Sunteți pe pagina 1din 48

NetF operating manual Edition1.

2 About Teamsun
2013 Teamsun
All rights reserved
I
About Teamsun
Beijing Teamsun Technology Co., Ltd. (hereinafter referred to as: Teamsun) is China's leader-class
integrated IT service provider, is the first domestic service
Service network covering the entire Greater China region and part of the local IT service provider in
Southeast Asia. Owns two listed companies: Teamsun (Shanghai Securities Trading
The listed companies: 600410), the Hong Kong ASL Company (Hong Kong Stock Exchange listed
companies: 00771). Headquartered in Beijing, China
Mainland China and Hong Kong, Macao, Taiwan, Southeast Asia and other regions with more than 40
branches and employs more than 5000, either directly or indirectly controlled subsidiaries twenty
Number. Teamsun listed since 2004, the scale of business CAGR (CAGR) of more than 30 percent, is now
more than 50 business scale
One hundred million yuan.
Teamsun business direction involving cloud computing, mobile Internet, networking, information
security and other fields, business services covering IT products, applications
Wide range of IT services business of software development, system integration and value-added
resellers, is China's earliest products of the proposed IT services company. Based on the "customeroriented"
Philosophy and the "cooperation and win-win" development strategy, Teamsun based on the Greater
China market, that corporate and government clients improve IT core competencies
For the mission, with excellent solutions for customers as well as a deep understanding of the business
throughout Greater China and some Southeast Asian region intensive and efficient service delivery
Network, providing customers throughout the entire life cycle of their IT building "one-stop" service.
Companies in the telecommunications, postal services, financial services, government, education,
manufacturing
Manufacturing, energy, transportation, military and other fields have a lot of success stories.
Contact us
Beijing Teamsun Technology Co., Ltd.
BeiJing Teamsun Technology Co.Ltd.

Headquarters Address: A Block Technology Fortune Center on the 8th Xueqing Road, Haidian District,
Beijing, 10-11
Zip: 100192 Tel: 010-8273988 Fax: 8610-82733999
Pre-sales advice: 010-82733908
Official Website: http: //www.teamsun.com.cn
Microblogging: Teamsun official microblogging V catalog
2013 Teamsun
All rights reserved
II
Table of Contents
About Teamsun .............................................. .................................................. ................................... I
Contact us ................................................ .................................................. ......................................... I
Table of Contents ................................................. ..................................................
.............................................. II
Chapter 1 Initial setup and configuration .......................................... ..................................................
............ 1
1.1 Overview ................................................ .................................................. ................................. 1
1.2 Enable WebUI through CLI ............................................. .................................................. ....... 1
1.3 Access WebUI ............................................... .................................................. ..................... 1
1.4 Registration NetF products .............................................. .................................................. ................. 2
1.5 Log on to the WebUI .............................................. .................................................. .................. 2
1.6 Initial Settings .............................................. .................................................. ................... 2
1.6.1 set the hostname ............................................ .................................................. .............. 2
1.6.2 Set Date and Time ........................................... .................................................. ....... 3
1.6.3 Set NTP ............................................. .................................................. ................. 3
1.7 The basic network configuration .............................................. ..................................................
................... 3
1.7.1 configure the network interface ............................................ .................................................. ..........
3
1.7.2 Configuring Routing ............................................. .................................................. ................. 4

Chapter 2 Advanced Network Configuration ............................................ ..................................................


...................... 1
2.1 Configuring NAT ............................................... .................................................. ......................... 1
2.2 Configuring IP area .............................................. .................................................. ...................... 2
2.2.1 Import IP region table file .......................................... .................................................. ... 2
2.3 Configuring IP pool .............................................. .................................................. .......................... 2
2.4 Configuring port forwarding .............................................. ..................................................
................... 2
2.4.1 Configuring TCP port forwarding ........................................... .................................................. .. 2
Chapter 3 Link Aggregation ............................................ ..................................................
.............................. 4
3.1 Add Binding Interface ............................................. .................................................. .................... 4
3.2 add an interface to the binding interface .......................................... ..................................................
... 4
Chapter 4 clusters .............................................. .................................................. .................................... 5
4.1 Cluster SLB VIP ........................................ In Active-Standby mode ................................. 5 Contents
2013 Teamsun
All rights reserved
III
4.1.1 Configuring SLB ............................................. .................................................. ................. 5
4.1.2 Configuring a virtual cluster ID ........................................... .................................................. ...... 5
4.1.3 configure virtual cluster seize ........................................... .................................................. ... 5
4.1.4 define the cluster VIP ............................................ .................................................. ........... 6
4.1.5 define the priority ............................................ .................................................. .............. 6
4.1.6 Enable Cluster ............................................. .................................................. ................. 6
Chapter 5, High Availability (HA) .......................................... .................................................. .................. 7
5.1 hive a .............................................. .................................................. ........................ 7
5.1.1 Configuring SLB ............................................. .................................................. ................. 7
5.1.2 IP pool configured for SLB services ......................................... ................................................. 7
5.1.3 Configuring HA unit and links .......................................... .................................................. 7

5.1.4 Configuring floating IP group ........................................... .................................................. .......... 8


5.1.5 hive priority floating IP group ....................................... ........................................ 9
5.1.6 Configure the preemption mode ............................................ .................................................. ..........
9
5.1.7 Enable Group ............................................. .................................................. ..................... 9
5.1.8 (Optional) Configuring the normal check condition ...................................... ......................................
9
5.1.9 (Optional) Configuring failover decision rules ..................................... ................................ 9
5.1.10 (Optional) Enable SSF ......................................... .................................................. .. 10
5.1.11 (Optional) Configuring synchronous mode ........................................ ............................................
10
5.1.12 (Optional) Enable HA log ........................................ ............................................. 10
5.1.13 HA enabled and configured to write to a memory ..................................... ............................ 10
5.2 hive 2 .............................................. .................................................. ...................... 10
5.2.1 Enable FFO link ............................................ .................................................. ....... 10
5.2.2 configuration synchronization mode ............................................ ..................................................
........ 10
5.2.3 (Optional) Enabling SSF ......................................... .................................................. .... 10
5.2.4 Enabling HA ............................................. .................................................. ................ 10
Chapter 6 server load balancing (SLB) ......................................... .................................................. .... 11
6.1 Adding a real service ............................................. .................................................. .......... 11
6.2 Adding a server group and define its methods ..........................................
............................................... 11
6.3 add real service to the server group ........................................... .................................................. 12
6.4 Adding a virtual service ............................................. .................................................. .......... 12 Table
of Contents
2013 Teamsun
All rights reserved
IV
6.5 virtual services associated with the server group and define strategies ........................................
................................. 12

Chapter 7 reverse caching proxy ............................................ .................................................. ....................


14
7.1 The basic cache settings .............................................. .................................................. ................. 14
7.2 caching feature enabled virtual service ........................................... .................................................. 14
7.3 configure the cache filter ............................................. .................................................. .............. 15
7.4 enable caching filters ............................................. .................................................. .............. 15
Chapter 8 HTTP content rewrite ............................................ .................................................. ................
16
8.1 Configuring SLB ............................................... .................................................. ........................ 16
8.2 Global Enabling HTTP content rewrite ............................................ ................................................. 16
8.3 Enable virtual services HTTP content rewrite .......................................... ....................................... 16
8.4 Configuring HTTP content rewrite rules ............................................ ................................................. 16
8.5 configuration file type rewrite ........................................... .................................................. ........ 17
8.6 Configuration status code .............................................. .................................................. .....................
17
Chapter 9 DNS cache ............................................. .................................................. .......................... 19
9.1 Configuring SLB ............................................... .................................................. ........................ 19
9.2 Enable DNS cache .............................................. .................................................. ................ 19
9.3 (optional) add a static DNS cache ......................................... ................................................ 19
Chapter 10 HTTP compression ............................................. .................................................. ......................
20
10.1 globally enable HTTP compression ............................................. .................................................. .....
20
10.2 HTTP compression enabled virtual services ........................................... .............................................
20
10.3 Configuring Advanced HTTP compression .............................................
.................................................. ..... 20
10.4 Configuring URL-Exclude HTTP compression rules .......................................... ...................................
twenty one
Chapter 11 Secure Sockets Layer (SSL) ......................................... .................................................. ..........
twenty two

11.1 Creating an SSL virtual service ............................................ .................................................. . twenty


two
11.2 SSL virtual application service certificate ............................................ ..................................................
. twenty two
11.3 Importing keys and certificates SSL virtual services ........................................
........................................ twenty four
11.3.1 import the key SSL virtual services ........................................ ......................................... twenty four
11.3.2 Importing SSL certificate ......................................... virtual services ........................................
twenty four
11.4 Enabling SSL virtual services ............................................. .................................................. ........
twenty four
11.5 Creating an SSL background service ............................................ .................................................. .
twenty four
11.6 Enabling SSL background service ............................................. ..................................................
Contents ........ 25
2013 Teamsun
All rights reserved
V
Chapter 12 Quality of Service (QoS) .......................................... .................................................. .............
26
12.1 specify the QoS interface .............................................. .................................................. ............... 26
12.2 Creating a QoS queue ............................................. .................................................. ........ 26
12.3 define a QoS rule ............................................. .................................................. ........ 27
12.4 Enable QoS ............................................... .................................................. ....................... 28
Chapter 13 Link Load Balancing (LLB) ........................................ .................................................. ...... 29
13.1 Configuring interface IP address ............................................. ..................................................
............ 29
13.2 Configuration MNET ............................................... .................................................. ................... 29
13.3 Configuration LLB link ............................................. .................................................. ................ 29
13.3.1 Adding bound to ISP1 and ISP2 the LLB link .................................... ........................ 29
13.3.2 configure additional LLB health check ......................................... ....................................... 30
13.3.3 Enabling LLB health check ........................................... ................................................. 30

13.3.4 Configuring load balancing methods ........................................... .................................................. 30


13.3.5 Configuring bandwidth priority ........................................... .................................................. .... 30
13.4 Configuration Eroutes ............................................... .................................................. .................. 30
13.5 Configuring NAT ............................................... .................................................. ...................... 31
13.6 Enabling IPflow and RTS ............................................. .................................................. ........ 31
Chapter 14 global server load balancing (GSLB) ........................................ ............................................ 32
14.1AS1 and AS2 general configuration ........................................... .................................................. ... 32
14.1.1 Add CDN website ............................................ .................................................. ..... 32
14.1.2 Adding DPS detectors ........................................... .................................................. ... 32
14.1.3 Other common settings ............................................ .................................................. ....... 33
14.2SDNS DPS Master (AS1) Configuration .......................................... .......................................... 33
14.2.1 The AS1 is configured to SDNS DPS master ....................................... ............................. 33
14.2.2 Adding DPS members ............................................ .................................................. ...... 33
14.2.3 Configuration DPS dynamic proximity search methods ........................................
................................ 33
14.3SDNS DPS Slave (AS2) configuration .......................................... ............................................ 34
14.3.1 Configuration DPS dynamic proximity search methods ........................................
................................ 34
14.4 Enable DPS detectors ............................................. .................................................. ............ 34
Chapter 15 Access Control ............................................. .................................................. .........................
35
15.1 Adding an access control list (ACL) rules ........................................ ................................ 35 catalog
2013 Teamsun
All rights reserved
VI
15.2 Configuring an access group ............................................. .................................................. .............
35
15.3 Enable Firewall ............................................... .................................................. ................... 35
Chapter 16 Advanced IPv6 Configuration ............................................ ..................................................
................ 36

16.1 Configuring IP pool .............................................. .................................................. ....................... 36


16.2 Configuring SLB ............................................... .................................................. ....................... 36
16.3 Configuration DNS64 ............................................... .................................................. .................. 36
16.4 Configuring NAT64 ............................................... .................................................. .................. 36
Chapter 17 ePolicy .............................................. .................................................. ............................. 37
17.1 Import Settings script .............................................. .................................................. ................ 37
17.2 Importing runtime script ............................................. .................................................. ............. 37
17.3 The virtual service associated with a set script ..........................................
.............................................. 38
17.4 The virtual service associated with running the script ..........................................
.............................................. 38
Chapter 18 log .............................................. .................................................. ................................ 39
18.1 common configuration ............................................... .................................................. .......................
39
18.2 Configuring the system log server ............................................. .................................................. .....
39
18.2.1 Adding a syslog server .......................................... ....................................... 39
18.2.2 Configuring the log filter ........................................... .................................................. .... 39
Chapter 19 Management Tools ............................................. ..................................................
......................... 41
19.1 View Flight Deck .............................................. .................................................. ............ 41
19.2 Configuring External Authentication .............................................. ..................................................
................ 41
19.3 Import system license ............................................. .................................................. ............. 41
19.4 Update System ............................................... .................................................. ....................... 41
19.5 configuration parameters ping command. ..................................................
.............................................. 41
19.6 shut down or reboot the system. .................................................. .............................................. 41
Appendix I Abbreviations .............................................. ..................................................
................................. 42 Chapter 1 System initial setup and configuration
2013 Teamsun
All rights reserved

1
Chapter 1 Initial setup and configuration
1.1 Overview
AS Web User Interface (WebUI) allows administrators to configure and control the main functions of AS
device, the device is designed to maximize AS
The functionality and performance.
This chapter describes the basic WebUI operations, including how to enable and access WebUI, register
the product, log on to the WebUI, as well as equipment for AS
Perform the initial configuration.
1.2 Enable WebUI via CLI
For AS devices connected via the CLI, you should make sure that the terminal software configuration is
as follows:
Setting
Simulation VT 100
9600 baud
Bits 8
Parity None
Stop bits 1
Flow control None
In the CLI interface, first prompts you to enter a user name and password (the default is "admin" and
"admin"). After a successful login, display "TS>" prompt
Character. Enter "enable" command to switch to "Enable" mode, the display "TS #" prompt. Continue to
enter the "config terminal" command to enter configuration
Mode and displays "TS (config) #" prompt.
Then, execute the following command to complete the necessary network settings and enable WebUI
features:
Command Description
ip address
{system_ifname | mnet_ifname | vlan_ifn
ame | bond_ifname} <ip_address>
<netmask>

Set system interface, MNET interface, VLAN interface or channel


Bind IP address and Subnet membrane interface.
webui ip <ip_address> set the IP address of the WebUI is.
ip route default <gateway_ip> set the default gateway and IP address.
webui {on | off} Enables or disables the WebUI feature.
Example:
TS> enable
TS # config terminal
TS (config) #ip address outside 10.3.70.100 255.255.255.0
TS (config) #webui ip 10.3.70.100
TS (config) #ip route default 10.10.0.1
TS (config) #webui on
1.3 Access WebUI
Before accessing the WebUI, make sure you have enabled WebUI through CLI, refer to Section 1.2
"Enable WebUI through CLI".
To access the WebUI, in the browser address bar to "https: // WebUI IP address: port number" format of
the input address, for example,
https://10.10.0.2:8888, and then press Enter. Chapter 1 Initial setup and configuration
2013 Teamsun
All rights reserved
2
In the dialog box, enter the user name and password, the default is "admin" and "admin". Click "OK."
AS device WebUI supports the following browsers:
IE (recommended)
Firefox
Chrome
1.4 Registration NetF Products
When you first log on to NetF product, the system will prompt you to register your product.
We recommend that you register your product immediately. Therefore, in the message box that pops up
click on the "Register Now", will display a brief inquiry box. Fill

Write a query box and click the "Register" button to complete the registration.
If you click on the "Register Later" or "temporarily Register" button, will skip the registration step and go
to the login procedure, the steps described in the following sections.
You can "Home> Basic Information" and click on "Register Now" link in the system information area, to
register your product later by choice.
1.5 Log on to the WebUI
After completing the registration process, AS device will prompt you to enter the "Enable privilege level
password." Enter the correct password (the default is empty), then click on the "Gordon
Record "button. Login successfully, WebUI home page is available, as shown below.
Figure 0-1 WebUI Home
WebUI consists of three parts: the top bar, and the configuration window sidebar.
Top bar displays the user name and host name AS equipment and other information, while providing
some common operations link. WebUI is located on the left sidebar, display
User access and each grouping capabilities. Configuration window displays detailed configuration
options, results and statistics for a specific function.
1.6 Initial Settings
This section describes how to initialize AS devices, including setting the host name, date and time, and
NTP.
1.6.1 Setting the host name
In the configuration mode, select "System Configuration> General Configuration> Host Configuration."
In the "Host Name" text box, enter the host name. Click the "Save
Change "button. New host name is effective immediately. Chapter 1, the initial system setup and
configuration
2013 Teamsun
All rights reserved
3
Note: To save the configuration to the system memory, simply click on the top bar of the "Save
Configuration" link, the link
Visible only when the configuration mode.
1.6.2 Set Date and Time
In the configuration mode, select "System Configuration> General Configuration> Date / Time."
Specified date, time and time zone. Click the "Save Changes" button.

The new setting will take effect immediately.


By default, using Greenwich Mean Time (GMT). To select another time zone, from the "mainland",
"national" and "Time Zone" drop-down list
Set the time zone.
1.6.3 Set NTP
By default, the Network Time Protocol (NTP) is disabled. When enabled NTP, AS device will
automatically synchronize the time to refer to every 15 minutes
Given NTP server.
To add an NTP server, select "System Configuration> Basic Configuration> NTP", then click "Add" in the
configuration mode to add
Action links, as shown below.
Figure 0-2 NTP settings
In the display page, enter the NTP server IP address, and select NTP server version from the drop-down
list, click "Save" to save the
Action links. Add the NTP server will appear in the "NTP Server" table.
Select "Enable NTP" check box. Click the "Save Changes" button. Display a system warning. Please read
the warning, and take appropriate action.
1.7 The basic network configuration
This section describes how to accomplish basic network configuration to make AS device is properly
connected to the network.
1.7.1 Configuring the Network Interface
In the configuration mode, select "System Configuration> Basic Network Configuration> Interface> Port"
in the "Interface Configuration" area of Port ID drop-down list
Select the interface to be configured, and other parameters needed to correctly specified, click the
"Save Changes" button. Chapter 1 Initial setup and configuration
2013 Teamsun
All rights reserved
4
1.7.2 Configuring Routing
In the configuration mode, select "System Configuration> Basic Network Configuration> Routing" in the
display interface, you can select different routing configuration subTab. Chapter 2 Advanced Network Configuration

2013 Teamsun
All rights reserved
1
Chapter 2 Advanced Network Configuration
Advanced network configuration includes NAT, IP area, IP pools and port forwarding. Detailed
configuration steps, see the following sections.
2.1 Configuring NAT
AS device supports static NAT, port-level NAT, IP-based pool of dynamic NAT. Because these types of
NAT configuration similar to the following will end
Port-level NAT for example, describes the configuration steps:
In the configuration mode, select "System Configuration> NAT". Click on "NAT Port Configuration" "Add
NAT Port" action links within the region. Port
Grade NAT configuration page is available, as shown below.
Figure 2-1 NAT port level configuration
Correctly specified parameters.
Note:
-level NAT, uncheck the "destination-based NAT" checkbox.
level, the parameters Network IP as the source IP address, that is the real IP address of
the server. This
Length of value, the parameter Netmask / Prefix should be the source IP address.
and routing gateways in the same
network segment, to be effective.
If the virtual IP address and routing gateway not in the same network segment, you must configure the
gateway routing gateway.
Click "Save" action link. NAT added will be displayed in the "NAT Port Configuration" table. Chapter 2
Advanced Network Configuration
2013 Teamsun
All rights reserved
2
2.2 Configuring IP area
This section will be how the IP zone table files into AS device, for example, describes how to configure IP
area.

2.2.1 Import IP region table file


Via FTP or HTTP, you can list the local IP zone file into AS device.
In the configuration mode, select "System Configuration> Advanced Network> IP area." In the "IP region
table" area, select Import mode, and specify the
Required parameters. Click the "Import" action link. IP region imported table will be displayed in the
adjacent table, as shown below.
Figure 2-2 IP Regional Table Import
2.3 Configuring IP pool
This section describes how to add IP pools to AS device.
In the configuration mode, select "System Configuration> Advanced Network> IP area." In the "Add IP
pool" area, specify the parameters Pool Name,
Start IP and End IP, and click "Add" action link. The added IP pool will be displayed in the "IP pool list"
table.
2.4 Configuring port forwarding
AS device supports TCP and UDP port forwarding port forwarding. This section will configure TCP port
forwarding for example, describes how to configure port forwarding.
2.4.1 Configuring TCP port forwarding
In the configuration mode, select "System Configuration> NAT> Port Forwarding> TCP / UDP". Click the
"TCP port forwarding", "add area
TCP entry "action link. Displays TCP port forwarding for adding a page, as shown below.
Figure 2-3 Adding TCP port forwarding Chapter 2 Advanced Network Configuration
2013 Teamsun
All rights reserved
3
Specify the required parameters, and then click "Save" action link. The added entries are displayed in
the table "TCP port forwarding" in the region.
Then, select "System Configuration> NAT> Port Forwarding> mode" to configure port forwarding mode.
The default mode for transparent mode, which
Next, AS device using the client IP address as the source IP address for port forwarding. AS product also
supports non-transparent mode. This mode
Next, AS device uses its management IP address as the source IP address for port forwarding.

Specific features may require advanced network configuration, for example, server load balancing (SLB).
Therefore, you need according to the actual network environment
Configuration. More configuration examples, see "NetF Application Switch User Manual." Chapter 3 Link
Aggregation
2013 Teamsun
All rights reserved
4
Chapter 3 Link Aggregation
Link aggregation refers to the number of physical links aggregated into one logical link. This chapter
describes how to bind the device by increasing the AS interface to configure
Link aggregation.
3.1 Add Binding Interface
In the configuration mode, select "System Configuration> Basic Network> Interface> Link Aggregation."
Display configuration page is used to bind the interface, as shown by the
Show.
Figure 3-1 Adding a binding interface
In the "Interface Settings" area, select from the "Binding ID" drop-down list, a binding ID, specify the
parameters Name and MTU, configure a static IP
Address (V4) + static network mask or a static IP address (V6) + parameter Prefix Length. Click the "Save
Changes" button to save the configuration.
3.2 add an interface to the binding interface
After successfully creating a binding interface, you can add the system interface to the binding interface.
In Figure 3-1, "Adding a Binding Interface" page as shown in the "tie
Given ID "drop-down list to select a binding interface, then click" Add Binding "action link. Display
interface for adding an interface to bind the pages,
As shown below.
Figure 3-2 to add an interface to the binding interface
Select an interface from the "Interface Name" drop-down link, and specify the interface type. Click
"Save" action link. The added interface will be displayed in the "borrow
Port Configuration "area of the table as needed, continue to add more interfaces through this step.
Chapter 4 Cluster
2013 Teamsun

All rights reserved


5
Chapter 4 Cluster
AS device supports two cluster types: internal interface clusters and server load balancing (SLB) virtual IP
address (VIP) clusters. Two kinds
Clusters can be carried out under the Active-Standby and Active-Active mode. Operating mode, the
configuration process is similar to the cluster. Therefore, the lower
Face to how clusters SLB VIP in Active-Standby mode for example, describes the configuration process.
4.1 Cluster SLB VIP in Active-Standby mode
Configuration examples in this section are based on the following network environments:
-Standby mode.
of VIP treatment
traffic.
AS2 will become the main station.
Specific steps cluster SLB VIP in Active-Standby mode is as follows:
Note:
onfigured according to the sections in the following order.

.
4.1.1 Configuring SLB
Premise cluster SLBVIP is completed SLB configuration. The SLB configuration process, see Chapter 6,
"Server Load Balancing (SLB)".
4.1.2 Configuring a virtual cluster ID
In the configuration mode, select "System Configuration> High Availability> Cluster> Virtual Clusters." In
the "virtual cluster list" area, click on the operating chain
Then "Add Virtual Clusters." Show configuring virtual cluster ID for the page, as shown below.
Figure 4-1 Configuring a virtual cluster ID
Specify the parameters of the virtual cluster ID (VCID) and excuses name. Click "Save" action link. Added
are displayed in the table cluster "virtual cluster
List ".

4.1.3 configure virtual cluster seize


In the configuration mode, double-click the "virtual cluster list" cluster entry. Show page for common
cluster configuration, as shown in the following figure. Chapter 4 Cluster
2013 Teamsun
All rights reserved
6
Common Settings Figure 4-2 virtual cluster
"Virtual cluster common configuration" area of the parameters specified correctly.
For AS1, select the "Enable preemption" check box, so that when you return to work status, AS1 will
become the initial master seize VIP.
For AS2, cancel the "Enable preemption" box.
For other parameters, AS1 and AS2 must have the same configuration. Once configured, click the "Save
Changes" button.
4.1.4 define the cluster VIP
In the configuration mode, select "Priority" sub-tab, shown in Figure 4-2 "virtual cluster Common
Settings" below. Display is used to configure the cluster VIP page.
In the "virtual cluster configuration VIP" area, click "Add VIP entry" action link. Display for adding VIP
page. Virtual specified parameters
IP (VIP), then click on "Save" action link. VIP added will appear in the "virtual cluster VIP Configuration"
in the region table.
4.1.5 define the priority
In the configuration mode, select "Priority" sub-tab, shown in Figure 4-2 "virtual cluster Common
Settings" below. Setting a higher priority than AS1 AS2,
Make AS1 become a cluster master.
4.1.6 Enable Cluster
By default, AS device will automatically enable the newly added cluster. To verify that the cluster is
enabled in configuration mode, select "System with
Settings> High Availability> Cluster> virtual cluster ", double-click the table" virtual cluster list "cluster
entries and select the" Enable this virtual cluster "complex
Box.
Thus, to complete Active-Standby mode SLB VIP cluster configuration. More about the cluster
configuration example, see "NetF should

With Switch User Manual. "Chapter 5, High Availability (HA)


2013 Teamsun
All rights reserved
7
Chapter 5, High Availability (HA)
This chapter describes the high availability (HA) of the basic configuration examples. In this example, the
AS equipment deployed in active / standby program, including:

Detailed configuration steps, see the following sections.


Note:
Please be configured in the following sections of the order.
5.1 Configuration Unit 1
5.1.1 Configuring SLB
Configuring HA premise is completed SLB configuration. The SLB configuration process, see Chapter 6,
"Server Load Balancing (SLB)".
5.1.2 Configure IP pool for SLB service
You need to add and set the desired SLB service IP pool. For how to add IP pools, see Section 2.3,
"Configuring IP pool." Follows
SLB services performed IP pool settings:
In the configuration mode, select "Load Balancing> Group> Group IP pool." In the "IP pool list" area,
specify the parameters group Group Name and All IP
Pools, and click "Add" action link, as shown below.
Figure 5-1 Configuring IP pool for SLB service
5.1.3 Configuring HA unit and links
In the configuration mode, select "System Configuration> High Availability> HA> common
configuration."
Click the "cell", "add" action links within the region.

After the page is displayed as shown in the following figure, specify the parameters Unit Name, IP
Address and UDP Port, and click "Save" action link. Chapter 5, High Availability (HA)
2013 Teamsun
All rights reserved
8
Figure 5-2 Adding an HA unit
The added unit will display "unit" in the region. For Unit 1, you need to add units 1 and 2.
In the "HA reliable connection" area, click the radio button to enable HA network connections, including
the main link and the secondary link, then click "Save Changes"
Button, as shown below.
Figure 5-3 Enabling HA network link
In the "HA Reliable FFO" area, click the radio button to enable HA FFO connection, and then click "Save
Changes" button as shown below.
Figure 5-4 Enabling HA FFO link
5.1.4 Configuring floating IP group
In the configuration mode, select "System Configuration> High Availability> HA> group." In the "Add
Group" area, specify the parameters of Group ID, and click
"Add" action link, as shown below.
Figure 5-5 Adding a floating IP group
Added IP group will appear in the "List" area of the table. Double-click the IP group. In the "group
floating IP" area, click "Add" action link.
After the page is displayed as shown in Figure specify the parameters IP and Port parameters, and click
"Save" action link. Chapter 5, High Availability (HA)
2013 Teamsun
All rights reserved
9
Figure 5-6 Adding a floating IP
5.1.5 Priority unit configured floating IP group
In the configuration mode, select "System Configuration> High Availability> HA> group." Double-click
the "Group List" area within the IP group.
Click the "Group Priority", "add" action links within the region. Displays the priority shown hive page, as
shown below.

Figure 5-7 hive priority


Specify the parameters Unit Name and Priority, and then click "Save" action link. For Unit 1, you need to
configure the unit 1 and unit 2 is excellent
First grade. Priority unit cell 1 should be higher than 2.
5.1.6 Configure the preemption mode
In the configuration mode, select "System Configuration> High Availability> HA> group." Double-click
the "Group List" area within the IP group.
In the "Group Editor" section, click the radio button to set parameters Preempt, then click on "Save"
action link, as shown below.
Figure 5-8 Configuring IP group preemption mode
5.1.7 Enable Group
In the configuration mode, select "System Configuration> High Availability> HA> group." Double-click
the "Group List" area within the IP group.
In the "Group Editor" section, click the radio button to set parameters Preempt, then click on "Save"
action link, as shown in Figure 5-8, "Configuring IP group robbed
Accounting model "below.
5.1.8 (Optional) Configuring the normal check conditions
In the configuration mode, select "System Configuration> High Availability> HA> HC conditions." If
necessary, check the configuration of normal conditions.
5.1.9 (Optional) Configuring failover decision rules
In the configuration mode, select "System Configuration> High Availability> HA> decisions." If necessary,
configure failover decision rules. Chapter 5, High Availability (HA)
2013 Teamsun
All rights reserved
10
5.1.10 (Optional) Enable SSF
In the configuration mode, select "System Configuration> High Availability> HA> SSF". If necessary,
configure the SSF function.
5.1.11 (Optional) Configuring synchronous mode
In the configuration mode, select "System Configuration> High Availability> HA> group." If necessary,
configure the synchronous mode.
5.1.12 (Optional) Enable HA log

In the configuration mode, select "System Configuration> High Availability> HA> common
configuration." In the "HA Log Settings" area, configure the required parameters.
5.1.13 HA enabled and configured to write to a memory
In the configuration mode, select "System Configuration> High Availability> HA> common
configuration." In the "HA common configuration" area, select "Enable" checkbox,
Then click "Save Changes" button.
To save the configuration to system memory, the "Save Configuration" action link at the top menu bar.
5.2 hive 2
5.2.1 Enable FFO link
In the configuration mode, select "System Configuration> High Availability> HA> Configuration." In the
"HA Reliable FFO" area, click on the radio button
Enabling HA FFO connection, and then click "Save Changes" button as shown below.
Figure 5-9 Enabling HA FFO link
5.2.2 configuration synchronization mode
In the configuration mode, select "System Configuration> High Availability> HA> Synchronization". Click
the radio button to enable HA Synconfig
Bootup, then click "Save Changes" button.
5.2.3 (Optional) Enabling SSF
In the configuration mode, select "System Configuration> High Availability> HA> SSF". If necessary,
configure the SSF function.
5.2.4 Enabling HA
In the configuration mode, select "System Configuration> High Availability> HA> common
configuration." In the "HA common configuration" area, select "Enable" checkbox,
Then click "Save Changes" button. Chapter 6 server load balancing (SLB)
2013 Teamsun
All rights reserved
11
Chapter 6 server load balancing (SLB)
You can use server load balancing (SLB) will load and traffic assigned to a specific server group or a
specific server. The following sections describe
Configuring basic operations of SLB.

Note:
Please be configured in the following sections of the order.
6.1 Adding a real service
Actual service is an application server for hosting different applications or services. Handle client
requests.
In the configuration mode, select the "server load balancing> Real Services> real service." Click on "add
real service entry" action link. Specify
"Adding real service entry" area within the parameters, and then click "Save" action link, as shown
below.
Figure 6-1 Adding a real service
Real added services will appear in the "SLB real service configuration" table.
6.2 Adding a server group and define its methods
In the configuration mode, select the "server load balancing> Groups> Groups." Specify the parameters
within the region, "added the group" and then click "Add" action link
As shown below.
Figure 6-2 Adding a group
The added server group will appear in the "Groups List" table. Chapter 6 server load balancing (SLB)
2013 Teamsun
All rights reserved
12
6.3 add real service to the server group
In the configuration mode, select the "server load balancing> Groups> Groups." Double-click the "list"
table within the IP group. Server group can be more
Configuration. Click the "group members", "add" action links within the region. Specify the parameters,
and then click "Save" action link, as shown below.
Figure 6-3 Adding a real service to the server group
6.4 Adding a virtual service
Virtual services typically use a VIP / port on said external client can access the virtual services to obtain
the target network resources.
In the configuration mode, select "Server Load Balancing> Virtual Services> Virtual Service." Specify the
parameters within the region, "added virtual service", then
Click the "Add" action link, as shown below.

Figure 6-4 Adding a virtual service


Virtual services added will appear in the "virtual service list" table.
6.5 virtual services associated with the server group and define strategies
In the configuration mode, select "Server Load Balancing> Virtual Services> Virtual Service." In the
"Virtual Service List" table, double-click the virtual service.
You can configure the virtual services for more. In the "associated group" area, select a server group
from the "Group Edit" drop-down list, from the "Eligible
Policies "drop-down list, select a policy, specify additional parameters, and then click" Add shown
"action link, as shown below.
Figure 6-5 virtual services associated with the server group Chapter 6 server load balancing (SLB)
2013 Teamsun
All rights reserved
13
Binding relationship will be displayed in the "association group" in the region table.
To check that you have made configuration, select "Server Load Balancing> Monitoring> Overview."
Click "Open All" action link, you can check
Detailed configuration.
NOTE: The above steps may vary depending on certain parameters of virtual service type, service type
real, normal checks
Different types and server group policy types vary. For detailed parameter descriptions, see "NetF
should
With switch CLI User's Guide. "
At this point, has completed the basic configuration of SLB. More configuration examples, see "NetF
Application Switch User Manual." Chapter 7 reverse caching proxy
2013 Teamsun
All rights reserved
14
Chapter 7 reverse caching proxy
This chapter introduces the basic configuration examples of reverse caching proxy (hereinafter referred
to as the cache function). In this example, the virtual service "virtual_MOSS"
Cache feature is enabled on. All ".jpg" AS device cache file hosts "www.xyz.com" on its cache is valid for
200,000 seconds. Detailed configuration steps, see the following sections.

Note:
Please be configured in the following sections of the order.
7.1 The basic cache settings
In the configuration mode, select "Proxy> Cache Agent> Cache Settings> Cache Settings." In the "Cache
Settings" area, specify the parameters needed
Maximum Cachable Object Size (KB) and Expiration Time (s), check the "Enable Cache" check box, and
then click
"Save changes" button, as shown below.
Figure 7-1 Configuring basic cache settings
7.2 caching feature enabled virtual services
In the configuration mode, select "Proxy> Cache Agent> Cache Settings> Cache Settings." In the "virtual
service caching proxy" area, select the required
To enable the caching feature virtual service, click on "Enable" action link, as shown below.
Figure 7-2 Enable caching feature in Chapter 7 reverse caching proxy
2013 Teamsun
All rights reserved
15
7.3 configure the cache filter
In the configuration mode, select "Proxy> Cache Agent> Cache Settings> Cache Settings." In the "Cache
filtering rule" area, specify the parameters Host
Name, Regular Expression, TTL, Cache and URL Query, and then click "Add" action link. The added filter
rules
Will be displayed in the "cache filter rule" within the area of the table, as shown below.
Figure 7-3 configure the cache filter
Note:

See "NetF application switch CLI User's Guide" in the "cache filter rule" command.
7.4 enable caching filters
In the "Cache Filtering Settings" area, check the "cache filter settings" check box, and then click "Save
changes" button to enable caching filter function

Energy, as shown below.


Figure 7-4 Enable caching filter
At this point, we completed a reverse caching proxy configuration. More configuration examples, see
"NetF Application Switch User Manual." Chapter 8 rewrite HTTP content
2013 Teamsun
All rights reserved
16
Chapter 8 rewrite HTTP content
This chapter describes a typical example of rewriting HTTP content, network environment configured as
follows:
rtual server
services "vs_http",
IP address "10.3.250.57".
AS hidden.
In order to make the end-user clicking through a link on a Web page can access to Web resources on a
real server "a.xml", AS equipment shall Web
URL address of the resource from "http: // 10.3.250.57/index.htm" rewritten as "http: //
4.4.4.130/index.htm".
Note:
Please be configured in the following sections of the order.
8.1 Configuring SLB
Configuring HTTP content rewrite the premise that the SLB configuration has been completed in order
to bind the real servers and virtual services. The SLB configuration process, the
Refer to Chapter 6, "Server Load Balancing (SLB)".
8.2 Global Enabling HTTP content rewrite
By default, although the HTTP service on the contents of each virtual rewrite functions are enabled, but
disabled globally. To make the virtual service
HTTP content rewritten to take effect, you first need to enable the feature globally.
In the configuration mode, select "Proxy> caching proxy> Content rewriting> General Settings." In the
"Content rewriting Settings" section, check the "Enable the
Yung rewrite "check box, and then click" Save changes "button, as shown below.

Figure 8-1 Global Enabling HTTP content rewrite


8.3 Enable virtual service rewrite HTTP content
In the configuration mode, select "Proxy> caching proxy> Content rewriting> General Settings." In the
"Virtual Services rewrite Settings" area, hook
Check box is selected you need to enable HTTP content rewrite virtual service, and then click the "Save
changes" button, as shown below.
Figure 8-2 Enable virtual service rewrite HTTP content
8.4 Configuring HTTP content rewrite rules
In the configuration mode, select "Proxy> caching proxy> Content rewriting> rewrite the rules." In the
"rule list" area, click "Add" Operation Chain
Pick. Show page for adding HTTP content rewrite rules. Specify parameters Type, From Pattern, To
Pattern and Flags, such as
Shown below. Chapter 8 rewrite HTTP content
2013 Teamsun
All rights reserved
17
Figure 8-3 Configuring Rewrite Rules
Note:
L URL Map", AS equipment only rewrite HTML tags
URL inside.

netF
Application Switch CLI User's Guide "in the" HTTP rewrite rules. "
Click "Save" action link. The added rewrite rules will be displayed in the "list of rules" area of the table.
8.5 configuration file type rewrite
In the configuration mode, select "Proxy> caching proxy> Content rewriting> General Settings." In the
"MIME type" area, click on the "add" operation
Link. Show rewrite the file is used to specify MIME type of the page, as shown below.
Figure 8-4 Adding a MIME type
Select "html" from the "MIME type" drop-down list, and then click the "Save" action link. MIME type will
be displayed in the newly added "MIME type

Type "area of the table. By repeating this step, you can add more MIME types.
8.6 Configuration status code
In the configuration mode, select "Proxy> caching proxy> Content rewriting> General Settings." In the
"status code" area, click "Add" action link.
Display status code for the specified page, as shown below.
Figure 8-5 u add a status code rewrite HTTP content in Chapter 8
2013 Teamsun
All rights reserved
18
Specify parameters Status code, and then click "Save" action link.
Thus, to complete the configuration of rewriting the contents of HTTP. By clicking a link on a Web page,
end users will be able to access the Web on a real server
Resources "index.html", because the device has rewritten the rules in accordance with AS HTTP content,
the HTML tags from the URL address
"Http://10.3.250.57/index.html" rewritten "http://4.4.4.130/index.html".
More configuration examples, see "NetF Application Switch User Manual." Chapter 9 DNS Cache
2013 Teamsun
All rights reserved
19
Chapter 9 DNS Cache
This chapter describes how to configure DNS cache AS device.
Note:
Please be configured in the following sections of the order.
9.1 Configuring SLB
Configuring DNS cache on the premise that has been completed SLB configuration. The SLB
configuration process, see Chapter 6, "Server Load Balancing (SLB)".
9.2 Enable DNS Cache
In the configuration mode, select "Proxy> Cache Agent> domain name resolution (DNS) cache settings."
In the "DNS cache" area, specify the parameters Min
(S) and Max (s), set the DNS cache shortest and longest validity period. Check the "Enable DNS Cache"
check box, and then

Click the "Save Changes" button, as shown below.


Figure 9-1 Enable DNS Cache
After completing the above configuration, DNS cache AS devices will be enabled. You can also manually
add a static DNS cache to specify the primary
Machine.
9.3 (optional) add a static DNS cache
In the configuration mode, select "Proxy> Cache Agent> domain name resolution (DNS) cache settings."
In the "DNS cache static entry" area refers to
Given parameters Host Name and Host IP. Click the "Add" action link. Host added will be displayed in the
"domain name resolution (DNS) cache list."
Within the area of the table, as shown below.
Figure 9-2 Adding DNS cache host
Thus, the configuration of the DNS cache is completed. More configuration examples, see "NetF
Application Switch User Manual." Chapter 10 HTTP Compression
2013 Teamsun
All rights reserved
20
Chapter 10 HTTP Compression
This chapter describes how to configure HTTP AS device compression.
Note:
Please be configured in the following sections of the order.
10.1 Global Enabling HTTP Compression
In the configuration mode, select "Proxy> Compression> Compression Settings." In the "HTTP
Compression Settings" area, select "Enable Compression" checkbox. Point
Click the "Save Changes" button, as shown below:
Figure 10-1 HTTP compression is enabled globally
10.2 HTTP compression enabled virtual services
In the configuration mode, select "Proxy> Compression> Compression Settings." In the "HTTP
compression settings" area from the "HTTP / HTTPS virtual service"
Drop-down list, select a virtual service, click the "Enable VS compression" action link. HTTP compression
enabled virtual service will appear in the table

"Has been activated HTTP / HTTPS virtual services", the following figure.
10-2 Enabling HTTP virtual service map compression
10.3 Configuring Advanced HTTP Compression
If HTTP compression is enabled, by default, AS equipment following MIME types will be compressed all
browsers:

To enable other MIME types of compression, do the following:


In the configuration mode, select "Proxy> Compression> Compression type." In the "compression MIME
type" area, specify the desired 'browser type and
MIME type "parameter. Click" Add MIME type "action link. Browser type, and MIME type newly added
to the display in the" visit
Browser supported MIME compression type "table, as shown below. Chapter 10 HTTP Compression
2013 Teamsun
All rights reserved
Twenty one
Figure 10-3 Configuring Advanced HTTP Compression
10.4 Configuring URL-Exclude HTTP compression rules
In the configuration mode, select "Proxy> Compression> Compression Settings." In the "compression
exceptional" regions "wildcard expressions, and specify the desired
HTTP / HTTPS virtual service "parameter. Click" Add "action link. Newly added virtual services and
wildcard expression to be displayed in the" URL
Exclude List "table, as shown below.
Figure 10-4 Configuring URL-Exclude HTTP compression rules
"Compression exception" rules to determine the "HTTP Compression" of the NA scenario. For example,
the configuration "v1" and "* .jpg" right time (as shown above), virtual servers
Services "v1" client requests a URL string "* .jpg" "end, even if you enable HTTP compression, the text
does not respond to the same compression.
This completes the HTTP compression configuration. More configuration examples, see "NetF
Application Switch User Manual." Chapter 11 Secure Sockets Layer (SSL)
2013 Teamsun

All rights reserved


Twenty two
Chapter 11 Secure Sockets Layer (SSL)
This chapter describes how to configure a basic SSL acceleration devices on the AS.
Note:
Please be configured in the following sections of the order.
11.1 Creating an SSL virtual service
Creating SSL virtual service SLB virtual prerequisite is that you have created the service. For how to
create SLB virtual service, see
Chapter 6, "Server Load Balancing (SLB)".
SSL virtual services are not only connected with the SLB virtual service, but also as a communication
connection between the browser and the AS device SSL server. For
Creating SSL virtual service, please do the following:
In the configuration mode, select "Proxy> SSL> Virtual Service." In the "SSL virtual service" area, click
"Add" action link to display "Tim
Plus an SSL virtual service "page, as shown below.
Figure 11-1 Creating an SSL virtual service
Specify the required parameters, and then click "Save" action link. The newly added SSL virtual service
will be displayed in the "SSL virtual service" area table.
11.2 SSL virtual service certificate application
If you do not hold a certificate and key pair, perform the following operations generate CSR SSL virtual
services to apply for a Certificate Authority (CA)
Issued certificates.
In the configuration mode, select Agent> SSL> virtual services. "In" SSL virtual service "area, doubleclick" SSL virtual service "to display the" Generate
CSR SSL virtual services "page, as shown below. Chapter 11 Secure Sockets Layer (SSL)
2013 Teamsun
All rights reserved
Twenty three
Figure 11-2 to generate a new CSR / Key

Note: You must select "Export private key" parameter "Yes", and set a password to export the private
key.
Other parameters are specified correctly, then click "Apply" action link. AS will create a CSR and private
key to display the SSL virtual services, as shown below
Shown. Chapter 11 Secure Sockets Layer (SSL)
2013 Teamsun
All rights reserved
Twenty four
Figure 11-3 generated CSR
After the CSR is created, using the public-private key pair generated public key. You need to "existing
certificate request" throughout the text sent within the region
Sent to the CA, for signature. CA through these text lines to speed up your certificate request.
11.3 Importing SSL keys and certificates virtual services
First, you must enter the key, and then enter the certificate, there is only one exception: You enter the
SSL certificate and key in iPlanet servers
Before, first enter the certificate.
11.3.1 Importing SSL virtual service key
In the configuration mode, select "Proxy> SSL> Virtual Service." In the "SSL virtual service" area, doubleclick "SSL virtual service." In the display page
Surface, select "Virtual Services CSR / Cert / Key> CSR / Key". The entire text of "exportable SSL private
key" area for backup.
Select "Virtual Services CSR / Cert / Key> Import Cert / Key". In the "SSL Key" area, select "Manual
Input", paste the copied to "SSL
Server private key "text box, and specify the" password protect "parameter. Click" Import "action link to
import the key.
11.3.2 Importing SSL certificate virtual services
In the configuration mode, select "Proxy> SSL> Virtual Service." In the "SSL virtual service" area, doubleclick "SSL virtual service." In the display page
Surface, select "Virtual Services CSR / Cert / Key> Import Cert / Ke". In the "SSL server certificate" area,
select FTP or by hand
Dynamic input, import a certificate from a local, then click on the "Import" action link to import the
certificate.

After a successful import the certificate, the certificate status in the "SSL server certificate" area shown
in the table is invalid. To enable the certificate, click
"Activate" action link, as shown below.
Figure 11-4 Certificate Status
11.4 Enabling SSL virtual services
In the configuration mode, select "Proxy> SSL> Virtual Service." In the "SSL virtual service" area, doubleclick "SSL virtual service." In the display page
Surface, select "Virtual Service Settings> Basic Settings." In the "SSL Basic Settings" area, select "Enable
SSL" check box, and then click on the "Paul
Save changes "button.
11.5 Creating an SSL background service
Creating SSL virtual service prerequisite is that you have created SLB entity services. How to create SLB
entity for service, see Chapter 6
Chapter "Server Load Balancing (SLB)".
SSL SLB background service is not only connected with the actual service, but also as a connected device
to communicate with the backend server AS SSL client. For
Creating SSL background service, please do the following:
In the configuration mode, select "Proxy> SSL> background service.." In the "SSL background services"
area, click "Add" action link to display "Tim
Plus an SSL Background services "page, as shown below. Chapter 11 Secure Sockets Layer (SSL)
2013 Teamsun
All rights reserved
25
Figure 11-5 Creating an SSL background service
Specify the required parameters, and then click "Save" action link. The newly added SSL background
service will be displayed in the "SSL background services" area of the table.
11.6 Enabling SSL background service
In the configuration mode, select "Proxy> SSL> background service." In the "SSL background services"
area, double-click "SSL background services." In the display
Page, select the "Background Services Settings> Basic Settings." In the "SSL Basic Settings" area, select
"Enable SSL" check box, and then click
"Save Changes" button.

This completes the basic configuration of SSL acceleration. More configuration examples, see "NetF
Application Switch User Manual." Chapter 12 Quality of Service (QoS)
2013 Teamsun
All rights reserved
26
Chapter 12 Quality of Service (QoS)
This chapter describes how to configure QoS on the AS device.
Note:
Please be configured in the following sections of the order.
12.1 specify the QoS interface
In the configuration mode, select "QoS Configuration> QoS> QoS list." Click on the "Add QoS entry"
action link. The "Add a
QoS entry "page, as shown below.
Figure 12-1 Adding a QoS entry
In "QoS Record Type" drop-down list, select the "interface." The "specified QoS Interface" page, as
shown below.
Figure 12-2 QoS interface specified
Required parameters specified correctly. Click "Save" action link. Will display "QoS Configuration> QoS>
QoS List" page, to illustrate a tree knot
Structure of the QoS configuration, as shown below.
Figure 12-3 QoS configuration
12.2 Creating a QoS queue
In Figure 12-1, "Adding a QoS entry" on page shown, select from the "QoS Record Type" drop-down list
"with the Queue" will show "Create a
A QoS queue root "page, as shown below. Chapter 12 Quality of Service (QoS)
2013 Teamsun
All rights reserved
27
Figure 12-4 Creating a QoS queue
Correctly specified parameters. Click "Save" action link. Displays "QoS Configuration> QoS> QoS entry"
page tree structure to illustrate

QoS configuration, as shown below.


Note:
You can repeat this step as necessary to add subqueues root queue.
12.3 define a QoS rule
Figure 12-1 on the "Add a QoS entry" page shows, select the "four filter rules" from "QoS Record Type"
drop-down list will display "setting
Defined QoS rules "page, as shown below.
Figure 12-5 Define a QoS rule Chapter 12 Quality of Service (QoS)
2013 Teamsun
All rights reserved
28
Required parameters specified correctly. Click "Save" action link. Will display "QoS Configuration> QoS>
QoS List" page, to illustrate the tree structure
The QoS configuration, as shown in Figure 12-3 "QoS Configuration" below.
12.4 Enable QoS
By default, disable QoS. To enable QoS on the interface, do the following:
In the configuration mode, select "QoS Configuration> QoS> Interface." Configuring QoS interface will
appear in the "QoS interface operation" table, as shown below
Shown.
Figure 12-6 QoS enabled
To enable QoS on the interface in accordance with specific instructions, select the "Enabled" check box
and then click "Save Changes" button. You can QoS in "
Configuration> Check QoS enabled on QoS> QoS List "page.
This completes the QoS configuration. More configuration examples, see "NetF Application Switch User
Manual." Chapter 13 Link Load Balancing (LLB)
2013 Teamsun
All rights reserved
29
Chapter 13 Link Load Balancing (LLB)
The chapter on how to configure the LLB AS device to balance outbound traffic between two ISP, for
example, to describe the AS LLB configuration.

Configuration examples in this section are based on the following network environments:
al network.

13.1 Configure the IP address


AS device through port 1 and ISP (ISP1 and ISP2), connecting with the internal network through port 2.
You need to assign IP addresses by ISP1 on the same network segment to port 1, through an internal
network segment will be assigned the same IP address to port 2.
Related detailed steps, refer to Section 1.7.1 "Configuring the network interface."
13.2 Configuration MNET
You also need to assign IP addresses on the same network segment to port 1 through ISP2. Detailed
steps are as follows:
In the configuration mode, select "System Configuration> Basic Network Configuration> Interface>
physical port." In the "MNET Configuration" area, click "Add
MNET "action link." Configure MNET "page, as shown below.
Figure 13-1 Configuration MNET
By ISP2 the same segment of the IP address is set to "static IP address" parameter and other parameters
are specified correctly. Click "Save" action link.
MNET newly added entries will be displayed in "MNET Configuration" area table.
13.3 Configuration LLB link
13.3.1 added to bind to the LLB link ISP1 and ISP2
In the configuration mode, select "Advanced load balancing> Link Load Balancing> Outbound Settings."
In the "LLB link route" area, click on the "add
Plus "action link would display the" Add LLB links "page, as shown below. Chapter 13 Link Load Balancing
(LLB)
2013 Teamsun
All rights reserved
30
Figure 13-2 Adding an LLB link

Properly specified parameters to configure a bind to the LLB ISP1 link, then click "Save & add another"
action link to add a
Bound to ISP2 the LLB link.
Note:

Port 1 is connected to ISP1 / ISP2 through, and gateway IP address to ISP1 / ISP2 gateway.
andwidth Threshold" parameter indicates the maximum band "Gateway IP" parameter specifies the
gateway allowed
Wide. If the first 13.4 "Configuring Eroutes" in the configuration corresponding Eroute, lower priority
than
Section 13.3.5 section "Configuring Bandwidth Priority" configured bandwidth priority, then this domain
Values to take effect.
13.3.2 configure additional LLB health check
In the configuration mode, select "Advanced load balancing> Link Load Balancing> outbound settings"
within the LLB link route "area, double-click a link in
Show page "link health check" area, click "Add" action link. Specify parameters to configure additional
LLB health check.
13.3.3 Enabling LLB health check
In the configuration mode, select "Advanced load balancing> Link Load Balancing> outbound settings."
In the "LLB Link Global Settings" area, check the "Enable
Link Health Check "box. Click the" Save Changes "button.
13.3.4 Configuring load balancing methods
In the configuration mode, select "Advanced load balancing> Link Load Balancing> outbound settings."
In the "LLB Link Global Settings" area from the "Methods"
Drop-down list, select "load balancing methods." Click the "Save Changes" button.
13.3.5 Configuring bandwidth priority
In the configuration mode, select "Advanced load balancing> Link Load Balancing> outbound settings."
In the "LLB Link Global Settings" area, specify "Bandwidth
Priority "parameter. Click the" Save Changes "button.
13.4 Configuration Eroutes
In the configuration mode, select "System Configuration> Basic Network Configuration> Routing> RTS /
IPflow / Eroutes". Click "Eroutes" "Tim area

Plus "action link would display the" Add Eroute "page, as shown below. Chapter 13 Link Load Balancing
(LLB)
2013 Teamsun
All rights reserved
31
Figure 13-3 Adding a Eroute
Correctly specified parameters, add Eroutes to specify links to flow through ISP1 or ISP2 transfer from
the internal network to the Internet.
In addition, you must add a Eroute, to transmit traffic does not match any of the other Eroute. For
Eroute, its source IP address,
Source netmask / prefix length, source port, destination IP address, destination netmask / prefix length
and destination ports are 0s. Furthermore, it
Agreement can be "any one" and gateway can be ISP1 or ISP2 gateway.
13.5 Configuring NAT
For the internal network IP address into ISP1 or ISP2 same segment of the IP address, you need to
configure NAT for ISP1 and ISP2. Phase
For more operating procedure, see Section 2.1, "Configuring NAT".
13.6 Enabling IPflow and RTS
In the configuration mode, select "System Configuration> Basic Network> Routing> RTS / IPflow /
Eroutes". In the "RTS Settings and IPflow
Settings "in the region, correctly specified parameters. Click the" Save Changes "button.
This completes the LLB AS configuration on the device, in order to balance the outbound traffic between
two ISP. More configuration examples, see "NetF
Application Switch User Manual. "Chapter 14 global server load balancing (GSLB)
2013 Teamsun
All rights reserved
32
Chapter 14 global server load balancing (GSLB)
"Global Server Load Balancing (GSLB)" also known as "intelligent DNS (SDNS)". The chapter on how to
configure the AS SDNS moving equipment
State sensing system (DPS) for example, describe GSLB configuration AS device.
Configuration examples in this section are based on the following network environments:

detectors on the network to form a SDNS DPS.

qualified server as its DPS


Detector.
The general configuration 14.1AS1 and AS2
Note:

must be the same on the AS1 and


AS2.
14.1.1 Adding CDN website
In the configuration mode, select "Advanced load balancing> Intelligent DNS> Topology> website." In
the "SDNS Site Settings" area, click on the "add
Add site entry "action link. Displays the" Add a CDN Site "page, as shown below.
Figure 14-1 Adding a CDN website
Correctly specified parameters, to add a CDN website. Click "Save & add another" action link to add CDN
website 2.
14.1.2 Adding DPS probe
In the configuration mode, select "Advanced load balancing> Intelligent DNS> DPS> SDNS DPS set." In
"SDNS DPS detector" area
Inside, click on the "Add" action link. The "Add a DPS probe" page, as shown below.
Figure 14-2 Adding a DPS probe
Correctly specified parameters, to add a DPS probe. Click "Save & add another" action link to add DPS
detector 2. Chapter 14 global server load balancing (GSLB)
2013 Teamsun
All rights reserved
33
14.1.3 other general settings
14.1.3.1 Enable SDNS
In the configuration mode, select "Advanced load balancing> Intelligent DNS> common configuration."
In the "Common Settings" area, select "SDNS Status"

Check box, and specify "SDNS reporting interval and SDNS heartbeat interval" parameter. Click the "Save
Changes" button.
14.1.3.2 Enabling SDNS DPS
In the configuration mode, select "Advanced load balancing> Intelligent DNS> DPS> SDNS DPS set." In
the "SDNS DPS Settings" area,
Specify "Query Interval, Send Interval, History Scale" parameter and select "SDNS DPS" box. Click the
"Save Changes"
Button.
14.2SDNS DPS Master (AS1) Configuration
14.2.1 The AS1 is configured as master SDNS DPS
14.2.1.1 Configuration SDNS Statistics
In the configuration mode, select "Advanced load balancing> Intelligent DNS> common configuration."
In the "Common Settings" area, select "SDNS Statistics
And SDNS Local Statistics "checkbox. Click the" Save Changes "button.
14.2.1.2 Enabling SDNS DPS master
In the configuration mode, select "Advanced load balancing> Intelligent DNS> DPS> SDNS DPS set." In
"SDNS DPS Settings" area
Inside, select "SDNS DPS Master" checkbox. Click the "Save Changes" button.
14.2.2 Adding DPS members
In the configuration mode, select "Advanced load balancing> Intelligent DNS> DPS> SDNS DPS set." In
"SDNS DPS members' area
Inside, the "members of the IP address" parameter is set to AS1 IP address. Click the "Add" action link.
Members of the newly added entries will be displayed in "SDNS
DPS members' area of the table, as shown below.
Figure 14-3 Adding a DPS member
Repeat this step, the AS2 add to DPS members.
14.2.3 Configuration DPS dynamic proximity search methods
In the configuration mode, select "Advanced load balancing> Intelligent DNS> DPS> SDNS DPS set." In
the "SDNS DPS Settings" area,
Choose a method from the "Method" drop-down list. Click the "Save Changes" button. Chapter 14 global
server load balancing (GSLB)
2013 Teamsun

All rights reserved


34
14.3SDNS DPS Slave (AS2) configuration
14.3.1 Configuration DPS dynamic proximity search methods
In the configuration mode, select "Advanced load balancing> Intelligent DNS> DPS> SDNS DPS set." In
"SDNS DPS Settings" area
Inside, select a method from the "Method" drop-down list. Click the "Save Changes" button.
14.4 Enable DPS probe
You need to perform the required operation on the DPS detectors to enable.
If DPS detectors for AS device, do the following:
In the configuration mode, select "Advanced load balancing> Intelligent DNS> DPS> Local detector." In
the "Add a SDNS DPS local detection
Device "in the region, correctly specified parameters. Click" Add "action link.
This completes the AS devices SDNS DPS configuration. More configuration examples, see "NetF
Application Switch User Manual." Chapter 15 Access Control
2013 Teamsun
All rights reserved
35
Chapter 15 Access Control
This section describes how to configure the firewall on the AS device.
15.1 Adding an access control list (ACL) rules
In the configuration mode, select "System Configuration> Access Control> Firewall." In the "Access List
Configuration" area, click "Add" action link.
The "Configure an ACL rule" page, as shown below.
Figure 15-1 Adding an ACL rule
Correctly specified parameters. Click "Save" action link. Newly added ACL rule will appear in the "Access
List Configuration" area table.
Repeat this step to add more ACL rules based on the actual situation.
15.2 Configuring an access group
In the configuration mode, select "System Configuration> Access Control> Firewall." In the "Access
Group Configuration" area, select from the "Interface" drop-down list

An interface, specify "access list ID" parameter, then click "Add" action link. The newly added access
group will be displayed in the "Access Group Configuration" area
Within a table, as shown in Fig.
Figure 15-2 Adding an access group
For the configuration shown on the map in terms of, ID for the ACL rule 100 are applicable to port 1, and
the ID of rule 200 are applicable to port 2.
15.3 Enable Firewall
In the configuration mode, select "System Configuration> Access Control> Firewall." In the "Firewall
state" area, select the appropriate check boxes to
Firewall will apply to the interface, ie, ACL rules apply to the interface. Click the "Save Changes" button.
This completes the basic firewall configuration AS devices. More configuration examples, see "NetF
Application Switch User Manual." Chapter 16 Advanced IPv6 Configuration
2013 Teamsun
All rights reserved
36
Chapter 16 Advanced IPv6 Configuration
AS function of the characteristics of the device to provide broad support for IPv6 addressing. The
chapter on how to configure DNS64 and NAT64 example to describe AS
Device support for IPv6.
Note:
Please be configured in the following sections of the order.
16.1 Configuring IP pool
Select "System Configuration> Advanced Network> IP Pool." In the "Add IP Pool" area, specify the
required parameters, and then click "Add" action link
Save the configuration.
16.2 Configuring SLB
In the configuration mode, select the "server load balancing> Real Services> real service." In the "SLB
real service configuration" area, click "Add
Real service entry "action link in the page shown in" Adding real service entry "area, specify the desired
parameters and click" Save "to save the
Configuration.

In the configuration mode, select the "server load balancing> Groups> Groups." In the "Add Group"
area, specify the desired parameters and click "Add" Operation Chain
Pick. In the "list", double-click the newly added group. In the "group members" area displays the page,
click "Add" action link. In the page shown
"Adding group members" area, specify the desired parameters and click "Save" to save the
configuration.
In the configuration mode, select "Server Load Balancing> Virtual Services> Virtual Service." In the "Add
Virtual Services" area, specify the required parameters and
Click the "Add" action link. In the "Virtual Service List", double-click the newly added virtual services. In
the "associated group" area of the page shows, the virtual
Proposed service and the "default" or "backup" strategy associated and click "Add" action link.
16.3 Configuration DNS64
In the configuration mode, select "System Configuration> NAT> V4 / V6 NAT". In the "DNS64
Configuration" area, specify the desired parameters and click "set
Set "action link to save the configuration.
Figure 16-1 Configuration DNS64
16.4 Configuring NAT64
In the "NAT64 Configuration" area, specify the desired parameters and click the "Settings" link operation
to save the configuration.
Figure 16-2 Configuring NAT64
This completes the configuration of AS DNS64 and NAT64 device. More configuration examples, see
"NetF Application Switch User Manual." Chapter 17 ePolicy
2013 Teamsun
All rights reserved
37
Chapter 17 ePolicy
This chapter describes the basic configuration example ePolicy. Detailed configuration steps, see the
following sections.
Note:
Please be configured in the following sections of the order.
17.1 Import Settings script

Configuring ePolicy prerequisite is that you have to create a SLB virtual service. How to create a virtual
service for SLB, see Chapter 6, "clothes
Server load balancer (SLB) ".
In the configuration mode, select "Server Load Balancing> Virtual Services> Virtual Service." In the
"Virtual Service List" table, double-click the virtual service.
You can configure the virtual services for more. Choose "ePolicy Script" tab and display "Configuring
ePolicy" page, as shown below.
Figure 17-1 Configuring ePolicy
In the "Import ePolicy setup script" area, select import via HTTP or FTP choose to run the script from a
local file, specify "Local Man
Pieces path / HTTP URL / FTP URL and set the script name "parameter, then click on the" Import "action
link to import the run script.
17.2 Importing runtime script
In Figure 17-1, "Configuring ePolicy" "Import ePolicy Run Script" within the area shown on the page,
select HTTP or FTP from the local paper
Select Import pieces run the script, specify "local file path / HTTP URL / FTP URL" and "Set script name"
parameter, and click "Import" Fuck
For links to import run the script. Chapter 17 ePolicy
2013 Teamsun
All rights reserved
38
17.3 The virtual service associated with a set script
Page shown in "Configuring ePolicy" "VS run association Script" section, select "All Run Script" area
setup script in Figure 17-1,
And click the button to make virtual services associated with the setup script.
17.4 The virtual services associated with running a script
Page shown in "Configuring ePolicy" "VS run association Script" area, select "all run the script" run script
within the region in Figure 17-1,
And click the button to make virtual services associated with running the script. Chapter 18 Logs
2013 Teamsun
All rights reserved
39

Chapter 18 Logs
This section describes how to configure the AS device basic logging.
18.1 Common Configuration
In the configuration mode, select "Administrative Tools> Figure> Log> General." In the "Common
Settings" area, check the "Enable universal" check box, and
Other parameters are correctly specified. Click the "Save Changes" button.
Note: For Level parameter, which rank below the specified level of logging will not transfer to the log
server.
18.2 Configuring the system log server
18.2.1 Adding a syslog server
In the configuration mode, select "Administrative Tools> Graphics> Log> System Log Server." In the
"Remote Syslog Server Configuration" in the region,
Click on the "Add Log Server" action link. The "Add a syslog server" page, as shown below.
Figure 18-1 Adding a syslog server
Correctly specified parameters. Click "Save" action link. The newly added syslog server will be displayed
in the "Remote Log Server Configuration" area table
The.
18.2.2 Configuring the log filter
In the configuration mode, select "Administrative Tools> Graphics> Log> System Log Server." In the
"HTTP log filter configuration" in the region,
Click the "Add" action link. The "Add a log filter" page, as shown below.
Figure 18-2 Adding a log filter entry
Correctly specified parameters. Click "Save" action link. The newly added log filter will appear in the
"HTTP log filter configuration" area table
The. Chapter 18 Logs
2013 Teamsun
All rights reserved
40
Note:
Log filter can not be configured as a 0 in the ID system log host.

This completes the basic configuration of AS devices. More configuration examples, see "NetF
Application Switch User Manual." Chapter 19 Management Tools
2013 Teamsun
All rights reserved
41
Chapter 19 Management Tools
This chapter describes how to configure the AS device management tools.
19.1 View Flight Deck
AS device provides a graphical interface, easy to use statistics to monitor the system and get a
comprehensive picture of an AS equipment operating status.
The graphical interface is called Flight Deck.
In the configuration mode, select "Home> Flight Deck".
In the "System Statistics" area, the normal display server statistics in real-time systems, request rate,
number of concurrent connections, caching, rate adaptation and
System usage.
In the "Figures 1 and 2" area, offers two configurable charts for real-time monitoring AS equipment
operating statistics.
To view the graph statistics, you must pass the "Home> Basic Information" select "SNMP Enabled" check
box or through the "Common Settings" area
The "Administrative Tools> Figure> SNMP> generic" designated "Enable SNMP" parameter to enable
SNMP.
For security reasons, we strongly recommend to change the default SNMP community string to avoid
interception system information. To change the default SNMP
Community string in the "universal or even" area "Administrative Tools> Figure> SNMP> Universal" to
specify a new "community string" parameter.
19.2 Configuring External Authentication
In the configuration mode, select "Administrative Tools> System> Access Control." In the "Manage AAA
Settings" area, correctly specified parameters. Point
Click the "Save Changes" button.
19.3 import license system
In the configuration mode, select "Administrative Tools> System> Licenses." In the "Import License"
area, specify the "license code" parameter. According to

Seeking Click "Import With Validation or Import Without Validation" action link.
19.4 Update System
In the configuration mode, select "Administrative Tools> System> Update." In the "System Upgrade"
area, by using a local file or URL selection
Update the system. Then, specify "local host file path or URL" parameter and click "Apply Update" action
link.
19.5 configuration parameters ping command.
In the configuration mode, select "Administrative Tools> Troubleshooting> Tools." In the "PING" area,
specify the IP address or host name and gateway parameters,
Then click the "Ping" button to send a network connection in response to requests.
Note: The "Gateway" is an optional parameter. After being designated by the LLB link sent via this
parameter determines ping
Data packet to the host.
19.6 shut down or reboot the system.
In the configuration mode, select "Administrative Tools> System Administration> Shutdown / Restart."
In the "System Control" area, as required to select "Restart or
Off "operation.
More examples of configuration management tools, see "NetF Application Switch User Manual."
Appendix I Abbreviations
2013 Teamsun
All rights reserved
42
Appendix I Abbreviations
Spelling acronyms
AAA authentication, authorization, and accounting
ACL access control list
CA Certificate Authority
CDN content distribution network
CLI Command Line Interface
CPU central processor
CRL Certificate Revocation List

CSR Certificate Signing Request


DNS Domain Name Service
DPS Dynamic proximity search system
FTP File Transfer Protocol
GMT Greenwich Mean Time
GSLB Intelligent DNS technology (also known as SDNS).
HC normal check
HTML HTML
HTTP Hypertext Transfer Protocol
HTTPS HyperText Transfer Protocol Secure Sockets layer
ICMP Internet Control Message Protocol
IP Internet Protocol
ISP Internet Service Provider
LLB link load balancing
Local DNS local domain name service
MIME Multipurpose Internet Mail Extensions
MNET multiple networks
MTU Maximum Transmission Unit
NAT Network Address Translation
QoS Quality of Service
SDNS Intelligent DNS (SDNS, also known as GSLB)
SLB Server Load Balancing
SSH Secure Shell protocol
SSL Secure Sockets Layer
TCP TCP
TCPS has an SSL TCP
Terminal emulation protocol TELNET TCP / IP environment.
TTL survival time
UDP User Datagram Protocol

URL Uniform Resource Locator


VCID virtual ID cluster
VIP Virtual IP
VLAN Virtual LAN
WebUI Web User Interface