Nortel-networks WEB OS 212777 Manual de usuario Pagina 418
- Pagina / 482
- Tabla de contenidos
- MARCADORES
Valorado. / 5. Basado en revisión del cliente
Web OS 10.0 Application Guide
418
Chapter 15: Content Intelligent Switching
212777-A, February 2002
Configuring a Layer 7 Deny Filter
1. Before you can configure Layer 7 deny filter, ensure that the switch has already been con-
figured for basic switch functions:
n Assign an IP address to each of the real servers in the server pool.
n Define an IP interface on the switch.
For information on how to configure your network for the above tasks, see Chapter 6, “Server
Load Balancing.”
2. Define the virus string patterns or offending HTTP URL request to be blocked.
3. Apply and save the configuration.
4. Identify the IDs of the defined strings.
Number of entries: four
5. Select the filter and enable the filter action to deny.
6. Enable URL parsing.
>> # /cfg/slb/layer7/slb/add ida (Define the code red virus string)
>> Server Loadbalance resource# add %c1%9c (Define the code blue virus string)
>> Server Loadbalance resource# add %c0%af(Define the code blue virus string)
>> Server Loadbalance resource# add playdog.com(Define the offending URL
request)
>> Server Loadbalance resource# cur
ID SLB String
1 ida
2 %c1%9c
3 %c0%af
4 playdog.com
>> # /cfg/slb/filt 1 (Select the filter)
>> Filter 1 # action deny (Set the filter action to deny)
>> Filter 1 # adv
>> Filter 1 Advanced# urlp ena (Enable URL parsing)
- Web OS Switch Software 1
- 10.0 Application Guide 1
- 212777-A, February 2002 2
- Web OS 10.0 Application Guide 10
- Contents 10
- Contents 11
- Glossary 471 12
- Index 475 12
- Figures 14
- Figures 15
- Tables 18
- New Features 19
- Who Should Use This Guide 21
- Preface 22
- Typographic Conventions 23
- Contacting Us 24
- Basic IP Routing 27
- IP Routing Benefits 28
- Routing Between IP Subnets 28
- Chapter 1: Basic IP Routing 29
- Chapter 1: Basic IP Routing 30
- Example of Subnet Routing 31
- Route Cache 35
- Border Gateway Protocol (BGP) 36
- DHCP Relay 41
- CHAPTER 2 43
- VLAN ID Numbers 44
- VLAN Tagging 44
- VLANs and the IP Interfaces 45
- Chapter 2: VLANs 46
- Chapter 2: VLANs 47
- Multiple Spanning Trees 51
- VLANs and Default Gateways 58
- Configuring the Local Network 60
- VLANs and Jumbo Frames 63
- Figure 2-7 Jumbo Frame VLANs 64
- Aggregate Port Trunk 65
- Statistical Load Distribution 66
- Built-In Fault Tolerance 66
- Port Trunking Example 67
- OSPF Overview 69
- ABR = Area Border Router 70
- ASBR = Autonomous System 70
- Boundary Router 70
- Types of OSPF Routing Devices 71
- Neighbors and Adjacencies 72
- The Link-State Database 72
- The Shortest Path First Tree 73
- OSPF Implementation in Web OS 74
- Defining Areas 75
- Interface Cost 77
- Summarizing Routes 77
- Default Routes 78
- Virtual Links 79
- Router ID 80
- Authentication 80
- Chapter 4: OSPF 82
- OSPF Configuration Examples 83
- Example 1: Simple OSPF Domain 84
- Example 2: Virtual Links 86
- Other Virtual Link Options 89
- Example 3: Summarizing Routes 90
- Stub Area 92
- Backbone 92
- 5. Define the backbone 97
- 6. Define the stub area 97
- Verifying OSPF Configuration 98
- Secure Switch Management 101
- Requirements 102
- Internet 103
- Web Switch User Accounts 105
- Secure Shell and Secure Copy 107
- SCP Services 108
- RSA Host and Server Keys 109
- Radius Authentication 110
- SecurID Support 110
- Configuring SSH/SCP 111
- 212777-A, February 2002 112
- Port Mirroring 113
- Part 2: Web Switching 115
- Fundamentals 115
- Web Switching Fundamentals 116
- Server Load Balancing 117
- Network Topology Requirements 122
- IP Address Ranges Using imask 129
- Configuring Multiple Services 130
- Minimum Misses 131
- Least Connections 132
- Round Robin 132
- Response Time 133
- Bandwidth 133
- Weights for Real Servers 134
- Backup/Overflow Servers 135
- Extending SLB Topologies 136
- Mapping Ports 139
- Load Balancing Metric 141
- Direct Server Interaction 142
- Layer 2 Switch 143
- Web Switch 143
- Server farm 143
- Using Proxy IP Addresses 144
- Monitoring Real Servers 145
- Normal Request 146
- DoS SYN Attack 146
- Configuring Delayed Binding 148
- Detecting SYN Attacks 148
- IP Server Load Balancing 149
- FTP Server Load Balancing 150
- Preconfiguration Tasks 152
- RTSP Implementation 156
- Using RADIUS Snooping 160
- Configuring RADIUS Snooping 161
- WAN Link Load Balancing 166
- Filtering 169
- Overview 170
- Stacking Filters 172
- Overlapping Filters 172
- The Default Filter 173
- VLAN-based Filtering 174
- Optimizing Filter Performance 176
- Filter Logs 176
- IP Address Ranges 178
- TCP Rate Limiting 179
- Chapter 7: Filtering 181
- Real serversClients 183
- Filter-based Security 185
- For UDP: 189
- Similarly, for TCP: 189
- Network Address Translation 191
- Configuring Static NAT 192
- Dynamic NAT 193
- Configuring Dynamic NAT 194
- FTP Client NAT 195
- Matching TCP Flags 197
- Matching ICMP Message Types 201
- Chapter 7: Filtering 202
- Application Redirection 203
- Client Switch 205
- RTSP Web Cache Redirection 211
- IP Proxy Addresses for NAT 213
- Excluding Noncacheable Sites 215
- Virtual Matrix Architecture 217
- Health Checking 219
- Chapter 10: Health Checking 220
- Real Server Health Checks 221
- DSR Health Checks 222
- Link Health Checks 223
- TCP Health Checks 224
- ICMP Health Checks 224
- Script-Based Health Checks 225
- Script Format 226
- Script Configuration Examples 227
- Scripting Guidelines 227
- HTTP Health Checks 231
- UDP-Based DNS Health Checks 233
- FTP Server Health Checks 234
- POP3 Server Health Checks 235
- SMTP Server Health Checks 236
- IMAP Server Health Checks 237
- NNTP Server Health Checks 238
- RADIUS Server Health Checks 239
- WAP Gateway Health Checks 240
- WSP Content Health Checks 241
- WTLS Health Checks 242
- LDAP Health Checks 243
- ARP Health Checks 245
- Failure Types 246
- High Availability 247
- VRRP Overview 248
- Virtual Router MAC Address 249
- Owners and Renters 249
- VRRP Operation 251
- Active-Standby Failover 252
- Failover Methods 253
- Active-Standby Redundancy 254
- Active-Active Redundancy 255
- Hot-Standby Redundancy 256
- Virtual Router Group 257
- Synchronizing Configurations 258
- Web OS Extensions to VRRP 259
- Master-Active VR 1 260
- Tracking VRRP Router Priority 261
- Parameter Description 262
- Task 2: SLB Configuration 269
- Task 4: Configuring Switch 2 273
- Configuration Procedure 276
- Persistent Sessions 283
- On the Master Switch 285
- On the Backup Switch 285
- If the switch is a master: 286
- If the switch is a backup: 286
- Part 3: Advanced Web 287
- Switching 287
- Advanced Web Switching 288
- Global Server Load Balancing 289
- GSLB Overview 290
- How GSLB Works 291
- Configuring GSLB 293
- How IP Proxy Works 305
- Verifying GSLB Operation 308
- Firewall Load Balancing 313
- Firewall Overview 314
- Basic FWLB 316
- Basic FWLB Implementation 317
- Configuring Basic FWLB 319
- Four-Subnet FWLB 326
- Configuring Four-Subnet FWLB 329
- Configure the Routers 330
- Configure the Firewalls 330
- Verify Proper Connectivity 337
- Advanced FWLB Concepts 346
- >> # ../group 1 347
- Note: There can be 349
- Firewall Health Checks 351
- Using HTTP Health Checks 352
- Virtual Private Network Load 353
- Balancing 353
- 7. Enable SLB 361
- 1. Turn off BOOTP 365
- 3. Turn off STP 365
- Test the VPN 369
- Content Intelligent Switching 371
- Parsing Content 373
- HTTP Header Inspection 374
- Virtual Hosting 380
- Browser-Smart Load Balancing 386
- Configuring URL Hashing 387
- Header Hash Load Balancing 389
- DNS Load Balancing 390
- Layer 7 RTSP Load Balancing 392
- Example 1: Hashing on the URL 407
- Regular Expression Matching 412
- /cfg/slb/layer7/slb/add 413
- Content Precedence Lookup 414
- Layer 7 Deny Filter 417
- Persistence 421
- Overview of Persistence 422
- Using Cookies 423
- Using SSL Session ID 423
- Cookie-Based Persistence 424
- Cookie Formats 425
- Cookie Properties 426
- Cookie Modes of Operation 427
- Passive Cookie Mode 428
- Rewrite Cookie Mode 429
- Chapter 16: Persistence 433
- Example 2: Parsing the Cookie 434
- Chapter 16: Persistence 440
- Bandwidth Management 441
- Bandwidth Policies 444
- Rate Limits 445
- Data Pacing 446
- Classification Criteria 447
- Combinations 448
- Precedence 448
- Frame Discard 449
- Cache servers 450
- Statistics Maintained 452
- Operational Keys 453
- Web Site Preference Example 460
- Security Management Example 468
- Glossary 471
- Glossary 474
- Numerics 475
Relacionado con productos y manuales para Hardware Nortel-networks WEB OS 212777
Hardware Nortel-networks CG030601 Manual de usuario
(14 paginas)
(14 paginas)
Hardware Nortel-networks BSG12aw Manual de usuario
(66 paginas)
(66 paginas)
Hardware Nortel-networks 312865-A Manual de usuario
(18 paginas)
(18 paginas)
(2 paginas)
Hardware Nortel-networks NN43001-318 Manual de usuario
(108 paginas)
(108 paginas)
Hardware Nortel-networks Nortel Network VPN Router and Client Workstation 7 Manual de usuario
(67 paginas)
(67 paginas)
Hardware Nortel-networks CWDM SFP Manual de usuario
(34 paginas)
(34 paginas)
Hardware Nortel-networks NN46110-602 Manual de usuario
(230 paginas)
(230 paginas)
© 2020, manymanuals.es. Todos los derechos reservados | 0.096 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comentarios a estos manuales