Riverbed Central Management Console User s Guide. Version 8.0 December 2012

Transcription

1 Riverbed Central Management Console User s Guide Version 8.0 December 2012

2 2012 Riverbed Technology. All rights reserved. Riverbed, Cloud Steelhead, Granite, Interceptor, RiOS, Steelhead, Think Fast, Virtual Steelhead, Whitewater, Mazu, Cascade, Shark, AirPcap, BlockStream, SkipWare, TurboCap, WinPcap, Wireshark, TrafficScript, Flyscript, WWOS, and Stingray are trademarks or registered trademarks of Riverbed Technology, Inc. in the United States and other countries. Riverbed and any Riverbed product or service name or logo used herein are trademarks of Riverbed Technology. All other trademarks used herein belong to their respective owners. The trademarks and logos displayed herein cannot be used without the prior written consent of Riverbed Technology or their respective owners. Akamai and the Akamai wave logo are registered trademarks of Akamai Technologies, Inc. SureRoute is a service mark of Akamai. Apple and Mac are registered trademarks of Apple, Incorporated in the United States and in other countries. Cisco is a registered trademark of Cisco Systems, Inc. and its affiliates in the United States and in other countries. EMC, Symmetrix, and SRDF are registered trademarks of EMC Corporation and its affiliates in the United States and in other countries. IBM, iseries, and AS/400 are registered trademarks of IBM Corporation and its affiliates in the United States and in other countries. Linux is a trademark of Linus Torvalds in the United States and in other countries. Microsoft, Windows, Vista, Outlook, and Internet Explorer are trademarks or registered trademarks of Microsoft Corporation in the United States and in other countries. Oracle and JInitiator are trademarks or registered trademarks of Oracle Corporation in the United States and in other countries. UNIX is a registered trademark in the United States and in other countries, exclusively licensed through X/Open Company, Ltd. VMware, ESX, ESXi are trademarks or registered trademarks of VMware, Incorporated in the United States and in other countries. This product includes software developed by the University of California, Berkeley (and its contributors), EMC, and Comtech AHA Corporation. This product is derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm. NetApp Manageability Software Development Kit (NM SDK), including any third-party software available for review with such SDK which can be found at and are included in a NOTICES file included within the downloaded files. For a list of open source software (including libraries) used in the development of this software along with associated copyright and license agreements, see the Riverbed Support site at https//support.riverbed.com. You must log in to Riverbed Support to view this information. This documentation is furnished AS IS and is subject to change without notice and should not be construed as a commitment by Riverbed Technology. This documentation may not be copied, modified or distributed without the express authorization of Riverbed Technology and may be used only in connection with Riverbed products and services. Use, duplication, reproduction, release, modification, disclosure or transfer of this documentation is restricted in accordance with the Federal Acquisition Regulations as applied to civilian agencies and the Defense Federal Acquisition Regulation Supplement as applied to military agencies. This documentation qualifies as commercial computer software documentation and any use by the government shall be governed solely by these terms. All other use is prohibited. Riverbed Technology assumes no responsibility or liability for any errors or inaccuracies that may appear in this documentation. Riverbed Technology 199 Fremont Street San Francisco, CA Phone: Fax: Web: Part Number

3 Contents Contents Preface...1 About This Guide...1 Audience...1 Document Conventions...2 Product Dependencies and Compatibility...3 Hardware and Software Dependencies...3 SNMP-Based Management Compatibility...3 CMC Compatibility...4 Multiple Product Support...5 Additional Resources...5 Release Notes...5 Riverbed Documentation and Support Knowledge Base...5 Contacting Riverbed...6 Internet...6 Technical Support...6 Professional Services...6 Documentation...6 Chapter 1 - Overview of the Central Management Console...7 Using the Central Management Console...7 Connecting to the Central Management Console...7 The Home Page...9 Navigating in the Central Management Console...12 Getting Help...15 Upgrading from Previous Versions of the CMC...17 Group Membership...17 Policy Association...17 Configuration...17 Migration Procedures...19 Steelhead Appliance Auto-Registration...20 Chapter 2 - Configuring the CMC...23 Configuring Network Settings...24 Configuring Host Settings...24 Configuring Settings for the Base Interfaces...28 Configuring System Settings...32 Creating Announcements...32 Setting Alarm Parameters...33 Riverbed Central Management Console User s Guide iii

4 Contents Configuring Monitored Ports...39 Setting SNMP Basic Settings...40 Configuring SNMP v Configuring SNMP Authentication and Access Parameters...46 Configuring Notifications...49 Configuring Logging...52 Configuring Security Settings...55 Configuring General Security Settings...56 Configuring CMC Security Settings...57 Managing User Permissions...59 Configuring RADIUS Server Authentication...65 Configuring TACACS+ Server Authentication...68 Unlocking the Secure Vault...70 Configuring the Management ACL...71 Configuring Web Settings...73 Maintaining Your System...76 Working with External CMC Backups...76 Viewing Daily Maintenance Window Settings...82 Displaying Job Status...83 Managing Licenses...85 Upgrading Your Software...87 Rebooting and Shutting Down the CMC...88 Changing the Account Password...89 Managing Configuration Files...90 Chapter 3 - Managing Appliances, Groups, and Policies...93 Managing Appliances and Appliance Groups...93 Tasks and Detailed Procedures...93 Creating a New Appliance Group...95 Registering New Appliances...96 Editing Appliance Configurations...97 Managing or Viewing Appliance Host Settings Managing or Viewing Appliance Base Interfaces Settings Managing or Viewing Appliance In-Path Interface Settings Managing Subnet Side Rules Settings Managing or Viewing Appliance SSL Settings Managing the Licenses Settings Configuring Web Settings Managing Outbound QoS Interfaces Managing Inbound QoS Interfaces Managing Granite Settings Virtual Services Platform Fetching Appliance Specific Configurations Trusting Appliances Using Security Keys Running Appliance Utilities Viewing Policies Inherited by the Appliance Removing Groups and Appliances iv Riverbed Central Management Console User s Guide

5 Contents Moving Groups and Appliances Filtering the Display of Appliances and Appliance Groups Performing Appliance Operations Managing Appliance Configurations Using Policies and Groups Understanding Policies and Policy Usage General Information on Page and Version Incompatibility Centralized Configuration with Groups and Policies Inheriting or Overriding Policy Settings from a Parent Group Fetching Configurations Managing Policies Viewing and Managing System Operation History Managing Appliance Backups and Restores Assigning Rollover Strategy Performing Appliance Backups Restoring a Backup Snapshot to an Appliance Migrating Current Status from One Appliance to Another Removing Backup Configurations Configuring Software Upgrades Managing RSP/VSP Managing RSP/VSP Appliances Configuring the RSP/VSP Package Library Configuring the RSP/VSP Image Library Chapter 4 - Displaying and Customizing Reports Displaying WAN Optimization Reports and Logs Viewing Optimized Throughput Reports Viewing Bandwidth Optimization Reports Viewing Data Reduction Reports Viewing Traffic Summary Reports Viewing Connection History Reports Viewing Connection Forwarding Reports Viewing Connection Pooling Reports Viewing Outbound QoS (Dropped) Reports Viewing Outbound QoS (Sent) Reports Viewing Inbound QoS (Dropped) Reports Viewing Inbound QoS (Sent) Reports Displaying Application Optimization Reports and Logs Viewing HTTP Reports Viewing NFS Reports Viewing SRDF Reports Viewing SSL Servers Reports Viewing DNS Cache Hits Reports Viewing DNS Cache Utilization Reports Data Store Statistics Reports Viewing Data Store Status Reports Viewing Data Store SDR-Adaptive Reports Riverbed Central Management Console User s Guide v

6 Contents Viewing Data Store Disk Load Reports Viewing Data Store Hit Rate Reports Viewing Data Store IO Reports Viewing Data Store Read Efficiency Reports Displaying Branch Storage Reports Viewing the Granite LUN I/O Report Viewing the Granite Initiator I/O Report Viewing the Granite Network I/O Report Viewing the Granite Blockstore Metrics Report Displaying Appliance Diagnostics Reports Viewing Appliance Details Reports Viewing Health Check Details Reports Viewing CPU Utilization Reports Viewing Memory Paging Reports Downloading Logs Viewing Expiring Certificates Displaying CMC Diagnostics Reports and Logs Viewing the Alarm Status Report Viewing CPU Utilization Report Viewing Memory Paging Report Viewing Logs Downloading Logs Viewing the System Dumps List Report Viewing Process Dump List Reports Viewing the TCP Dumps List Reports Exporting Performance Statistics Reports Appendix A - Viewing Policy Configuration Settings Overview of Policy Configurations Optimization Policy Settings Certificate Authorities Data Store General Service Settings In-Path Rules Peering Rules Performance CIFS (SMB1) CIFS Prepopulation SMB Oracle Forms MAPI MS-SQL NFS Lotus Notes Citrix ICA FCIP HTTP vi Riverbed Central Management Console User s Guide

7 Contents SRDF Transport Settings Windows Domain Auth Delegation Auto-Delegation Mode Configuring Replication Users (Kerberos) SSL Main Settings Secure Peering (SSL) Service Ports CRL Management (SSL) Advanced Settings (SSL) Secure Peering (IPSEC) Cloud Accelerator System Settings Policies Alarms Announcements Logging Monitored Ports SNMP ACLs SNMP Basic SNMP v Networking Policy Settings Host Settings WCCP Inbound QoS Inbound QoS Interfaces Outbound QoS Interfaces Hardware Assist Rules Simplified Routing Asymmetric Routing Connection Forwarding Flow Export Outbound QoS (Basic) Outbound QoS (Advanced) QoS Marking (Legacy) Port Labels Security Policy Settings General Security Settings User Permissions Password Policy RADIUS TACACS Management ACL Branch Services Settings Caching DNS RSP/VSP Slots RSP/VSP Data Flow Riverbed Central Management Console User s Guide vii

8 Contents Common Branch Storage Settings Common VSP Settings Appendix B - Riverbed System Ports Default Ports Commonly Excluded Ports Interactive Ports Forwarded by the Steelhead Appliance Secure Ports Forwarded by the Steelhead Appliance Appendix C - CMC Management Information Base (MIB) Accessing MIB Files SNMP Traps viii Riverbed Central Management Console User s Guide

9 Preface Welcome to the Riverbed Central Management Console User s Guide. Read this preface for an overview of the information provided in this guide and the documentation conventions used throughout, hardware and software dependencies, additional reading, and contact information. This chapter includes the following sections: About This Guide on page 1 Hardware and Software Dependencies on page 3 SNMP-Based Management Compatibility on page 3 CMC Compatibility on page 4 Multiple Product Support on page 5 Additional Resources on page 5 Contacting Riverbed on page 6 About This Guide The Riverbed Central Management Console User s Guide describes how to configure and manage the Riverbed Central Management Console (CMC). Audience This guide is written for storage and network administrators familiar with administering and managing WANs using common network protocols such as TCP, CIFS, HTTP, FTP, and NFS. This guide assumes you are familiar with Steelhead Management Console. Riverbed Central Management Console User s Guide 1

10 Preface About This Guide Document Conventions This manual uses the following standard set of typographical conventions to introduce new terms, illustrate screen displays, and describe command syntax. Convention italics boldface Courier Meaning Within text, new terms and emphasized words appear in italic typeface. Within text, CLI commands and GUI controls appear in bold typeface. Code examples appear in Courier font: amnesiac > enable amnesiac # configure terminal < > Values that you specify appear in angle brackets: interface <ipaddress> [ ] Optional keywords or variables appear in brackets: ntp peer <addr> [version <number>] { } Required keywords or variables appear in braces: {delete <filename> upload <filename>} The pipe symbol represents a choice to select one keyword or variable to the left or right of the symbol (he keyword or variable can be either optional or required): {delete <filename> upload <filename>} 2 Riverbed Central Management Console User s Guide

11 Product Dependencies and Compatibility Preface Product Dependencies and Compatibility This section provides information about product dependencies and compatibility. This section includes the following topics: Hardware and Software Dependencies on page 3 SNMP-Based Management Compatibility on page 3 CMC Compatibility on page 4 Hardware and Software Dependencies The following table summarizes the hardware and software requirements for the CMC. Important: Guest 64-bit Virtual Machines (VM) (such as, Windows Server 2008 R2) are not supported on the Models 250, 550 and the 1U xx20s because these models do not incorporate Virtual Technology (VT) support. CMC Hardware Requirements A 19-inch (483 mm) two- or four-post rack. Any computer that supports a Web browser with a color image display. Software and Operating System Requirements The CMC has been tested with Mozilla Firefox v3.6 and higher and Microsoft Internet Explorer v7.x and v8.x. Note: JavaScript and cookies must be enabled in your browser. Note: If you want to encrypt your communication, you must have a Secure Sockets Layer (SSL) capable browser. SNMP-Based Management Compatibility The Steelhead appliance supports a proprietary Riverbed MIB accessible through SNMP. SNMPv1 (RFCs 1155, 1157, 1212, and 1215), SNMPv2c (RFCs 1901, 2578, 2579, 2580, 3416, 3417, and 3418), and SNMPv3 are supported, even though some MIB items might only be accessible through SNMPv3 and SNMPv2. SNMP support enables the CMC to be integrated into network management systems such as Hewlett - Packard OpenView Network Node Manager, BMC Patrol, and other SNMP-based network management tools. Riverbed Central Management Console User s Guide 3

12 Preface Product Dependencies and Compatibility CMC Compatibility The Steelhead appliance has been tested with the following Central Management Console (CMC) versions: Steelhead Appliance RiOS Version Recommended CMC Version CMC v8.0.x CMC v7.0.x CMC v6.5.x CMC v6.1.x CMC v6.0.x Steelhead appliance v8.0.x Steelhead CX appliance v8.0.x Steelhead EX appliance v2.0.x v8.0 Parity; Granite Edge High Availability only supported on Steelhead EX appliance v2.0 Not supported Not supported Not supported Not supported Steelhead appliance v7.0.x Steelhead CX appliance v7.0.x Steelhead EX appliance v1.0.x v8.0 Parity; Granite Edge High Availability not supported on Steelhead EX appliance v1.0 Parity; Granite Edge High Availability not supported on Steelhead EX appliance v1.0 Not supported Not supported Not supported v6.5.x and v6.5.1 with full QoS support v6.5.3 (requires RiOS v6.5.1 and later for QoS support) Parity Parity Parity with Steelhead appliance v6.5.0 and with Steelhead appliance v6.1.x (partial support). Manages only v6.1x features; does not support QoS Not supported v6.1.x v6.5.3 or v6.1.1 Parity Parity Parity Parity; includes SH-VE Manages all RiOS v6.0.x features and some RiOS v6.1.x features. v6.0.x v6.5.3 or v6.1.1 (requires RiOS and later for RSP management) Not supported Not supported Parity Parity Parity Interceptor appliance v3.0.x Steelhead Mobile ler appliance v3.1.x v7.0.x Parity Parity Parity Not supported v7.0.x Parity Parity Parity. Not supported Not supported Not supported 4 Riverbed Central Management Console User s Guide

13 Additional Resources Preface Multiple Product Support The CMC supports the following products. Product Displays the Steelhead appliance features that are available on the CMC. Displays the Steelhead EX appliance features that are available on the CMC. Displays the Steelhead Mobile ler appliance features that are available on the CMC. Displays the Interceptor appliance features that are available on the CMC. Displays the Virtual Steelhead appliance features that are available on the CMC. Additional Resources This section describes resources that supplement the information in this guide. This section includes the following topics: Release Notes on page 5 Riverbed Documentation and Support Knowledge Base on page 5 Release Notes The following online file supplements the information in this guide. It is available on the Riverbed Support site at Online File <product>_<version_number> <build_number>.pdf Purpose Describes the product release and identifies fixed problems, known problems, and work-arounds. This file also provides documentation information not covered in the guides or that has been modified since publication. Examine this file before you begin installation and configuration. It contains important information about this release of the Steelhead appliance. Riverbed Documentation and Support Knowledge Base For a complete list and the most current version of Riverbed documentation, log in to the Riverbed Support site at Riverbed Central Management Console User s Guide 5

14 Preface Contacting Riverbed The Riverbed Knowledge Base is a database of known issues, how-to documents, system requirements, and common error messages. You can browse titles or search for keywords and strings. To access the Riverbed Knowledge Base, log in to the Riverbed Support site at Contacting Riverbed This section describes how to contact departments within Riverbed. Internet You can learn about Riverbed products at Technical Support If you have problems installing, using, or replacing Riverbed products, contact Riverbed Support or your channel partner who provides support. To contact Riverbed Support, open a trouble ticket by calling RVBD-TAC ( ) in the United States and Canada or outside the United States. You can also go to Professional Services Riverbed has a staff of professionals who can help you with installation, provisioning, network redesign, project management, custom designs, consolidation project design, and custom coded solutions. To contact Riverbed Professional Services, proserve@riverbed.com or go to Documentation The Riverbed Technical Publications team continually strives to improve the quality and usability of Riverbed documentation. Riverbed appreciates any suggestions you might have about its online documentation or printed materials. Send documentation comments to techpubs@riverbed.com. 6 Riverbed Central Management Console User s Guide

15 CHAPTER 1 Overview of the Central Management Console This chapter provides an overview of the Central Management Console. The Central Management Console makes facilitating administration tasks for the Riverbed system simpler through a Web browser interface. This chapter includes the following sections: Upgrading from Previous Versions of the CMC on page 17 Steelhead Appliance Auto-Registration on page 20 Connecting to the Central Management Console on page 7 Navigating in the Central Management Console on page 12 Getting Help on page 15 This chapter assumes you have installed and performed the initial configuration of the Central Management Console. For details, see the Steelhead Management Console User s Guide. This chapter also assumes that you are familiar with the various deployment options available to you. For details, see the Steelhead Appliance Deployment Guide. Riverbed recommends that you do not use the Riverbed CLI to configure the Central Management Console. Using the Central Management Console The following section describes how to connect to and navigate in the Central Management Console. It includes the following sections: Connecting to the Central Management Console on page 7 The Home Page on page 9 Navigating in the Central Management Console on page 12 Getting Help on page 15 Connecting to the Central Management Console To connect to the Central Management Console, you must know the host, domain, and administrator password that you assigned in the Central Management Console Configuration wizard. For details, see the Riverbed Central Management Console Installation Guide. Riverbed Central Management Console User s Guide 7

16 Overview of the Central Management Console Using the Central Management Console To connect to the CMC 1. Enter the URL for the CMC in the location box of your browser: protocol://host.domain protocol is http or https. The secure HTTPS uses the SSL protocol to ensure a secure environment. When you connect using HTTPS, you are prompted to inspect and verify the SSL certificate. This is a selfsigned certificate used to provide encrypted Web connections to the CMC. The secure vault does not protect the self-signed certificate used with HTTPS connections. It is re-created when the appliance hostname is changed and when the certificate has expired. host is the IP address or hostname you assigned the CMC during initial configuration. If your DNS server maps the IP address to a name, you can specify the DNS name. domain is the full domain name for the CMC. The Riverbed Central Management Console Login page appears, displaying the Login page. Figure 1-1. Login Page 2. In the Username text box, type the user login: admin, monitor or a login from a RADIUS or a TACACS+ database, or a previously configured RBM account. For details on RADIUS and TACACS+ configuration, see Configuring Security Settings on page 55. The default login is admin. Users with administrator privileges can configure and administer the CMC. Users with monitor (monitor) privileges can view CMC reports but they cannot configure the system. 3. In the Password text box, specify the password you assigned in the configuration wizard of the CMC. The Central Management Console is shipped with password as the default password. 4. Click Log In to log in to display the Home page. Tip: Click the appliance IP address to display the appropriate product page. 8 Riverbed Central Management Console User s Guide

17 Using the Central Management Console Overview of the Central Management Console The Home Page The Home page lists the Central Management Console and other appliances status and system up time. The Home page displays for Appliances within Group <name> are controlled by the user permissions. The RBM user (local or remote) requires the RBM Report Role to view all the controls on the Home page. For more information on role-based accounts, see Role-Based Accounts on page 60. The statistics section displays the following reports: Bandwidth Optimization (Bytes) - Provides a three-dimensional view of traffic patterns (byte counts) over the past week. Each column represents the number of bytes, the time of day, and the day of the week. For example, the report might display that there were 4 GBs of WAN traffic from 12 P.M. to 3 P.M. on Wednesday of the prior week. Optimized LAN Throughput (bps) - Summarizes the throughput or total data transmitted for all applications in the past week. Figure 1-2. Home Page Riverbed Central Management Console User s Guide 9

18 Overview of the Central Management Console Using the Central Management Console The top of every page displays the menu bar. The current state of the system is always visible to the right of the menus: Healthy, Admission, Degraded, or Critical. For details, select the current system status to display the Alarm Status page. Field CMC Status Statistics for <group> over <period> / <direction> Summary for <group> System Uptime. Displays the time since the last reboot of the system. This panel displays bandwidth optimization and optimized LAN throughput reports based on the group, period, and direction specified in the Web Preferences page. Bandwidth Optimization (GB). This report displays the following: WAN Data - Displays the bytes sent and received (depending on direction) over the WAN ports. LAN Data - Displays the bytes sent and received (depending on direction) over the LAN ports. Total Data Reduction % - Displays the total decrease of data transmitted over the WAN, according to the following calculation: (Data In Data Out) and (Data In) *100. Optimized Bandwidth Capacity Increase - Displays the increase in the amount of data transmitted over the WAN. Total Bandwidth Capacity Increase - Displays the increase in the amount of data transmitted over the WAN, according to the following calculation: 1 and (1 - Reduction Rate). Optimized LAN Throughput (Mbps) - This report displays the following information: Peak WAN/LAN Throughput - Displays the date and time of the peak data activity. 95th Percentile WAN/LAN Throughput - Displays the 95th percentile for data activity. The 95th percentile is calculated by taking the peak of the lower 95 percent of inbound and outbound throughput samples. Average LAN Throughput - Displays the average amount of data transmitted. This panel summarizes the number and status of the managed appliances (Steelhead appliances, Steelhead EXs, Interceptor appliances, and Steelhead Mobile lers) of the specified group. Total Appliances - Number of total appliances that currently optimizing. Healthy - Number of appliances that currently optimizing. Degraded - Number of appliances optimizing but with an issue. For example, a restart might be required. Critical - Number of appliances that currently in critical status. Disconnected - Number of appliances that currently not connected. Unsupported - Number of appliances that currently unsupported. Needs attention - Number of appliances that currently need attention. 10 Riverbed Central Management Console User s Guide

19 Using the Central Management Console Overview of the Central Management Console Field Appliances tab: Appliances within Group <group> Note: This table can be sorted by any of the column headers. Appliance - Displays the hostname or IP address of the appliance. Product/Model - Displays the product and model number of the appliance. Group - Displays the group of the appliance. Status - Displays the overall status of the appliance. Note: The message from the most severely triggered alarm is displayed here as the health note of the appliance. If there are two equally severe alarms being triggered, the newer alarm is listed here. To view all the alarms related to the appliance, choose Reports > Appliance Diagnostics > Appliance Details page. Appliance Version - Displays the software version running on the appliance. Reduction - Displays the reduction time of the appliance. Peak Throughput - Displays the peak data transmitted. Total Connections - Displays the total connections (optimized and pass through) handled by Steelhead appliances and Steelhead EX appliances. Date store Use - Displays the percent of RiOS data store usage. Appliances Needing Attention tab: Note: This table can be sorted by any of the column headers. Appliance - Displays the hostname or IP address of the appliance. Product/Model - Displays the product and model number of the appliance. Group - Displays the group of the appliance. Status - Displays the overall status of the appliance. Note: The message from the most severely triggered alarm is displayed here as the health note of the appliance. If there are two equally severe alarms triggered, the newer alarm is listed. To view all the alarms related to the appliance, choose Reports > Appliance Diagnostics > Appliance Details page. Appliance Version - Displays the software version running on the appliance. Reduction - Displays the reduction time of the appliance. Peak Throughput - Displays the peak data transmitted. Total Connections - Displays the total connections (optimized and pass through) handled by Steelhead appliances and Steelhead EX appliances. Data store Use - Displays the percent of RiOS data store usage. Groups Display tab: Appliance Groups Name - Displays the name of the appliance group(s). Comment - Displays any comments. Riverbed Central Management Console User s Guide 11

20 Overview of the Central Management Console Using the Central Management Console Field Groups Display tab: Appliances for Group Appliance - Displays the hostname or IP address of the appliance group. Product/Model - Displays the product and model number of the appliance. Group - Displays the group of the appliance. Status - Displays the overall status of the appliance. Note: The message from the most severely triggered alarm is displayed here as the health note of the appliance. If there are two equally severe alarms triggered, the newer alarm is listed. To view all the alarms related to the appliance, choose Reports > Appliance Diagnostics > Appliance Details page. Appliance Version - Displays the software version running on the appliance. Reduction - Displays the reduction time of the appliance. Peak Throughput - Displays the peak data transmitted. Total Connections - Displays the total connections (optimized and pass through) handled by Steelhead appliances and Steelhead EX appliances. Data store Use - Displays the percent of RiOS data store usage. Settings tab: Global Options - Displays statistical data in the graphs, as well as for the Reduction and Peak Throughput columns in the tables. User admin s Options - Displays all the options for the user admin. Note: The user must have permission to change the home page preferences. For more details, see Managing User Permissions on page 59. You can access the Central Management Console of any registered Steelhead appliance by clicking the appliance address under Appliances. For details on automatic sign in from the CMC, see Configuring CMC Security Settings on page 57. Navigating in the Central Management Console You access the tools and reports available to you in the Central Management Console using cascading menus. To display cascading menus 1. Click an item in the menu bar to display its submenus. For example, click Reports to display the submenus WAN Optimization, Application Optimization, Data Store Statistics, Branch Storage, Appliance Diagnostics, CMC Diagnostics, and Export. The menu item that is currently active is a different tone of color. 2. To go to a page, slide your cursor down to the submenu item you want to display and select the menu name. For example, select Reports > WAN Optimization > Bandwidth Optimization to display the Bandwidth Optimization page. 12 Riverbed Central Management Console User s Guide

21 Using the Central Management Console Overview of the Central Management Console The following figure illustrates cascading menus in the CMC. Figure 1-3. Cascading Menus Riverbed Central Management Console User s Guide 13

22 Overview of the Central Management Console Using the Central Management Console The following table summarizes the cascading menus. Menu Home Configure Submenus Displays the Home page. Networking - Configure host settings, such as hostname, DNS servers, hosts, proxies, date and time and network interfaces (primary interface and routing). For details, see Configuring Network Settings on page 24. System Settings - Configure alarm settings, announcements, settings, log settings, monitored ports, SNMP settings, and Web settings. For details, see Configuring System Settings on page 32. Security - Configure general security parameters, RADIUS, TACACS+, and secure vault settings. For details, see Configuring Security Settings on page 55. Maintenance - Start and stop system services, schedule jobs, upgrade software, backup configurations, and reboot or shut down the appliance. For details, see Maintaining Your System on page 76. My Account - Modify the administrator user password. For details, see Changing the Account Password on page 89. Configurations - Manage configuration files for the system. For details, see Managing Configuration Files on page 90. Manage Appliances - Manage Steelhead appliances. You can create groups of appliances, add appliances to a group, edit appliance information, filter information, and perform actions on appliances such as CLI pushes, software upgrades, starting and stopping services, reboots, shut downs, and password changes. For details, see Managing Appliances and Appliance Groups on page 93. Policies - Create and manage optimization, system settings, network, and security policies for groups of appliances. You can create new policies and assign specific features to a particular policy. For details, see Managing Appliance Configurations Using Policies and Groups on page 159. Operation History - View the history of operations such as upgrades, fetches, and reloads. For details, see Viewing and Managing System Operation History on page 174. Appliance Backup/Restore - Manage configuration backups. For example, you can view, delete, and restore configurations for a specified appliance. For details, see Managing Appliance Backups and Restores on page 176. Configure Upgrades - Manage the software image library and configure automatic upgrades. For details, see Configuring Software Upgrades on page 179. RSP/VSP - Manage the RSP or VSP partition of the appliance.for details, see Managing RSP/ VSP on page Riverbed Central Management Console User s Guide

23 Using the Central Management Console Overview of the Central Management Console Menu Reports Submenus WAN Optimization - Display and download WAN optimization reports. For details, see Displaying WAN Optimization Reports and Logs on page 187. Application Optimization - Display and download application optimization reports. For details, see Displaying Application Optimization Reports and Logs on page 220. Data Store Statistics - Display and download data store statistics reports. For details, see Data Store Statistics Reports on page 240. Branch Storage - Display and download branch storage reports. For details, see Displaying Branch Storage Reports on page 255. Appliance Diagnostics - Display and download appliance diagnostic reports such as user and system logs, alarms status, system snapshots, system dumps, TCP dumps, and user permissions. For details, see Displaying Appliance Diagnostics Reports on page 267. CMC Diagnostics - Display and download CMC diagnostic reports such as user and system logs, alarms status, system snapshots, system dumps, TCP dumps, and user permissions. For details, see Displaying CMC Diagnostics Reports and Logs on page 286. Export - Export reports. For details, see Exporting Performance Statistics Reports on page 304. Support Display online help, links to product documentation, contact information for Riverbed Support, appliance details such as the model, revision type, serial number, and software version, and appliance MIB files from this menu. For details, see Getting Help on page 15. Saving Your Configuration As you Apply page settings, the system applies the values to the running configuration. Most Central Management Console configuration pages include an Apply button for you to commit your changes. When you click Apply, the Central Management Console updates the running configuration. Your changes are only written to disk when you save your configuration. The Save icon on the menu bar alerts you if the changes you have made require you to save them to disk. A red dot in a control indicates that the field is required. You must specify a valid entry for all of the required controls on a page before submitting the changes to the system. Printing Pages and Reports You can print Central Management Console pages and reports using the print option on your Web browser. To print pages and reports Choose File > Print in your Web browser to open the Print dialog box. Getting Help The Support tab provides you with the following options: Online Help - Display online help and links to documentation on the Riverbed Support site at Technical Support - Display links and contact information for Riverbed Support at Appliance Details - Display appliance information such as the model number, hardware revision type, serial number, and software version number currently installed on the appliance. Riverbed Central Management Console User s Guide 15

24 Overview of the Central Management Console Using the Central Management Console MIB Files - Display Riverbed and appliance MIB files in text format. Displaying Online Help The CMC provides page-level help for the appliance. You can also display an online help book for the CMC. To display online help in the CMC Click the question mark icon next to the page heading. The help for the page appears in a new browser window. To display the online help book 1. Click Support in the menu bar to display the Riverbed Support page. 2. Click the Book icon for browser-based online help to display the online help book for the appliance. 3. Go to the item you want to view using the left-pane table of contents. For the most up-to-date documentation for the Steelhead appliance, see the Riverbed Support Web site at Downloading Documentation The Riverbed Support site contains PDF versions of the Riverbed Central Management Console User s Guide and the Riverbed Command-Line Interface Reference Manual. To download the PDF versions of the User s Guide or Command-Line Interface Reference Manual 1. Select Support in the menu bar to display the Support page. 2. You must be registered on the Riverbed Support site to download the documentation. Go to one of the following links: To register on the Riverbed Support site: If you are registered on the Riverbed Support site: 3. Go to the PDF document. 4. Select the document name to download the document. Logging Out In the menu bar, click Logout to end your session. 16 Riverbed Central Management Console User s Guide

25 Upgrading from Previous Versions of the CMC Overview of the Central Management Console Upgrading from Previous Versions of the CMC With v6.0.0 or later, there have been major changes in the structuring of groups and the association of configurations to groups and appliances. The CMC includes upgrade rules to simplify the transition to the new implementation of the feature. In some of the cases, there is no way to upgrade a CMC configuration to perfectly match the configuration you had before. This section includes the following topics: Group Membership on page 17 Policy Association on page 17 Configuration on page 17 Migration Procedures on page 19 Group Membership This feature gave you the flexibility to create groups based on geographic locations or model number, and so forth. The groups could be used for configuration or reporting. Each Steelhead appliance can only belong to one group. A group can be a member of another group. This facilitates visualization of configurations and makes configuration management easier. Policy Association The associated profiles were pushed out when an auto-configuration or full configuration push was performed. When multiple profiles were associated with a group, they were applied in alphabetical order. If there was a conflicting configuration, the latest profile was applied. After the group profiles were applied, the profiles associated with the appliance itself were applied in that order. Multiple policies of the same type cannot be associated with a group or appliance. However, specified settings of the policy configuration can selectively override the policies of its ancestors. You must set up the appliance hierarchy correctly to use the inheritance feature. Profiles are automatically converted to policies. However, they are not automatically applied to appliances. This step must be performed after the upgrade. For details, see Migration Procedures on page 19. Configuration Appliance-specific profiles currently contain some non-appliance-specific configurations, such as DNS, routing information, encryption (IPSEC), host settings, and proxies. When upgrading to CMC v8.0, a similar process for upgrading common profiles to policies is followed: 1. Configuration - Non-appliance-specific configurations are saved as policies. Appliance-specific configurations, such as CLI commands, are saved as settings in the following appliance pages: Host Settings, Base Interfaces, In-Path Interfaces, and SSL. 2. Assignment - Policies are created for the non-appliance-specific configuration aforementioned. Each policy is named after the appliance from whose configuration it is generated. Watch for name collusion with policies created from configurations fetched from the appliance. Riverbed Central Management Console User s Guide 17

26 Overview of the Central Management Console Upgrading from Previous Versions of the CMC 3. Group Organization - Appliance group affiliation is retained as much as possible. With v5.0 or later, appliances can belong to only one group. If an appliance belongs to more than one group, the appliance is assigned to one of the preserved groups alphabetically. 18 Riverbed Central Management Console User s Guide

27 Upgrading from Previous Versions of the CMC Overview of the Central Management Console Migration Procedures This section describes a generic process for migrating to CMC v8.0 or later. Because configurations vary greatly, Riverbed recommends that you consult with Riverbed Professional Services before beginning the migration process. Note: Riverbed recommends that you perform a CMC external backup prior to upgrading to CMC v6.5.x. For details about external backups, see Working with External CMC Backups on page 76. Note: If you are upgrading from a version prior to CMC v6.1, Riverbed recommends that you first upgrade to the latest point release of each major version. For example, if you are upgrading from CMC v6.0, you should first upgrade to CMC v6.1.x, and then to CMC v8.0. This section describes the following procedure: Upgrading the CMC Software Version on page 19 Upgrading the CMC Software Version You can upgrade your CMC software version in the Configure > Maintenance > Software Upgrade page. The following factors affect migration: amount of data size of data for each appliance number of managed appliances To upgrade the software 1. Obtain the new image from the Riverbed Support website at and save it to a local directory. 2. Log in to the current CMC. 3. Choose Configure > Maintenance > Software Upgrade to display the Software Upgrade page. 4. Under Install Upgrade, select either the From URL or From Local File option. 5. Click Install. 6. After the new image installs, reboot the CMC: Choose Configure > Maintenance > Reboot/Shutdown to display the Reboot/Shutdown page. Click Reboot. After you click Reboot, you are logged out of the system, and it reboots. Note: After upgrading, clear the cache of your browser to ensure that the CMC displays correctly. Riverbed Central Management Console User s Guide 19

28 Overview of the Central Management Console Steelhead Appliance Auto-Registration Steelhead Appliance Auto-Registration Steelhead appliances must be registered with the CMC so that you can monitor and manage them with the CMC. Steelhead appliances are designed to send a registration request periodically to the CMC either to an IP address or hostname you specify when you run the Steelhead appliance installation wizard, or to a default CMC hostname. For auto-registration with the default hostname to work, you must configure your DNS server to map to the hostname riverbedcmc and the IP address of the CMC. The steps to register Steelhead appliances with the CMC depend on the order in which you install the products. After a Steelhead appliance is registered, you can set auto-configuration to automatically push the current configuration when the Steelhead appliance connects. During auto-registration, the Steelhead appliances do not send passwords to the CMC. Unless the password value is modified in the Manage Appliances page, the CMC assumes that the password is password. For details, see Managing Appliances and Appliance Groups on page Riverbed Central Management Console User s Guide

29 Steelhead Appliance Auto-Registration Overview of the Central Management Console To install the CMC before you connect the Steelhead appliances 1. Install the CMC. 2. Use the CMC to complete the registration entries for remote appliances. Registration entries specify: The serial number of the appliance. The user name and password of the account through which the configuration must be performed (defaults are admin and password). Optionally, an initial group assignment. 3. Use the CMC to create the policy and group configuration objects to manage the Steelhead appliances in your system: Create and assign policies. Create groups and assign appliances to the groups. Enable auto-configuration for each Steelhead appliance in the group. Steelhead appliances you have not assigned to groups are members of the default group Global. The default group Global has the auto-configuration feature enabled. Review the Steelhead appliance configuration and add additional CLI commands (if any). For details, see Managing Appliances and Appliance Groups on page Set up a DNS server to map to the hostname riverbedcmc and the IP address for the CMC. 5. Connect the remote Steelhead appliance primary network interface to the network and power it on. When the Steelhead appliance contacts the CMC, the CMC sends the configuration to the remote Steelhead appliance, the appliance is registered with the CMC, and the CMC begins collecting performance metrics for the Steelhead appliance. To install the Steelhead appliances before you install the CMC 1. Install the remote Steelhead appliances. 2. Set up a DNS server to map to the hostname riverbedcmc and the IP address for the CMC. 3. Install the CMC. When you view the CMC, the Steelhead appliances in your system appear in the Manage > Appliances page. It might take as long as an hour for all Steelhead appliances to appear in the Manage > Appliances page. 4. Create and assign policies. 5. Create groups and assign appliances to the groups. Steelhead appliances you have not assigned to groups are members of the default group Global. Riverbed Central Management Console User s Guide 21

30 Overview of the Central Management Console Steelhead Appliance Auto-Registration 6. If necessary, complete the registration entries for the remote Steelhead appliances by specifying: the user name and password of the account through which the configuration must be performed (only if you are not using the defaults admin and password). an initial group assignment (optional). For details, see Managing Appliances and Appliance Groups on page Riverbed Central Management Console User s Guide

31 CHAPTER 2 Configuring the CMC This chapter describes how to modify CMC settings, manage configurations, upgrade software, and stop and start the CMC. This chapter includes the following sections: Configuring Network Settings on page 24 Configuring System Settings on page 32 Configuring Security Settings on page 55 Maintaining Your System on page 76 Changing the Account Password on page 89 Managing Configuration Files on page 90 This chapter assumes that you have installed and performed the initial configuration of the CMC. For details, see the Steelhead Management Console User s Guide. Riverbed Central Management Console User s Guide 23

32 Configuring the CMC Configuring Network Settings Configuring Network Settings The following section describes how to configure network settings in the CMC. This section includes the following topics: Configuring Host Settings on page 24 Configuring Settings for the Base Interfaces on page 28 Configuring Host Settings You can view and modify general host settings in the Configure > Networking > Host Settings page. The Host Settings page is not controlled by the CMC Network role but by the CMC General Settings role. When you initially run the installation wizard, you set required network host settings for the CMC. You can configure or modify the following settings: Name - Displays the hostname. DNS Settings - Riverbed recommends that you use DNS resolution. Hosts - If you do not use DNS resolution, or if the host does not have a DNS entry, you can add additional hosts to the system. Proxies - Configure proxy addresses for Web or FTP proxy access to the CMC. Date and Time - Riverbed recommends that you configure NTP time synchronization. 24 Riverbed Central Management Console User s Guide