Status page reports an actionable error message. You do not need to delete the expired license. The system uses the license with the latest expiration date. To fetch a license on demand 1. In the Management Console, choose Configure > Maintenance: Licenses to display the Licenses page. 2. Click Fetch Updates Now. The Management Console Licensing page displays a success message or the Alarm Status page reports an actionable error message. Note: Only administrator users can fetch and install licenses. For detailed information on administrator and monitor users, see the SteelFusion Edge Management Console User s Guide. 14 SteelFusion Edge Installation and Configuration Guide

19 Manual Licensing Using the Riverbed Licensing Portal Managing Riverbed Licenses Manual Licensing Using the Riverbed Licensing Portal You can retrieve and manage Riverbed licenses using the Riverbed Licensing Portal. After you retrieve a license from the Riverbed Licensing Portal, you must install it. Retrieving Licenses Using the Riverbed Licensing Portal The Riverbed Licensing Portal requires a unique identifier to retrieve a license, such as a serial number, a license request key (activation code), or a token. These steps describe how to retrieve a license using a serial number. To retrieve your licenses for an appliance using a serial number 1. Go to the License page in the Riverbed Licensing Portal at 2. Enter your appliance serial number as your unique product identifier. The serial number is on a label located on your appliance. It also appears in the Help tab of the Management Console. 3. Click Next. 4. Provide the contact information for the license, including your name and Click Submit to display license information for all the products purchased with the serial number you specified. 6. Click a serial number to see license details. 7. Optionally, if you are behind a firewall, type the address in the address text box and click Keys to have the license keys ed to you. Note: Click New Search to look for additional license records. Installing Your License Keys Because each license key is generated for a specific appliance, ensure that you install your license key on the appropriate appliance. To install a license using the Management Console 1. Connect to the Management Console. For details, see the SteelFusion Edge Management Console User s Guide. 2. Choose Administration > Maintenance: Licenses to display the Licenses page. 3. Click + Add New License to expand the page. SteelFusion Edge Installation and Configuration Guide 15

20 Managing Riverbed Licenses Manual Licensing Using the Riverbed Licensing Portal 4. Copy and paste the license key provided by the Riverbed Licensing Portal into the text box. Separate multiple license keys with a space, Tab, or Enter. 5. Click Add to display the license in the table. To install a license using the CLI 1. Connect to the CLI of the appliance and enter configuration mode. For details, see the SteelFusion Command-Line Interface Reference Manual. 2. At the system prompt, enter the following commands: license install <license-key> write memory where <license-key> is the license key you retrieved from the Riverbed Licensing Portal. 16 SteelFusion Edge Installation and Configuration Guide

21 CHAPTER 3 Installing and Configuring the SteelFusion Edge Appliance This chapter describes how to install and configure the SteelFusion Edge (Edge appliance). It includes these sections: Deploying the SteelFusion Edge Appliance on page 17 Checking Your Inventory on page 18 Preparing Your Site for Installation on page 19 Powering On the Appliance on page 23 Configuring SteelFusion Edge Appliances on page 24 Caution: Read and follow the safety guidelines described in the Safety and Compliance Guide. Failure to follow these safety guidelines can result in damage to the equipment. For detailed information about installing the appliance to a rack, see the SteelFusion Edge Hardware Installation and Maintenance Guide. Deploying the SteelFusion Edge Appliance You deploy the Edge appliance in a physical in-path or virtual in-path deployment. This guide describes how to install the Edge appliance in an in-path deployment. Position your Edge appliances as close as possible to your network endpoints that is, branch office Edge appliances should be as close to your clients as possible, and data center SteelFusion Cores should be as close to your storage arrays as possible to maximize performance and minimize latency. Ideally, Edge appliances optimize only traffic that is initiated or terminated at their local site. The best way to achieve this is to deploy the Edge appliances where the LAN connects to the WAN, and not where any LAN-to-LAN or WAN-to-WAN traffic can pass through (or be redirected to) the Edge appliance. SteelFusion Edge Installation and Configuration Guide 17

22 Installing and Configuring the SteelFusion Edge Appliance Checking Your Inventory For detailed information about your deployment options and best practices for deploying Edge appliances, see the SteelFusion Core and Edge Deployment Guide. Figure 3-1. SteelFusion Edge In-Path Deployment You can also deploy the Edge appliance for high availability (HA) where Edge and Core appliances are deployed as pairs so that if either peer fails, the surviving Edge or Core appliances can take over. Riverbed strongly recommends that you deploy Edge appliances as pairs in an HA cluster configuration. For detailed information about HA, see the SteelFusion Edge Management Console User s Guide and the SteelFusion Core and Edge Deployment Guide. Figure 3-2. SteelFusion Edge High Availability Deployment Checking Your Inventory Your shipping carton contains the following items: The Edge appliance One standard Ethernet straight-through cable One standard Ethernet crossover cable One serial null-modem cable One or two power cables (depending on your order) Aside from country-specific requirements, all appliances ship with the same power cable. The power cable has an IEC C13 plug on one end (to connect to the Edge appliance) and a country-specific plug that fits the wall socket for that country. If the appliance has two power supplies, it ships with two suitable cables. 18 SteelFusion Edge Installation and Configuration Guide

23 Preparing Your Site for Installation Installing and Configuring the SteelFusion Edge Appliance You must always connect the Edge appliance using either the cable in the accessories box or another cable that is approved for use by the IEC in the country in which the appliance is connected. You cannot connect the Edge appliance directly to multiphase outlets. You must use a rack power distribution unit (PDU) or power strip that provides the appropriate three-prong outlet (hot/neutral/ ground). For details, see the Knowledge Base solution number S One Phillips screwdriver Rails One mounting kit Documentation kit If any items are damaged or missing, notify Riverbed Support at for replacement or repair. Preparing Your Site for Installation The Edge appliance ships completely assembled, with all the equipment parts in place and securely fastened. Site Requirements Before you install the Edge appliance, make sure that your site meets the following requirements: It is a standard electronic environment where the ambient temperature does not exceed 40ºC (104ºF) and the relative humidity does not exceed 80% (noncondensing). For detailed information, see the SteelFusion Edge Hardware Installation and Maintenance Guide. Ethernet connections are available within the standard Ethernet limit. There is available space on a two-post or four-post 19-inch rack. For details about installing the Edge to a rack, see the Rack Installation Guide or the printed instructions that were shipped with the appliance. A clean power source is available, dedicated to computer devices and other electronic equipment. The rack is a standard 19-inch Telco-type mounting rack. Before you begin, consult the SteelFusion Edge Hardware Installation and Maintenance Guide for detailed information about how to install your model to a rack. Note: Riverbed recommends that you use a four-post mounting rack for 2U appliances. Note: If your rack requires special mounting screws, contact your rack manufacturer. SteelFusion Edge Installation and Configuration Guide 19

24 Installing and Configuring the SteelFusion Edge Appliance Preparing Your Site for Installation SteelFusion Edge Ports The following table summarizes the ports that connect the Edge appliance to your network. Port HYP COM USB 1, USB 2 gbe0_0, gbe0_1, gbe0_2, gbe0_3 VGA PRI (Primary) AUX (Auxiliary) LAN 1_0 (1U) LAN 0_0 (2U) WAN 1_0 (1U) WAN 0_0 (2U) Description A hypervisor serial RJ45 communication port used to manage the Hypervisor node. Serial settings: 9600 bps, 8 data bit, 1 stop bit, no parity. Optional Hypervisor universal serial bus (USB) ports. These ports are used by the Hypervisor Node (ESXi 5.5U2). Connect these to a LAN switch using a straight-through cable for use by the Hypervisor. Optional Hypervisor VGA connector. This port is useful for BIOS, POST, and PXE debugging. The management port that connects the Edge appliance to a LAN switch. This management port enables you to connect to the Management Console and the SteelFusion Edge CLI. This port is used for iscsi traffic. The iscsi traffic is between external application servers in the branch office and the LUNs provided by the Edge blockstore. The primary and auxiliary ports cannot share the same network subnet. Optionally, this port provides an additional management interface to connect the Edge appliance to the management VLAN. You can connect a computer directly to the appliance with a crossover cable, enabling you to access the Edge CLI or Management Console. To use external IPMI access for 1 U and 2 U appliances, the AUX port must be enabled. IPMI access does not require the AUX port to have an IP address configured but it does require that the port is enabled. Disabling AUX disables remote management; enabling remote management without enabling AUX leaves remote management inaccessible. You enable the AUX port in the Management Console or the CLI. For detailed information about connecting and monitoring the appliance using the BMC, see the SteelFusion Edge Hardware Installation and Maintenance Guide. Connects the LAN port of the Edge appliance to the LAN switch using a straight-through cable. The Edge appliance uses one or more in-path interfaces to provide Ethernet network connectivity for optimized traffic. Each in-path interface is comprised of two physical ports: the LAN port and the WAN port. Use the LAN port to connect the Edge appliance to the internal network of the branch office. You can also use this port for a connection to the Primary port. This port enables the blockstore traffic sent between Edge appliance and SteelFusion Core to transmit across the WAN link. Note: If the Edge appliance is deployed between two switches, both the LAN and WAN ports must be connected with straight-through cables. Connects the WAN port of the Edge appliance to the WAN router using a crossover cable. The WAN port is the second of two ports that comprise the in-path interface. The WAN port is used to connect the Edge appliance toward WAN-facing devices such as a router, firewall, or other equipment located at the WAN boundary. 20 SteelFusion Edge Installation and Configuration Guide

25 Preparing Your Site for Installation Installing and Configuring the SteelFusion Edge Appliance Port eth0_0, eth0_1 RIOS COM Description Typically, these ports are connected to the SteelFusion Core in HA deployments. These data interfaces can be used for iscsi, BlockStream heartbeat, and BlockStream synchronization. The ports are connected to a LAN switch using a straight-through cable. A RiOS serial RJ45 communication port used to manage the RiOS node. Serial settings: 9600 bps, 8 data bit, 1 stop bit, no parity. Connects the serial cable to a terminal device. You establish a serial connection to a terminal emulation program for console access to the configuration wizard and the Edge CLI. The following drawing shows the position of the ports on the rear of the appliance (1U) Figure U Back Panel The following figure shows typical branch office connections for Edge appliance. Figure 3-4. Typical SteelFusion Edge Port Connections 1U Appliance Network Interface Cards The 1U and 2U appliance comes equipped with a preinstalled 4-port 1 Gbe copper bypass NIC. The 1U has an additional slot for an add-on NIC for a total of 2 slots. Both slots are assigned to the RiOS node. SteelFusion Edge Installation and Configuration Guide 21

26 Installing and Configuring the SteelFusion Edge Appliance Preparing Your Site for Installation The 2U appliance comes equipped with a preinstalled 4-port 1 Gbe copper bypass NIC with an integrated LSI expander NIC for bypass support. The 2U has 5 additional slots for and add-on NICs for a total of 6 slots. Slot 1, 2, 3 and 4 are assigned to the RiOS node and Slots 5 and 6 are assigned to Hypervisor node. For detailed information about installing additional NICs, see the SteelFusion Edge Hardware Installation and Maintenance Guide. Avoiding Duplex Mismatch Before you begin the configuration process, ensure that your LAN and WAN interfaces have the same duplex settings. The Edge automatically negotiates duplex settings. If one end of the link is set to autonegotiate and the other end of the link is not set to autonegotiate, the duplex settings on the network device default to halfduplex. This duplex mismatch passes traffic, but it causes late collisions and results in degraded optimization. To achieve maximum optimization, set your network devices to 100 and full. To avoid duplex mismatches, manually configure the duplex settings on your: router. switch. Edge appliance WAN interface. Edge appliance LAN interface. Edge appliance primary interface. The following signs can indicate a duplex mismatch: On the Administration > Diagnostics: System Logs page, you see errors for sends, receives, cyclic redundancy check (CRC), and short sends. You cannot connect to an attached device. You can connect to a device when you choose autonegotiation, but you cannot connect to that same device when you manually set the speed or duplex. Slow performance across the network. 22 SteelFusion Edge Installation and Configuration Guide

27 Powering On the Appliance Installing and Configuring the SteelFusion Edge Appliance Completing the Configuration Checklist The following table lists the parameters you specify to complete the initial configuration of the Edge appliance. Be prepared to provide values for these parameters. Appliance Parameter Your Value SteelFusion Edge (the Primary Interface) Hostname IP address Netmask Default gateway (the WAN gateway) DNS IP address Domain name for the appliance Administrator password SMTP server IP address Events and failures notification address Primary interface speed Primary interface duplex In-Path Deployments In-path interface IP address In-path netmask In-path gateway In-path: LAN interface speed In-path: LAN interface duplex In-path: WAN interface speed In-path: WAN interface duplex Powering On the Appliance This section describes how to connect the AC power and how to power on the appliance. Caution: In European electrical environments, you must ground (earth) the Green/Yellow tab on the power cord or risk electrical shock. To power on the appliance 1. If your appliance has a master power switch, ensure that it is in the off position. SteelFusion Edge Installation and Configuration Guide 23

28 Installing and Configuring the SteelFusion Edge Appliance Configuring SteelFusion Edge Appliances 2. Plug the AC power cord into the appliance. Note: If your model has multiple power supplies, you must plug in all the power cords or you will hear an alarm. Figure 3-5. Connecting the AC Power 3. Plug the AC power cord into an uninterrupted AC power source. 4. Press the appliance power switch on. If the Edge appliance does not immediately power on, press the power switch off, and then press the power switch on again. 5. Check the status lights on the appliance. For detailed information about the status lights, see the SteelFusion Edge Hardware Installation and Maintenance Guide. Configuring SteelFusion Edge Appliances The Edge appliance is physically in the direct path between clients and servers. The clients and servers continue to see client and server IP addresses. Connecting the SteelFusion Edge to Your Network You use standard Ethernet straight-through and crossover cables to connect to your network in an in-path configuration. Make sure that you use the correct cables to establish your network connections: Straight-through cables - Primary and LAN ports on the appliance to the LAN switch. Crossover cable - WAN port on the appliance to the WAN router. 24 SteelFusion Edge Installation and Configuration Guide

29 Configuring SteelFusion Edge Appliances Installing and Configuring the SteelFusion Edge Appliance To connect to the appliance to your network 1. Plug the straight-through cable into the Primary port of the appliance and the LAN switch. The Primary port can be any port on your LAN switch configured to connect to a host. Figure 3-6. Connecting the Primary Port to the LAN Switch 2. Identify the straight-through cable that connects your LAN switch to your WAN router. Unplug the end connected to the WAN router. Figure 3-7. Disconnecting the WAN Router 3. Plug the straight-through cable that you disconnected from the WAN router into the LAN port of the appliance. Figure 3-8. Connecting the LAN Switch to the LAN Port SteelFusion Edge Installation and Configuration Guide 25

30 Installing and Configuring the SteelFusion Edge Appliance Configuring SteelFusion Edge Appliances 4. Using the provided crossover cable, plug the cable into the WAN port of the appliance and the WAN router. Figure 3-9. Connecting the WAN Port to the WAN Router Note: If you have additional 4-port bypass cards, repeat Step 1 through Step 4. For detailed information about installing additional bypass cards, see the Network and Storage Card Installation Guide and the SteelFusion Edge Hardware Installation and Maintenance Guide. Connecting Virtual Machines to the SteelFusion Edge Appliance The Edge appliance supports virtual machines (VMs) on the Hypervisor node of the appliance. The ports are labeled gbe0_0, gbe0_1, gbe0_2, gbe0_3 To connect the hypervisor to the system 1. Plug the straight-through cable into one of the hypervisor ports: gbe0_0, gbe0_1, gbe0_2, gbe0_3. 2. Plug in the straight-through cable into any switch that is connected to the Hypervisor node. After you complete the configuration process for the Edge appliance, connect to the Management Console to configure your hypervisor using the Hypervisor Installer. You can access the Hypervisor Installer from the Management Console Dashboard or from the Virtualization > Installer: Installer page. The hypervisor must be installed before you can host VMs. Note: Before you launch the Hypervisor Installer, if you are using a SteelFusion Core for storage, you should configure and connect it before continuing with the installer. A SteelFusion Core allows you to access remote storage at your data center and make that storage available to your hypervisor. For details, see the SteelFusion Core Management Console User s Guide. Running the Configuration Wizard To access the configuration wizard and the SteelFusion Edge CLI, you establish a serial connection using a terminal emulator program. 26 SteelFusion Edge Installation and Configuration Guide

31 Configuring SteelFusion Edge Appliances Installing and Configuring the SteelFusion Edge Appliance To run the configuration wizard 1. Plug the serial cable into the RiOS COM port and a terminal. Figure Connecting to the SteelFusion Edge 2. Start your terminal emulation program, such as Tera Term Pro. The terminal device must have the following settings: Baud rate: 9600 bps Data bits: 8 Parity: none Stop bits: 1 vt100 emulation No flow control If you are using the Edge appliance with a terminal server, the terminal server must use hardware flow control for the port connected to the Edge appliance. Riverbed recommends that you connect the console port to a device that logs output. Even though this is not a requirement, it can help you to identify problems with the system. 3. Log in as administrator user (admin) and enter the default password (password). For example: login as: admin Sent username "admin" password: password The configuration wizard automatically starts after you have entered the login and default password. After you have established a connection, you configure the Edge appliance using the configuration wizard. 4. If you have a SteelCentral Controller for SteelHead (SCC) appliance installed in your network to manage multiple Edge appliances, you can use it to automatically configure them: Do you want to auto-configure using a SCC? no If you answer yes, you are prompted for the SCC hostname or IP address. The hostname or IP address is used to contact the SCC. The default value is riverbedcmc. If you enter no, the wizard continues. Note: If you mistakenly answer yes, to return to the wizard from the CLI, enter the configuration jump-start command from configuration mode. For detailed information, see To restart the configuration wizard on page To start the configuration wizard, enter yes at the system prompt. Do you want to use the configuration wizard for initial configuration? yes SteelFusion Edge Installation and Configuration Guide 27