wx/wxc inline basic deployment guide€¦ · wx/wxc in-line basic deployment guide 1 1....

1

WX/WXC In-Line Basic Deployment Guide


2

Table of Contents1. Introduction .................................................................................................................................1

2. WX/WXC integration in a customer network ....................................................................................1

2.1. One router ..........................................................................................................................1

2.2. Two routers in active/passive mode ......................................................................................1

2.3. One router with multiple LAN interfaces .................................................................................2

2.4. One router with LAN interface and VLAN ................................................................................4

2.5. Two routers in active/active mode with asymmetric routes .....................................................4

2.6. Cabling ...............................................................................................................................4

3. WX/WXC basic configuration .........................................................................................................5

3.1. Before you begin .................................................................................................................5

3.2. Connecting to the WX/WXC ..................................................................................................5

3.3. Upgrading the WX/WXC ........................................................................................................6

3.4. Restore factory default settings ............................................................................................7

3.5. Quick setup process ............................................................................................................7

3.6. Interfaces setting ................................................................................................................8

4. Optional WX/WXC configuration settings ........................................................................................9

4.1. Create specific applications .................................................................................................9

4.2. QoS configuration ..............................................................................................................11

4.3. VLAN configuration ............................................................................................................12

4.4. Wan Performance monitoring ..............................................................................................14

5. Verifying WX/WXC configuration ...................................................................................................14

5.1. Verify tunnels creation between the WX/WXC .......................................................................14

5.2. Verify WX/WXC remote routes ............................................................................................15

5.3. Save and archive each configuration ...................................................................................17

6. Installation validation .................................................................................................................17

7. Extra information ........................................................................................................................20

Troubleshooting Common Juniper WX/WXC Issues: ....................................................................20

GoldenConfigs: ........................................................................................................................20


1

1. IntroductionThe goal of this document is to detail the different steps needed to integrate the WX/WXC in-line in different customers’ network environments.

Technical Note: This document covers only the WX/WXC in-line integration for small deployments (less than 10 locations). For other integrations like off-path integrations or large deployments, advanced documents are available on the Juniper partner Web site. Juniper Professional Services can also be contacted to analyze specific customer environments, propose the best WX/WXC integration, and implement WX/WXC integration.

2. WX/WXC integration in a customer network

2.1. One router

When a customer has one WAN router, the WX/WXC is inserted in the flow path between the WAN router and switch.

Technical Note: See cabling section: 2.6. Cabling

2.2. Two routers in active/passive mode

When a customer has two WAN routers in active/passive mode, the WX/WXC is inserted in the flow path between the active WAN router and switch.

Switch LAN to WAN

WAN

WAN to LAN

Switch WX/WXCLAN to WAN

WAN

WAN to LAN

Switch

Switch

LAN to WAN

RouterActif/Standby

WAN

WAN to LAN


2


For WAN optimization High Availability (HA), you can insert 2 WX/WXC appliances; one on each path:


When the primary WAN, primary router or primary WX/WXC fails, traffic follows the accelerated path through the secondary WX/WXC, secondary router and secondary WAN link.

2.3. One router with multiple LAN interfaces

To optimize flow when a customer has one WAN router with multiple LAN interfaces, the WX has to continually receive all incoming and outgoing traffic. There are multiple WX in-line integrations.

Switch

Switch

WX/WXCLAN to WAN

RouterActif/Standby

WAN

(*) Optional : Fail toopen or not

(*) In case of failure you maywant the WX/WXC to

“switch-to-wire” or decide not to produce a Router failover

WAN to LAN

Switch

Switch

WX/WXCLAN to WAN

RouterActif/Standby

WAN

(*) Optional : Fail toopen or not

(*) In case of failure you maywant the WX/WXC to

“switch-to-wire” or decide not to produce a Router failover

WAN to LAN

WX/WXC

Switch

Switch

LAN to WAN

WAN

WAN to LAN

subnet 1

subnet 2


3

Technical Note: WX off-path integration is usually selected in such networks. This document doesn’t cover these instances but instead focuses on in-line deployments.

With one WX in front of each router interface:


With one extra router with LAN interfaces inserted after the WX:


Switch WX/WXC

Switch WX/WXC

LAN to WAN

WAN

WAN to LAN

Switch WX/WXC

Switch

LAN to WAN

WAN

WAN to LAN


4

2.4. One router with LAN interface and VLAN

When a customer has one WAN router with a LAN interface that carries multiple VLANs (802.1Q), the WX is inserted between the WAN router and switch.


2.5. Two routers in active/active mode with asymmetric routes

When a customer has two WAN routers in active/active mode, traffic can be sent by one router and received by another router. This network is supported by the WX/WXC but is not covered in this document. It requires different advanced features like clustering and Policy-based Multipath. These features are detailed in the WX user guide and in different documents on the Juniper partner Web site. Juniper Professional Services can be contacted to analyze the specific customer environment and propose the best WX/WXC integration, as well as to help implement the WX/WXC integration.

2.6. Cabling

When the WX/WXC “Local” interface is connected to a switch, use a straight-through cable.

When the WX/WXC “Local” interface is connected to a router, use a cross-over cable.

The cable between the WX/WXC “Remote” interface and router is a cross-over cable for the WXC590 and WX100, while a straight-through cable is used for all other WX/WXC appliances.

Always verify the bypass connectivity first. The WX/WXC powered off should act as a wire and not block network traffic.

If you want to produce a router failover in case WX/WXC fails to redirect traffic to the backup router, you have to disable the WX/WXC bypass capabilities. For WX15, WX60 and WXC500, use the “bypass disable” button (next to interfaces). For the WXC250, WXC590 and WX100, turn off bypass capabilities with a CLI command: “embed bypass-capability off” plus “commit” plus “save.”

Switch LAN to WAN

WAN

WAN to LAN

subnet 1

subnet 2

Switch WX/WXCLAN to WAN

WAN

WAN to LAN

Switch

Switch

LAN to WAN

RouterActif/Active

WAN

WAN to LAN


5

3. WX/WXC basic configuration

3.1. Before you begin

The material in this guide is based on WXOS version 5.4.4.0 or higher.

Before you start, you must upgrade your WX/WXC appliances to the latest software, then restore the WX/WXC platforms to factory default settings.

Technical Note: If you need to upgrade the WXOS software, do so before restoring the factory default settings, since default values may change depending on the code version. This will ensure a clean configuration.

3.2. Connecting to the WX/WXC

The default user/password is “admin”/”juniper”. For old WX/WXC releases, the default password was “peribit”.

If you know the IP address, you can connect to the WX/WXC via https (for example: https://10.0.0.10).

If you don’t know the IP address, you can set it up via the front panel on WX60 and WXC500, or the serial console for the other appliances via console (9600 bps baud rate / 8 Data bits / No Parity / 1 Stop bits / no Flow control):

WXC# configure ip setWXC(config-ip-set)# ip-address 20.0.0.10WXC(config-ip-set)# subnet-mask 255.255.255.0WXC(config-ip-set)# default-gateway 20.0.0.1WXC# show ipIP address: 20.0.0.10Subnet mask: 255.255.255.0Default gateway: 20.0.0.2WXC#WXC# commitWXC-20.0.0.10# save-config

You are saving the running configuration as the startup configuration for the next reboot.Are you sure? yes/no (yes)Configuration saved successfully.WXC#

Optional: VLAN

In case of “One router with LAN interface and VLAN” integration (cf chapter 2.4), VLAN has to be enabled on the WX/WXC. Enable 802.1q and specify the “Native VLAN ID” (default VLAN ID on the switch) and the “VLAN ID” where the WX IP@ sits. Optionally, the WX/WXC can preserve the VLAN ID of incoming packets received when it forwards them compressed to the router. This option is selected when the router use VLAN ID for QoS, MPLS or other functions:WXC-10.0.0.10# configure interfaceWXC-10.0.0.10(config-interface)# set vlan mode on (default is off)WXC-10.0.0.10(config-interface)# set vlan native-id 1 (default is 1)WXC-10.0.0.10(config-interface)# set vlan id 100 (default is 1)WXC-10.0.0.10(config-interface)# set vlan preserve off (default is off)WXC-10.0.0.10(config-interface)# exitWXC#WXC# commitWXC-20.0.0.10# save-config

You are saving the running configuration as the startup configuration.for the next reboot.Are you sure? yes/no yesConfiguration saved successfully.WXC#


6

3.3. Upgrading the WX/WXC

The latest WX/WXC code is available on the Juniper support Web site: https://www.juniper.net/customers/csc/software/appaccel/wxseries/

To enable this upgrade select: “Admin” – “Load Boot Image” – “Local Drive”

Wait for the screen to confirm the image was loaded successfully. If you start clicking menus while waiting, the software upgrade will be canceled.

Then reboot the device: “Admin” – “Reboot” – “Reboot”


7

3.4. Restore factory default settings

The WX/WXC factory settings can be restored in order to preserve the actual IP address.

This is achieved via a CLI command: “load-config factory-default -preserve-ip”. This command must be done via CLI (console or SSH):

WXC-10.0.0.10# load-config factory-default -preserve-ipYou are loading the factory-default configuration as the startup configuration.The system will be rebooted and all data files will be deleted if you proceed.Are you sure? yes/no (yes)

After resetting to factory defaults, the device requires you to run through the quick setup process.

Technical Note: The VLAN settings are lost even with the “–preserve-ip” option. In case of VLAN, go to the section “3.2. Connecting to the WX/WXC” to configure the VLAN settings.

3.5. Quick setup process

• LogontheWX/WXCviatheWeb(https://<IPaddressofWX/WXC>) Username/password: “admin”/”juniper”

• Step1:SelectOperatingMode Select “Active Mode”

• Step2:SetTime You can either select a Network Time Protocol (NTP) server or select “Local Time” (default) and set the correct date, time and time zone.

• Step3:RegistrationServerSetup

a) To configure as the registration server, select “Make this device the Registration Server” and then continue to step B. If you do not wish to configure this device as the registration server, go to step C.

Technical Note: Only one WX/WXC acts as a registration server. Any WX/WXC can be used as a registration server, but Juniper recommends using the server in the main Data Center.

b) If configuring as the registration server, it is important to remember the password you used. This is separate from the admin password and you will need it when configuring the second WX/WXC platform.

c) If this is NOT the registration server, select “Direct this device to an existing Registration Server”, then type the IP address for the registration server that was already configured and enter the registration server password.

• Step4:LicenseKey

If you have a license key, you can enter it, otherwise you can select the default “Operate without a license for 30 days.”

• Step5:Finish


8

3.6. Interfaces setting

For WX/WXC with 10/100 interfaces (WX15, WX20, WXC250) and/or switch/router with 10/100 interfaces, always force the interface to 100 Mbps/Full-Duplex on both WX and switch/router.

This can be done via WebUI under “Device Setup” – “Interfaces”:

In case of WX/WXC with 10/100/1000 interfaces (WX60, WX100, WXC500, WXC590) and/or switch/router with 10/100/1000 interfaces, you can use Auto-Negotiation. Then check the negotiation selected on both WX, and make sure that the switch/router is “1000 Full-Duplex.”

This can be done via WebUI under “Device Setup” – “Interfaces”:


9

4. Optional WX/WXC configuration settings

4.1. Create specific applications

The WX/WXC has 52 default applications definitions like Common Internet File System (CIFS), Domain Name System (DNS), Exchange and HTTP.

It may be relevant to create new applications if a critical application is not already listed, or if the customer wants more detail in the applications classifications, such as “Oracle” and “SAP” instead of “HTTPS” for both applications.

Applications can be reviewed under: “Device Setup” – “Applications” – “Overview”:

Applications can be created by selecting: “Device Setup” – “Applications” – “Definitions” – “New Applications” with IP information – TCP/UDP information – Layer 7 information (for Citrix and HTTP applications) – ToS/DCSP information.

For instance: an Oracle-Web-Finance https application running on server IP address 20.1.0.25 and TCP port 443.


10

Technical Note: New applications created are automatically:

•Optimizedwithcompression/cachingandTCPAcceleration

•Notmonitored(toviewcompressionandaccelerationstatisticsforthatapplication)

Juniper recommends that disable these optimizations first and enable them to individually validate the application improvements and enable the monitoring.

•Compression/Cachingconfigurationperapplication,select“Compression”–“ApplicationFilter”

• TCPAccelerationconfigurationperapplication,select“Acceleration”–“TCPacceleration(AFP)”

•Monitoringperapplication,under“DeviceSetup”–“Applications”–“Monitoring”

For instance, SSL applications (such as HTTPS) don’t get compression/caching benefits, since the traffic seen by the WX/WXC is encrypted. Compression/caching should be disabled for those new SSL applications that are defined.

Keep in mind, the WX/WXC release 5.5 that was available at the end of 2007, will allow SSL optimization with the encryption service license.


11

4.2. QoS configuration

Two outbound quality of service (QoS) modes are available:

• Dedicated:ThelocalWANlinkequalsorexceedstheremoteWX/WXCWANlinks

• Over-subscribed:ThelocalWANlinkislessthantheremoteWX/WXCWANlinks

In version 5.4.4.0, outbound QoS and Bandwidth Detection are enabled at all detected WX/WXC endpoints by default. This automatically senses the bandwidth, making it a good fit for most environments where there may be questions about the exact bandwidth available or where bandwidth is highly variable.

The default settings of the QoS bandwidth is configured to the interface speed of the WX/WXC. Bandwidth Detection prevents the WX/WXC from overdriving the WAN circuit, but it is recommended that you configure the bandwidth links to a value closer to their real size since it will make reporting clearer with the right scale (under “Monitor”). Select “QoS” – “Outbound” – “Direct Setup” – Endpoints”:

SwitchWX/WXC

SwitchSwitch WX/WXC

WX/WXC

Switch

Device 2

Device 1 Device 3WAN

500Kbps

500Kbps

1.5Mbps 500Kbps

Othertraf�c

SwitchWX/WXC

SwitchSwitch WX/WXC

WX/WXC

Switch

Device 2

Device 1 Device 3WAN

60Kbps

500Kbps

1.5Mbps 1.5Mbps

Othertraf�c


12

Technical Note: If the environment where you are installing the device has high levels of WAN packet loss, you may want to avoid using Bandwidth Detection and consider the GoldenConfigs document Appendix C, which describes how to manually configure QoS : https://www.juniper.net/partners/partner_center/common/products/downloads/app_accel/wan/sdocs/GoldenConfigs_5_4_4_0.pdf

And you can find deeper information about the QoS Resource Guide on https://www.juniper.net/partners/partner_center/common/products/downloads/app_accel/wan/sdocs/wx_qos_resourceguide.pdf.

4.3. VLAN configuration

For “One router with LAN interface and VLAN” integration (cf chapter 2.4), VLAN must be enabled on the WX/WXC. Select “Device Setup” – “Basic” – “Interfaces” – “802.1q”:

Enable 802.1q and specify “Native VLAN ID” (default VLAN ID on the switch) and the “VLAN ID” where the WX IP@ sits. Additionally, the WX/WXC can preserve the VLAN ID of incoming packets received when it forwards them compressed to the router. This option is selected when the router uses VLAN ID for QoS, MPLS or other functions.


13

Technical Note: If you don’t have WebUI access, because your WX/WXC VLAN settings are not correctly set up yet, this can be done via console. The commands are detailed in section 3.2. Connecting to the WX/WXC.

Then include subnets accessible from the WX/WXC remote interface for optimization.

Technical Note: The WX/WXC reaches the local subnets on other VLANs via the router located on its remote interface. By default subnets reachable from the remote interface are automatically removed from optimization. This has to be disabled.

This is done via CLI (console or SSH or WebUI “Admin”-”Tools”-”Command Line Interface”):


14

4.4. Wan Performance monitoring

The WX/WXC can provide detailed statistics on losses and latency for different endpoints when enabled. To enable it, select “Device Setup” – “Advanced” – “WAN Performance Monitor”:

5. Verifying WX/WXC configurationNote: Run the Quick Start on all WX/WXC devices in the community before proceeding.

5.1. Verify tunnels creation between the WX/WXC

On each WX/WXC, verify that the tunnels are well mounted to the other WX/WXC by selecting “Compression” – “Endpoints”:


15

The tunnels between WX/WXC use TCP and UDP ports 3577 and 3578.

If the tunnels aren’t established, check to see if the WX/WXC default gateways are correct or if there is no firewall that blocks the WX/WXC TCP/UDP traffic.

5.2. Verify WX/WXC remote routes

Verify that each WX/WXC learned the distant subnets and used a WX/WXC optimized tunnel. Select “Compression” – “Advanced” – “Remote Routes”:

In this example, the “WXC-10.0.0.10” discovered the subnet “20.0.0.0/24” on the WXC 20.0.0.10.

Important Note:

The WX/WXC automatically learns where the local subnet sits. If you have multiple subnets in a location, you have to configure them so that the local WX/WXC knows those subnets are local and will propagate the information to the other WX/WXC. For instance:

Technical Note: Local subnets can be manually added in the local WX or learned automatically via RIP or OSPF. This basic deployment guide covers only the manual configuration.

WX/WXC

20.0.0.0/24 WAN20.1.0.0/24

20.2.0.0/24


16

In this instance, the subnets “20.1.0.0/24” and “20.2.0.0/24” have to be added in the WX/WXC as local subnets. On the local WX/WXC: “Device Setup” – “Local Routes” – “Static”.

You can validate that these local routes are propagated to the other WX/WXC by going to the other WX/WXC under “Compression” – “Advanced” – “Remote Routes”:


17

5.3. Save and archive each configuration

The WX/WXC configuration changes are immediately applied but not automatically saved, so if the device is rebooted, the changes are lost.

To save the WX/WXC configuration, select “Admin” – “Save Configuration” – “Flash memory” – “Save to the default configuration file (startup.cfg)”:

We recommend backup and archiving the WX/WXC configurations with the option “Local disk drive.”

6. Installation validationThe WX/WXC provides benefits in four areas:

• Compression/Caching

• ApplicationAcceleration

• Control

• Visibility

To quickly validate the WX/WXC benefits, transfer a file from a central server to a remote office using CIFS.

The first download with WX/WXC should be faster than access without WX/WXC because of the Compression and Application Acceleration techniques. The same download performed a second time should be a few seconds or less because of the same techniques plus the caching technique.


18

You can also validate the benefits on the WX/WXC server side, checking the bandwidth saving. Select “Monitor” – “Compression” – “Compression”:

You can also validate the WX/WXC optimization techniques used on the CIFS flow. Select “Admin” – “Tools” – “Flow Diagnostics” – “Go”:


19

Then select the flow and click on the “magnifying glass” icon:

Validate that the flow was recognized as CIFS and compressed (1), TCP Accelerated (2), CIFS application accelerated (3), decompressed by the correct WX/WXC (4), and used caching in case of WXC (5).

Technique Note: CIFSflowssigned(6)providesprotectionagainst“ManintheMiddle”attacksforallWANoptimizationdevices,sinceJuniperaltersflowsanddetects“ManintheMiddle”attacksbyCIFSflowssigned.However, these CIFS flows can still be fully optimized with the unique WX/WXC feature available from the 5.5 release:SMBsigning.TheWX/WXCSMBsigningconfigurationrequiresawindowsdomainaccountandisdetailed in the WX user guide.

CORPORATE HEADQUARTERS AND SALES HEADQUARTERS FOR NORTH AND SOUTH AMERICAJuniper Networks, Inc. 1194 North Mathilda Avenue Sunnyvale, CA 94089 USA Phone: 888.JUNIPER (888.586.4737) or 408.745.2000 Fax: 408.745.2100www.juniper.net

EAST COAST OFFICEJuniper Networks, Inc. 10 Technology Park Drive Westford, MA 01886-3146 USA Phone: 978.589.5800 Fax: 978.589.0800

ASIA PACIFIC REGIONAL SALES HEADQUARTERSJuniperNetworks(HongKong)Ltd. 26/F, Cityplaza One 1111King’sRoad TaikooShing,HongKong Phone: 852.2332.3636 Fax: 852.2574.7803

EUROPE, MIDDLE EAST, AFRICA REGIONAL SALES HEADQUARTERSJuniperNetworks(UK)Limited Building 1 Aviator Park Station Road Addlestone Surrey,KT152PG,U.K. Phone: 44.(0).1372.385500 Fax: 44.(0).1372.385501

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered trademarks, or registered service marks in this document are the property of Juniper Networks or their respective owners. All specifications are subject to change without notice. Juniper Networks assumes no responsibility for any inaccuracies in this document or for any obligation to update information in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.

905006-001 Jan 2008 20

7. Extra informationThe Juniper partner site provides access to different technical collaterals: https://www.juniper.net/partners/partner_center/content/reseller/products/wan_kit.jsp

You can find some documents such as:

Troubleshooting Common Juniper WX/WXC Issues:

https://www.juniper.net/partners/partner_center/common/products/downloads/app_accel/wan/collateral/troubleshooting_common-wx.pdf

GoldenConfigs:

https://www.juniper.net/partners/partner_center/common/products/downloads/app_accel/wan/sdocs/GoldenConfigs_5_4_4_0.pdf

The latest WX/WXC software and User Guides are available on the Juniper support site: https://www.juniper.net/customers/csc/software/appaccel/wxseries/ https://www.juniper.net/techpubs/hardware/wx/

wx/wxc inline basic deployment guide€¦ · wx/wxc in-line basic deployment guide 1 1....

Documents