Deploying Silver Peak VXOA Physical And Virtual Appliances with Dell EqualLogic Isolated iscsi SANs including Dell 3-2-1 Tech Note June 2012 This tech note describes the deployment of Silver Peak physical and virtual appliances with Dell EqualLogic isolated iscsi SANs including the Dell EqualLogic 3-2- 1 server and storage solution. 1 Page
Formatting Conventions... 3 Prerequisites... 3 Overview... 3 Figure 1: Isolated iscsi SAN Diagram... 3 Figure 2: Silver Peak Tunnel with Auto- Replication... 4 Network Diagram... 5 Figure 3: Network Diagram... 5 Example Configuration... 6 Figure 4: IP Addresses... 6 Silver Peak Configuration... 7 Figure 5: Silver Peak Configuration Wizard... 7 Figure 6: Appliance IP address and name... 7 Figure 7: Appliance date, time and password... 8 Figure 8: Deployment mode... 8 Figure 9: Apply management settings... 9 Figure 10: Wait for the system to reboot... 9 Figure 11: Login to the appliance... 10 Figure 12: Configure system... 10 Figure 13: Max WAN Bandwidth... 10 Figure 14: Deployment mode... 11 Figure 15: Dual homed router mode... 11 Figure 16: Assign appliance IP addresses and next- hop... 12 Figure 17: WAN next hop warning... 12 Figure 18: Tunnel configuration... 12 Figure 19: Adding a new tunnel... 13 Figure 20: Selecting route policy... 13 Figure 21: Creating a new route policy... 14 Conclusion... 14 Links... 15 Appendix A... 16 Silver Peak VXOA and Dell EqualLogic 3-2- 1 Configuration Sheet... 16 2 Page
Formatting Conventions Italic font used for words that require special attention or as a placeholder for information that must be user supplied. Monospaced font Command names and information displayed on a system console. Also used for file, path and directory names. Bold monospaced font Words and characters that the user must type. Typed characters are always in lowercase letters, unless the program is case- sensitive. Prerequisites Silver Peak VX or NX appliances version 4.4.7 or later Silver Peak licenses IP address information for appendix A Read this entire document before beginning configuration Overview This document describes the configuration of Silver Peak physical and virtual appliances for Dell EqualLogic isolated iscsi SAN and 3-2- 1 deployments. For this deployment the iscsi SANs at the primary and secondary sites are isolated from the LAN and WAN router, Figure 1. Because the iscsi SAN is in an isolated subnet, EqualLogic Auto- Replication cannot be used unless changes are made to the network by connecting the iscsi SAN to the LAN or adding an additional connection from the WAN router to the iscsi SAN. In order to simplify replication deployments with an isolated iscsi SAN, Silver Peak physical or virtual appliances are used to optimize and route replication traffic across the WAN. Subnet B WAN Subnet C WAN Router WAN Router IP SAN Switch IP SAN Switch Primary EQ Array Secondary EQ Array Subnet A Subnet D Figure 1: Isolated iscsi SAN Diagram 3 Page
Because the Silver Peak appliances use a tunnel to communicate with each other, the iscsi SAN at each site will remain isolated from the LAN, maintaining security and stability, Figure 2. For additional security, IP SEC can be used to encrypt traffic between the Silver Peak appliances. Subnet B WAN Subnet C WAN Router WAN Router Silver Peak Silver Peak iscsi SAN Switch iscsi SAN Switch Primary EQ Array Secondary EQ Array Subnet A Subnet D Dell EqualLogic Auto-Replication Traffic Silver Peak Tunnel with Auto-Replication Traffic Figure 2: Silver Peak Tunnel with Auto- Replication When Silver Peak appliances are deployed with Dell EqualLogic Auto- Replication for a 3-2- 1 solution or isolated iscsi SAN, the Silver Peak appliance will become the default gateway for the EqualLogic arrays on the iscsi SAN. The Silver Peak appliances will forward all EqualLogic Auto- Replication traffic to the WAN router. The Silver Peak appliances will not forward traffic from the LAN to the iscsi SAN, only the traffic that is in the Silver Peak tunnel will be forwarded to the iscsi SAN. 4 Page
Network Diagram This diagram shows the network connections between the EqualLogic arrays. WAN WAN Router WAN Router Silver Peak 1 or 10 GbE Silver Peak iscsi SAN Switch iscsi SAN Switch Primary EQ Array Secondary EQ Array Figure 3: Network Diagram 5 Page
Example Configuration The following IP addresses are used for this example; note that this is only one side of the replication link. Both sides will need to be configured before replication can begin. The second site will have different IP addresses, but all of the components will be the same. It is possible to use a physical Silver Peak appliance at one site and a virtual Silver Peak appliance at the other site. WAN router 10.0.0.1/24 Silver Peak WAN0 10.0.0.2/24 Silver Peak WAN0 Next- hop 10.0.0.1/24 Silver Peak mgmt0 192.168.151.136/24 EqualLogic array 192.168.0.10/24 Silver Peak LAN0 192.168.0.1/24 Silver Peak LAN0 Next- hop 192.168.0.254/24 (this address is non- functioning and should not be an actual device. If this address responds to a ping traffic will not be forwarded correctly.) WAN Router 10.0.0.1/24 Silver Peak SP WAN0 10.0.0.2/24 Next-hop 10.0.0.1/24 SP LAN0 192.168.0.1/24 Next-hop 192.168.0.254/24 iscsi SAN Switch Primary EQ Array 192.168.0.10/24 Figure 4: IP Addresses 6 Page
Silver Peak Configuration For the initial deployment of the Silver Peak appliances, please follow the Quick Start Guide located here: http://www.silver- peak.com/support/user_docs.asp. Note that there is a separate quick start guide for physical and virtual appliances. After completing step 6 in the quick start guide, please return to this guide and start at 1. 1. Login and begin with the Silver Peak configuration wizard. The default user name and password is admin/admin. Figure 5: Silver Peak Configuration Wizard 2. Assign the appliance hostname and management IP address. Figure 6: Appliance IP address and name 7 Page
3. Set the date, time and management password. Figure 7: Appliance date, time and password 4. Select the finish now option, Apply management settings only - configure deployment mode later. Figure 8: Deployment mode 8 Page
5. Apply management settings and wait for the system to reboot. Figure 9: Apply management settings Figure 10: Wait for the system to reboot 9 Page
6. Login to the appliance. Figure 11: Login to the appliance 7. Select configure system. Figure 12: Configure system 8. Set System Bandwidth based on the amount of bandwidth available for replication. In some environments the bandwidth that is available for replication will be less than the total available WAN bandwidth. This setting will limit the maximum Silver Peak throughput. Figure 13: Max WAN Bandwidth 10 Page
9. Select Router for the deployment mode and click the advanced button. Figure 14: Deployment mode 10. Select dual homed and click OK. Figure 15: Dual homed router mode 11. Assign IP addresses for appliance interface IP1 and IP2 and wan0 and lan0 next hop. a. Assign an IP address to Appliance IP1 that is valid on the LAN, the wan0 Next- hop IP is the address of the WAN router or default gateway for the LAN. b. Assign an IP address to Appliance IP2 that is valid on the iscsi SAN, the lan0 Next- hop IP should be an address that is not in use on the iscsi SAN and will not respond to a ping. This address is just a placeholder and will not be used. If an address is used that is in use on the iscsi SAN, the Silver Peak tunnel will not activate and replication will fail. c. Ignore the warning for WAN Next- Hop Unreachable on lan0. The gw: field should list the IP address that was used for the LAN0 Next- hop, figure 17. If this error message is not present, an in- use IP address was entered into the lan0 Next- hop field and replication will fail. 11 Page
Figure 16: Assign appliance IP addresses and next- hop Figure 17: WAN next hop warning 12. Create a manual tunnel between Silver Peak appliances. a. Select Configuration>Tunnels Figure 18: Tunnel configuration b. Select Add and use the following settings: Name: use a name to describe where this tunnel goes, for example tunnel- to- remote- site- IP- SAN Admin: up MTU: 1500 Local IP: the local IP address for LAN0 Remote IP: the remote appliance IP address for LAN0 Auto Max BW: checked. Max BW can be set if replication traffic needs to be limited to a specific throughput. Min BW: 32 Mode: gre 12 Page
Figure 19: Adding a new tunnel 13. Because the two iscsi SANs are isolated from the LAN and WAN, a route policy must be added to the Silver Peak appliances in order to pass traffic between them. a. First select Configuration>Route Policy. Figure 20: Selecting route policy b. Select Add and use the following settings: Priority: 10 Protocol: ip Src Subnet: the local IP SAN subnet Dst Subnet: the remote IP SAN subnet Application: any DSCP: any Tunnel: use the tunnel that was created in step 12. 13 Page
Tunnel Down Action: Drop d. Select Apply If the tunnel between the Silver Peak appliances goes down replication will stop. Setting the Tunnel Down Action to Pass- Through will not change this. Setting the Tunnel Down Action to Drop is a reminder that replication will stop. Figure 21: Creating a new route policy 14. Use the local Silver Peak LAN0 IP address as the default IP gateway for each EqualLogic member. 15. Refer to the Dell EqualLogic documentation and configure replication to the remote site. Conclusion Silver Peak VXOA enables EqualLogic arrays on isolated iscsi SANs to replicate across significantly greater distances, using less bandwidth, and without any changes to the LAN or WAN router. Silver Peak VXOA helps maintain EqualLogic security and stability by keeping the iscsi SAN replication traffic isolated from the LAN through the use of tunnels between appliances. All of these benefits and deployment options are available with Silver Peak virtual and physical appliances. 14 Page
Links Silver Peak Documentation: http://silver- peak.com/support/user_docs.asp Dell EqualLogic Product Documentation: http://support.dell.com/support/topics/global.aspx/support/enterprise_support/e n/equal_logic?c=us&cs=04&l=en&s=bsd&~ck=anavml 15 Page
Appendix A Silver Peak VXOA and Dell EqualLogic 3-2- 1 Configuration Sheet Local Site Silver Peak mgmt0: Replication Bandwidth: LAN Wan Router: LAN Subnet: Silver Peak WAN0: IP SAN IP SAN Subnet: Silver Peak LAN0: LAN0 Next- hop: Remote Site Silver Peak mgmt0: Replication Bandwidth: LAN Wan Router: LAN Subnet: Silver Peak WAN0: IP SAN IP SAN Subnet: Silver Peak LAN0: LAN0 Next- hop: WAN WAN Router WAN Router SP WAN0 interface SP WAN0 interface Silver Peak Silver Peak SP LAN0 interface SP LAN0 interface iscsi SAN Switch iscsi SAN Switch Primary EQ Array Secondary EQ Array 16 Page