Cisco Content Services Switch Basic Configuration Guide

Transcription

1 Cisco Content Services Switch Basic Configuration Guide Software Version 4.01 December, 2000 Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA USA Tel: NETS (6387) Fax: Text Part Number:

2 THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS. THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY. The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB s public domain version of the UNIX operating system. All rights reserved. Copyright 1981, Regents of the University of California. NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED AS IS WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Access Registrar, AccessPath, Are You Ready, ATM Director, Browse with Me, CCDA, CCDE, CCDP, CCIE, CCNA, CCNP, CCSI, CD-PAC, CiscoLink, the Cisco NetWorks logo, Cisco Powered Network logo, Cisco Systems Networking Academy, Fast Step, FireRunner, Follow Me Browsing, FormShare, GigaStack, IGX, Intelligence in the Optical Core, Internet Quotient, IP/VC, iq Breakthrough, iq Expertise, iq FastTrack, iq Logo, iq Readiness Scorecard, Kernel Proxy, MGX, Natural Network Viewer, Network Registrar, the Networkers logo, Packet, PIX, Point and Click Internetworking, Policy Builder, RateMUX, ReyMaster, ReyView, ScriptShare, Secure Script, Shop with Me, SlideCast, SMARTnet, SVX, TrafficDirector, TransPath, VlanDirector, Voice LAN, Wavelength Router, WebViewer, Workgroup Director, and Workgroup Stack are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn, Empowering the Internet Generation, are service marks of Cisco Systems, Inc.; and Aironet, ASIST, BPX, Catalyst, Cisco, the Cisco Certified Internetwork Expert Logo, Cisco IOS, the Cisco IOS logo, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Collision Free, Enterprise/Solver, EtherChannel, EtherSwitch, FastHub, FastLink, FastPAD, IOS, IP/TV, IPX, LightStream, LightSwitch, MICA, NetRanger, Post-Routing, Pre-Routing, Registrar, StrataView Plus, Stratm, SwitchProbe, TeleRouter, and VCO are registered trademarks of Cisco Systems, Inc. or its affiliates in the U.S. and certain other countries. All other brands, names, or trademarks mentioned in this document or Web site are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0010R) Copyright 2000, Cisco Systems, Inc. All rights reserved.

3 CONTENTS About This Guide xxi Audience xxii How to Use This Guide xxii Related Documentation xxiii Documentation Map xxv Symbols and Conventions xxvi CHAPTER 1 Logging in and Getting Started 1-1 Configuration Quick Start 1-2 Logging into the CSS 1-5 Changing the Administrative Username and Password 1-5 Configuring Usernames and Passwords 1-6 Configuring an IP Address and Subnet Mask for the Ethernet Management Port 1-8 Configuring an IP Address 1-8 Configuring a Subnet Mask 1-9 Configuring a Default IP Route 1-9 Configuring Date and Time 1-10 Configuring European Date 1-11 Configuring an FTP Record 1-11 Copying Files from an FTP Server 1-12 Rebooting the CSS 1-13 Shutting Down the CSS 1-13 iii

4 Contents Using the Offline Diagnostic Monitor Menu 1-13 Accessing the Offline Diagnostic Monitor Main Menu 1-14 Using the Boot Configuration Menu 1-17 Setting Primary Boot Configuration 1-19 Setting Secondary Boot Configuration 1-23 Setting IP Address, and Subnet Mask 1-28 Showing the Boot Configuration 1-29 Using the Advanced Options 1-30 Deleting a Software Version 1-30 Using the Security Options 1-31 Using the Disk Options 1-33 Enabling and Disabling Core Dumps 1-38 Showing Core Dumps 1-39 CSS Software Overview 1-39 Using the Running-Config and Startup-Config 1-42 Clearing the Running-Config and the Startup-Config 1-43 Showing the Running-Config 1-43 Showing the Startup-Config 1-46 Creating a Running-Config or Startup-Config Using a Text Editor 1-47 Archiving Files to the Archive Directory 1-48 Archiving a Log File 1-48 Archiving the Running-Config 1-49 Archiving Scripts 1-49 Archiving the Startup-Config 1-49 Clearing the Archive Directory 1-49 iv

5 Contents Restoring Files from the Archive Directory 1-50 Restoring an Archived Log File 1-50 Restoring an Archived Script File 1-51 Restoring an Archived Startup-Config 1-51 Copying Core Dumps to an FTP or TFTP Server 1-52 Copying Core Dumps to an FTP Server 1-52 Copying Core Dumps to a TFTP Server 1-53 Displaying CSS Configurations 1-53 Displaying Software Information 1-54 Displaying Hardware Information 1-54 Showing System Resources 1-56 Showing User Information 1-57 Showing Current Logins 1-58 Where to Go Next 1-58 CHAPTER 2 Configuring User Profiles and CSS Parameters 2-1 Configuring User Profiles 2-2 Configuring User Terminal Parameters 2-3 Configuring Terminal Idle 2-3 Configuring Terminal Length 2-4 Configuring Terminal More 2-4 Configuring Terminal Netmask-Format 2-4 Configuring Terminal Timeout 2-5 Using Expert Mode 2-5 Changing the CLI Prompt 2-6 v

6 Contents Modifying the History Buffer 2-6 Displaying the History Buffer 2-7 Copying and Saving User Profiles 2-8 Copying the Running Profile to the Default-Profile 2-8 Copying the Running Profile to a User Profile 2-8 Copying the Running Profile to an FTP Server 2-9 Copying the Running Profile to a TFTP Server 2-9 Boot Configuration Mode Commands 2-10 Unpacking an ArrowPoint Distribution Image (ADI) 2-10 Removing an ArrowPoint Distribution Image (ADI) 2-11 Specifying the Primary BOOT Configuration 2-11 Configuring the Primary Boot-File 2-11 Configuring the Primary Boot-Type 2-12 Configuring the Primary Config-Path 2-12 Specifying the Secondary Boot Configuration 2-13 Specifying the Secondary Boot-File 2-13 Specifying the Secondary Boot-Type 2-14 Specifying the Secondary Config-Path 2-14 Configuring a Boot Configuration Record for the Passive SCM 2-15 Configuring the Passive SCM IP Address 2-17 Configuring the Passive SCM Primary Boot File 2-17 Configuring the Passive SCM Primary Boot Type 2-17 Configuring the Passive SCM Primary Configuration Path 2-18 Configuring the Passive SCM Secondary Boot File 2-19 Configuring the Passive SCM Secondary Boot Type 2-19 Configuring the Passive SCM Secondary Configuration Path 2-20 Configuring the Passive SCM Subnet Mask 2-20 vi

7 Contents Copying the Boot Configuration Record from the Active SCM to the Passive SCM 2-21 Showing the BOOT Configuration 2-21 Booting the CSS from a Network Drive 2-21 Configuring Network Boot for a Primary SCM 2-22 Configuring Network Boot for a Passive SCM 2-23 Showing Network Boot Configurations 2-24 Configuring Host Name 2-25 Configuring Idle Timeout 2-25 Controlling Remote Access to the CSS 2-26 Restricting Console, FTP, SNMP, Telnet, XML, and Web Management Access to the CSS 2-27 Finding an IP Address 2-28 Configuring Flow Parameters 2-29 Configuring Permanent Connections for TCP Ports 2-29 Resetting Fast Ethernet and Gigabit Ethernet Ports 2-30 Reclaiming Reserved Telnet and FTP Control Ports 2-30 Showing Flow Statistics 2-32 Configuring Content API 2-32 Controlling Access to the CSS HTTP Server 2-33 Configuring the Command Scheduler 2-33 Showing Configured Command Scheduler Records 2-35 Where to Go Next 2-35 vii

8 Contents CHAPTER 3 Configuring CSS Network Protocols 3-1 Configuring Domain Name Service 3-2 Specifying a Primary DNS Server 3-2 Using DNS Resolve 3-2 Specifying a Secondary DNS Server 3-3 Specifying a DNS Suffix 3-3 Configuring Address Resolution Protocol 3-4 Configuring ARP 3-4 Configuring ARP Timeout 3-5 Configuring ARP Wait 3-6 Updating ARP Parameters 3-6 Clearing ARP Parameters 3-6 Showing ARP Information 3-7 Configuring Routing Information Protocol 3-8 Configuring RIP Advertise 3-8 Configuring RIP Redistribute 3-9 Configuring RIP Equal-Cost 3-9 Showing RIP Configurations 3-10 Configuring Internet Protocol 3-11 Configuring IP Record-Route 3-11 Configuring IP Redundancy 3-11 Configuring IP ECMP 3-12 Configuring an IP Route 3-13 Configuring IP Source-Route 3-15 Disabling an Implicit Service for Static Route Next Hop 3-15 Configuring IP Subnet-Broadcast 3-16 Showing IP Information 3-17 viii

9 Contents Showing IP Config 3-17 Showing IP Interfaces 3-17 Showing IP Routes 3-18 Showing IP Statistics 3-20 Showing IP Summary 3-21 Configuring Bridging for the CSS 3-21 Configuring Bridge Aging-Time 3-21 Configuring Bridge Forward-Time 3-22 Configuring Bridge Hello-Time 3-22 Configuring Bridge Max-Age 3-23 Configuring Bridge Priority for the CSS 3-23 Enabling and Disabling Bridge Spanning-Tree 3-24 Showing Bridge Configurations 3-24 Configuring Secure Shell Daemon 3-25 Configuring SSHD Keepalive 3-27 Configuring SSHD Port 3-27 Configuring SSHD Server-Keybits 3-27 Disabling and Enabling Telnet Access when using SSHD 3-28 Showing SSHD Configurations 3-28 Configuring Opportunistic Layer 3 Forwarding 3-28 Where to Go Next 3-30 ix

10 Contents CHAPTER 4 Configuring Interfaces and Circuits 4-1 Interface and Circuit Overview 4-1 Interface and Circuit Configuration Quick Start 4-3 Configuring Interfaces 4-4 Configuring an Interface 4-5 Entering a Description for the Interface 4-5 Configuring Interface Duplex and Speed 4-6 Setting the Interface Maximum Idle Time 4-7 Showing Interface Duplex and Speed 4-8 Bridging the Interface to a VLAN 4-8 Configuring Bridge Pathcost 4-9 Configuring Bridge Priority 4-9 Configuring Bridge State 4-10 Configuring the Low Water Mark of Flow Control Blocks on an Interface 4-10 Showing Bridge Configurations 4-10 Showing Interfaces 4-11 Showing Interface Statistics 4-12 Showing Ethernet Interface Errors 4-13 Shutting Down an Interface 4-14 Restarting the Interface 4-14 Shutting Down All Interfaces 4-14 Restarting All Interfaces 4-15 Configuring Circuits 4-15 Configuring Router-Discovery Lifetime 4-16 Configuring Router-Discovery Limited-Broadcast 4-16 x

11 Contents Configuring Router-Discovery Max-Advertisement-Interval 4-16 Configuring Router-Discovery Min-Advertisement-Interval 4-17 Showing Circuits 4-17 Configuring a Circuit IP Interface 4-18 Configuring a Circuit IP Address 4-18 Configuring a Circuit-IP Broadcast Address 4-19 Configuring Circuit-IP Redirects 4-19 Configuring Circuit-IP Unreachables 4-20 Enabling Router-Discovery 4-20 Configuring Router-Discovery Preference 4-20 Enabling a Circuit IP 4-21 Disabling a Circuit IP 4-21 Showing IP Interfaces 4-21 Configuring RIP for an IP Interface 4-22 Configuring RIP Default-Route 4-22 Configuring RIP Receive 4-23 Configuring RIP Send 4-23 Showing RIP Configurations 4-23 Where to Go Next 4-24 CHAPTER 5 Configuring Services 5-1 Service, Owner, and Content Rule Overview 5-1 Service Configuration Quick Start 5-4 Service Load Overview 5-5 Using ArrowPoint Content Awareness Based on Server Load and Weight 5-7 Using ACA Based on Server Load 5-7 Using ACA Based on Server Weight and Load 5-8 xi

12 Contents Configuring Load for Services 5-9 Configuring Global Load Step 5-9 Configuring Global Load Threshold 5-10 Configuring Global Load Reporting 5-11 Configuring Load Tear Down Timer 5-11 Configuring Load Ageout Timer 5-12 Showing Global Service Loads 5-13 Global Keepalive Mode 5-13 Creating a Global Keepalive 5-14 Activating a Global Keepalive Active 5-15 Configuring a Global Keepalive Description 5-15 Configuring a Global Keepalive Frequency 5-15 Configuring a Global Keepalive IP Address 5-16 Configuring a Global Keepalive Max Failure 5-16 Configuring a Global Keepalive Method 5-16 Configuring a Global Keepalive Port 5-17 Configuring a Global Keepalive Retryperiod 5-17 Deactivating a Global Keepalive 5-17 Configuring a Global Keepalive Type 5-18 Configuring a Global Keepalive URI 5-18 Associating a Service with a Global Keepalive 5-19 Configuring Global Keepalive Hash 5-19 Showing Global Keepalive Configurations 5-21 xii

13 Contents Script Keepalives 5-22 Script Keepalive Considerations 5-22 Configuring Script Keepalives 5-24 Viewing a Script Keepalive in a Service 5-24 Script Keepalive Status Codes 5-26 Creating Services 5-26 Configuring Services 5-27 Assigning an IP Address to the Service 5-27 Specifying a Port 5-28 Specifying a Protocol 5-29 Specifying a Domain Name 5-29 Configuring an Advanced Load Balancing String 5-30 Configuring a Service HTTP Cookie 5-30 Configuring Weight 5-31 Specifying a Service Type 5-31 How the CSS Accesses Server Types 5-33 Configuring Service Access 5-33 Configuring Service Cache Bypass 5-34 Configuring Keepalives 5-34 Configuring Keepalive Frequency 5-36 Configuring Keepalive Maxfailure 5-36 Configuring Keepalive Method 5-36 Configuring Keepalive Port 5-37 Configuring Keepalive Retryperiod 5-38 Configuring Keepalive Type 5-38 Configuring Keepalive URI 5-39 Configuring Keepalive Hash 5-39 xiii

14 Contents Showing Keepalive Configurations 5-41 Configuring Maximum TCP Connections 5-42 Activating a Service 5-42 Suspending a Service 5-42 Removing a Service 5-43 Removing a Service From a Content Rule 5-43 Removing a Service From a Source Group 5-43 Showing Service Configurations 5-44 Where to Go Next 5-45 CHAPTER 6 Configuring Owners 6-1 Owner Configuration Quick Start 6-2 Creating an Owner 6-2 Configuring an Owner DNS Balance Type 6-3 Specifying Owner Address 6-4 Specifying Owner Billing Information 6-4 Specifying Case 6-5 Specifying Owner DNS Type 6-5 Specifying Owner Address 6-6 Removing an Owner 6-6 Showing Owner Information 6-6 Showing Owner Summary 6-7 Where to Go Next 6-8 xiv

15 Contents CHAPTER 7 Configuring Content Rules 7-1 Service, Owner, and Content Rule Overview 7-2 Content Rule Configuration Quick Start 7-5 Naming and Assigning a Content Rule to an Owner 7-6 Configuring a Virtual IP Address 7-7 Configuring a Domain Name Content Rule 7-10 Disabling a Domain Name System in a Content Rule 7-11 Matching Content Rules on Multiple Domain Names 7-11 Configuring a Content Rule using a Domain Name and a Virtual IP Address 7-13 Using Wildcards in Domain Name Content Rules 7-14 General Guidelines for Domain Name Wildcards in Content Rules 7-15 Adding Services to a Content Rule 7-16 Adding a Service to a Content Rule 7-17 Specifying a Service Weight 7-17 Adding a Primary Sorry Server to a Content Rule 7-17 Adding a Domain Name System to a Content Rule 7-18 Activating a Content Rule 7-19 Suspending a Content Rule 7-19 Removing a Content Rule 7-19 Removing a Service from a Content Rule 7-20 Configuring a Protocol 7-20 Configuring Port Information 7-20 Configuring Load Balancing 7-21 Configuring a DNS Balance Type 7-22 Configuring Hotlists 7-23 Configuring a Domain Hotlist 7-25 xv

16 Contents Specifying a Uniform Resource Locator 7-26 Specifying an Extension Qualifier List in a Uniform Resource Locator 7-28 Specifying a Load Threshold 7-29 Redirecting Requests for Content 7-29 Configuring Persistence, Remapping, and Redirection 7-30 Content Rule Persistence 7-30 Configuring Bypass Persistence 7-31 Configuring HTTP Redirection and Service Remapping 7-32 Specifying an HTTP Redirect String 7-33 Using Show Remap 7-34 Defining Failover 7-35 Specifying an Application Type 7-38 Enabling Content Requests to Bypass Transparent Caches 7-39 Showing Content 7-40 Showing Content Rules 7-41 CHAPTER 8 Using the CSS Logging Features 8-1 Logging Overview 8-2 Logging Quick Start Table 8-3 Specifying Logging Buffer Size 8-5 Specifying Log File Destination 8-6 Specifying Disk for a Log File Destination 8-6 Disabling Logging to Disk 8-6 Specifying Host for a Log File Destination 8-7 Specifying a Line for a Log File Destination 8-7 xvi

17 Contents Enabling Logging on a Subsystem 8-8 Disabling Logging for a Subsystem 8-10 Configuring a Log Message for a Subsystem at a Logging Level 8-11 Logging ACL Activity 8-12 Sending Log Messages to an Address 8-13 Logging CLI Commands 8-14 Showing Log Files 8-14 Copying Log Files to an FTP or TFTP Server 8-16 Copying Log Files to an FTP Server 8-17 Copying Log Files to a TFTP Server 8-17 APPENDIX A Upgrading Your CSS Software A-1 Before You Begin A-1 Copying the New CSS Software A-1 Configuring an FTP Server Record on the CSS A-2 Upgrading your CSS A-3 Using the Upgrade Script A-3 Automatically Running the Upgrade Script A-3 Interactively Using the Upgrade Script A-5 Manually Upgrading the CSS A-8 INDEX xvii

18 Contents xviii

19 FIGURES Figure 1-1 Boot Configuration Flowchart 1-17 Figure 3-1 Opportunistic Layer 3 Forwarding Example 3-29 Figure 4-1 Content Services Switch Interfaces and Circuits 4-2 Figure 5-1 Services, Owners, and Content Rules Concepts 5-3 Figure 5-2 Load Calculation Example with Three Servers 5-6 Figure 7-1 Services, Owners, and Content Rules Concepts 7-4 Figure 7-2 Example of Configuring a Virtual IP Address 7-9 Figure 7-3 ServerB Configured for Failover Next 7-36 Figure 7-4 ServerC Configured for Failover Next 7-36 Figure 7-5 Suspended or Failed Service Configured for Failover Linear 7-37 Figure 7-6 Removing a Service Configured for Failover Linear 7-38 xvii

20 Figures xviii

21 TABLES Table 1-1 Configuration Quick Start 1-3 Table 1-2 Offline Diagnostic Monitor Menu Options 1-15 Table 1-3 Boot Configuration Options 1-18 Table 4-1 Interface and Circuit Configuration Quick Start 4-3 Table 5-1 Service Configuration Quick Start 5-4 Table 6-1 Owner Configuration Quick Start 6-2 Table 6-2 Global Bypass Counter Descriptions 6-8 Table 7-1 Content Rule Configuration Quick Start 7-5 Table 8-1 CSS Log File Descriptions 8-2 Table 8-2 Configuring and Enabling Logging 8-4 Table 8-3 Logging Subsystems 8-8 Table 8-4 Subsystem Logging Levels 8-10 xix

22 Tables xx

23 About This Guide This guide provides instructions for the basic configuration of the CSS 11050, CSS 11150, and CSS content service switches (hereinafter referred to as the CSS) Information in this guide applies to all CSS models except where noted. For configuration information on advanced features, refer to the Content Services Switch Advanced Configuration Guide. The CSS software is available in a Standard or Enhanced feature set. The Enhanced feature set contains all of the Standard feature set and also includes Network Address Translation (NAT) Peering, Domain Name Service (DNS), Demand-Based Content Replication (Dynamic Hot Content Overflow), Content Staging and Replication, and Network Proximity DNS. Proximity Database and SSH are optional features. Note Access to the Standard and Enhanced feature sets or Proximity Database requires that you enter a software license key when you boot the CSS for the first time. For details, refer to the Content Services Switch Getting Started Guide, Chapter 4, Booting the CSS. Contents Services Switch Basic Configuration Guide xxi

24 Audience About This Guide Note If you are upgrading from the Standard to the Enhanced feature set or want to activate a CSS software option (for example, SSH Server) that you purchased, refer to the Content Services Switch Getting Started Guide, Chapter 4, Booting the CSS. If you configure your CSS for Proximity Database, you cannot use the CSS for flow control. For details on Proximity Database, refer to the Content Services Switch Advanced Configuration Guide. Audience This guide is intended for the following trained and qualified service personnel who are responsible for configuring the CSS: Web master System administrator System operator How to Use This Guide This section describes the chapters and contents in this guide. Chapter Chapter 1, Logging in and Getting Started Chapter 2, Configuring User Profiles and CSS Parameters Chapter 3, Configuring CSS Network Protocols Description Log into the CSS and configure the CSS for operation. This chapter contains an overview of the CSS system software. It also contains information on using the Offline Diagnostic Monitor (Offline DM) menu. Configure user profile and CSS parameters. This chapter also contains information on using the Content API and Command Scheduler features. Configure the CSS DNS, ARP, RIP, IP, and bridging features. xxii Contents Services Switch Basic Configuration Guide

25 About This Guide Related Documentation Chapter Chapter 4, Configuring Interfaces and Circuits Chapter 5, Configuring Services Chapter 6, Configuring Owners Chapter 7, Configuring Content Rules Chapter 8, Using the CSS Logging Features Appendix A, Upgrading Your CSS Software Description Configure the CSS management ports, interfaces, and circuits for operation. Configure services. Create and configure owners. Create and configure content rules. Enable logging, set up the log buffer, and determine where to send the activity information. Upgrade your CSS software manually or use the upgrade script. Related Documentation In addition to this document, the Content Services Switch documentation set includes the following. Document Title Cisco Content Services Switch Release Note Content Services Switch Getting Started Guide Description The release note provides information not in the previous guides and reference. This guide is intended to help you quickly get your CSS installed and into operation. It provides you with instructions for installing, cabling, booting, and configuring the CSS. Contents Services Switch Basic Configuration Guide xxiii

26 Related Documentation About This Guide Document Title Content Services Switch Advanced Configuration Guide Content Services Switch Command Reference Description This guide describes how to configure advanced CSS features, including Sticky parameters HTTP header load balancing Source groups, ArrowPoint Control Lists (ACLS), Extension Qualifier Lists (EQLs), Uniform Resource Locator Qualifier Lists (URQLs), Network Qualifier Lists (NQLs), and Domain Qualifier Lists (DQLs) VIP and CSS redundancy Content Smart Caching Domain Name Service (DNS) Demand-Based Content Replication and content staging and replication Firewall Load Balancing SNMP and RMON OSPF routing protocol Network proximity This guide provides an alphabetical list of all CSS Command Line Interface commands including syntax, options, and related commands. xxiv Contents Services Switch Basic Configuration Guide

27 About This Guide Related Documentation Documentation Map This section provides a map for using the CSS documentation set. Contents Services Switch Basic Configuration Guide xxv

28 Symbols and Conventions About This Guide Symbols and Conventions This guide uses the following symbols and conventions to identify different types of information. Caution A caution means that a specific action you take could cause a loss of data or adversely impact use of the equipment. Warning A warning describes an action that could cause you physical harm or damage the equipment. Note A note provides important related information, reminders, and recommendations. Bold text indicates a command in a paragraph. Courier text indicates text that appears on a command line, including the CLI prompt. Courier bold text indicates commands and text you enter in a command line. Italics text indicates the first occurrence of a new term, book title, and emphasized text. 1. A numbered list indicates that the order of the list items is important. a. An alphabetical list indicates that the order of the secondary list items is important. A bulleted list indicates that the order of the list topics is unimportant. An indented list indicates that the order of the list subtopics is unimportant. xxvi Contents Services Switch Basic Configuration Guide

29 CHAPTER 1 Logging in and Getting Started This chapter describes how to log into the CSS and configure an IP address, subnet mask, and default route. Included in this chapter is a description of the system software. It also contains information on using the Offline Diagnostic Monitor (Offline DM) menu. Information in this chapter applies to all CSS models except where noted. CSS software is available in a Standard or Enhanced feature set. The Enhanced feature set contains all of the Standard feature set and also includes Network Address Translation (NAT) Peering, Domain Name Service (DNS), Demand-Based Content Replication (Dynamic Hot Content Overflow), Content Staging and Replication, and Network Proximity DNS. Proximity Database and SSH are optional features. Note When you boot the CSS for the first time, the software prompts you to enter a valid license key for the Standard or Enhanced feature set, or for Proximity Database, depending on your intended use for the CSS. For details, refer to the Content Services Switch Getting Started Guide, Chapter 4, Booting the CSS. If you are upgrading from the standard to the enhanced feature set or want to activate another optional feature that you purchased, refer to the Content Services Switch Getting Started Guide, Chapter 4, Booting the CSS. If you configure your CSS for Proximity Database, you cannot use the CSS for flow management. For details on Proximity Database, refer to the Content Services Switch Advanced Configuration Guide. 1-1

30 Configuration Quick Start Chapter 1 Logging in and Getting Started This chapter contains the following sections: Configuration Quick Start Logging into the CSS Configuring an IP Address and Subnet Mask for the Ethernet Management Port Configuring a Default IP Route Configuring Date and Time Configuring an FTP Record Rebooting the CSS Shutting Down the CSS Using the Offline Diagnostic Monitor Menu Enabling and Disabling Core Dumps CSS Software Overview Using the Running-Config and Startup-Config Archiving Files to the Archive Directory Restoring Files from the Archive Directory Displaying CSS Configurations Configuration Quick Start Table 1-1 is a Quick Start configuration table designed to help you configure the CSS quickly and easily. This table provides steps to: Log in and access config mode so you can configure the CSS for operation Access boot mode to configure an IP address for the Ethernet Management port From boot mode, configure a subnet mask Configure a default IP route 1-2

31 Chapter 1 Logging in and Getting Started Configuration Quick Start. Enter the date and time Configure an FTP record (optional) Save your configuration from the running-config to the startup-config Following Table 1-1 is an overview of the CSS system software and commands for saving, archiving, and restoring system configuration files. Once you configure the Ethernet Management port IP address, you can continue to use the Console port or you can use the Ethernet Management port to Telnet into the CSS and configure it remotely Table 1-1 Configuration Quick Start Task and Command Example 1. Log into the CSS using the default administrative username admin and password system or the username and password you assigned during the boot process. 2. Access config mode. # config (config)# 3. Access boot mode to configure an IP address for the Ethernet Management port. This IP address must be on a different subnet than any other CSS VLAN circuit IP subnet or you will not be able to access the port. You must reboot the CSS for the new IP address to take effect. (config)# boot (config-boot)# ip address Configure a subnet mask in boot mode. (config-boot)# subnet mask Exit from boot mode to config mode to configure a default route as required. (config-boot)# exit (config)# ip route /

32 Configuration Quick Start Chapter 1 Logging in and Getting Started Table 1-1 Configuration Quick Start (continued) Task and Command Example 6. Exit from config mode to configure a date. The clock and date commands do not allow backspacing. If you enter a wrong date, re-enter the command with the new information. Enter the date in the format mm-dd-yy. # clock date Enter date: [ ] Use the date european-date command to enable the clock date command to accept date input in the format of day, month, and year. # date european-date 12/03/00 7. Configure the time using the clock command. The clock command does not allow backspacing. If you enter the wrong time, re-enter the command with the new information. Enter the time in the format hh:mm:ss. # clock time Enter time: [15:17:33] 16:17:33 8. Configure a File Transfer Protocol (FTP) record file to use when accessing an FTP server from the CSS. This step is optional. # ftp-record arrowrecord bobo password "secret" /outgoing 9. Save your configuration changes (recommended). Configuration changes reside in a virtual file called the running-configuration. To save your current configuration, use the copy running-config startup-config command. If you do not save the running-config, all configuration changes are lost upon reboot. # copy running-config startup-config 1-4

33 Chapter 1 Logging in and Getting Started Logging into the CSS Logging into the CSS To log into the CSS, use the default administrative username admin and default password system, or use the administrative username and password you configured during the boot process. The default username admin enables you to log in with SuperUser status. If you have not changed the default administrative username and password, it is recommended that you change them immediately to safeguard the CSS against unauthorized logins. Note When you power up the CSS (after initial start-up), the boot process provides access to the Offline Diagnostic Monitor (Offline DM) menu. The Offline DM Main menu allows you to set the boot configuration, show the boot configuration, select Advanced Options, or reboot the system. For details on using the Offline DM Main menu, refer to Using the Offline Diagnostic Monitor Menu in this chapter. Changing the Administrative Username and Password The administrative username and password are stored in non-volatile RAM (NVRAM). Each time you reboot the CSS, it reads them from NVRAM and reinserts them into the user database. You can change the administrative username and password, but because the information is stored in NVRAM, you cannot delete them permanently. If you delete the administrative username using the no username command, the CSS deletes the username from the running-config, but restores it from NVRAM when you reboot. SuperUser status is assigned to the administrative username by default. To change the administrative username or password, you may either: Access the Offline Diagnostic Monitor (Offline DM) menu during the boot process. For information on the Offline DM Main menu see Using the Offline Diagnostic Monitor Menu in this chapter. Use the username-offdm name password text command. 1-5

34 Logging into the CSS Chapter 1 Logging in and Getting Started The following example uses the CLI command to change the default administrative username and password. (config)# username-offdm bobo password secret Configuring Usernames and Passwords Use the username command to configure usernames and passwords for logging into the CSS. The CSS can support up to 32 usernames including the administrator and technician usernames. You can assign each user with SuperUser or User status. User - Allows access to a limited set of commands that enable you to monitor and display CSS parameters, but not change them. A User prompt ends with the > symbol. SuperUser - Allows access to the full set of CLI commands, including those in User mode, that enable you to configure the CSS. A SuperUser prompt ends with the # symbol. From SuperUser, you can enter global configuration mode and its subordinate configuration modes. If you do not specify superuser when configuring a new user, the new user has only user level status by default. The syntax for this global configuration mode command is: username name [des-password encrypted-password password] password {superuser} The example below creates a SuperUser named picard with a password of captain. (config)# username picard password captain superuser The options and variables are: name - The username you want to assign or change. Enter an unquoted text string with no spaces and a maximum of 16 characters. To see a list of existing usernames, enter username?. des-password - Specify that the password is Data Encryption Standard (DES) encrypted. Use this option only when you are creating a file for use as a script or a startup configuration file. Enter the DES password as a case-sensitive unquoted text string 6 to 64 characters in length. 1-6

35 Chapter 1 Logging in and Getting Started Logging into the CSS encrypted-password - Specify that the password is encrypted. Use this option only when you are creating a file for use as a script or a startup configuration file. password - Specify that the password is not encrypted. Use this option when you use the CLI to create new users dynamically. password - The password. Enter an unquoted text string with no spaces and a length of 6 to 16 characters. superuser - Specify SuperUser privileges to allow a user to access SuperUser mode. If you do not enter this option, the user can only access User mode. To remove an existing username, enter: (config)# no username picard To display a list of existing usernames, enter: (config)# no username? To change a user password, re-enter the username command and specify the new password. Remember to include SuperUser privileges if required. For example: (config)# username picard password flute superuser Caution The no username command removes a user permanently. Make sure you want to do this because you cannot undo this command. 1-7

36 Configuring an IP Address and Subnet Mask for the Ethernet Management Port Chapter 1 Logging in and Getting Started Configuring an IP Address and Subnet Mask for the Ethernet Management Port To communicate with the CSS and issue Command Line Interface (CLI) commands using out-of-band management, you must assign an IP address to the Ethernet management port. You may also want to configure a subnet mask that the CSS uses upon boot. The Ethernet Management port is located on the: CSS and CSS rear panels CSS SCM front panel The CSS enables you to configure an IP address and a subnet mask: At the prompts during the boot process Using the Offline Diagnostic Monitor (Offline DM) menu Using CLI commands For information on configuring an IP address and subnet mask during the boot routine or using the Offline DM Main menu, refer to Using the Offline Diagnostic Monitor Menu in this chapter. For information on configuring an IP address and subnet mask using CLI commands, refer to the following sections. Note You must reboot the CSS for the IP address to take effect. Configuring an IP Address To configure an IP address for the CSS Ethernet Management port, use the ip address option in boot mode. This command does not have a no version. To change the IP address, re-issue the ip address command and enter the new IP address. The CSS does not accept an all zero IP address. For example: (config)# boot (config-boot)# ip address Note You must reboot the CSS for the new IP address to take effect. 1-8

37 Chapter 1 Logging in and Getting Started Configuring a Default IP Route Caution The Ethernet Management port IP address must be a different subnet than any other CSS VLAN circuit IP subnet. If you do not make the Ethernet Management port IP address unique, you will not be able to access the port. Configuring a Subnet Mask To configure the CSS subnet mask, use the subnet mask option in boot mode. For example: (config)# boot (config-boot)# subnet mask To remove the configured subnet mask, enter: (config-boot)# no subnet mask Configuring a Default IP Route When you configure a default IP route, the CSS polls the router periodically to ensure that the router is functioning. If the router fails, the CSS removes any entries from the routing table that point to the failed router and stops sending traffic to the failed router. When the router recovers, the CSS: Becomes aware of the router Re-enters applicable routes into the routing table To configure a default IP route, use the ip route command and specify either an: IP address and a subnet mask prefix - For example, /24 or IP address and a subnet mask - For example, The syntax for the ip route command to configure a default IP route is: ip route IP address subnet mask IP address2 For example: (config)# ip route /

38 Configuring Date and Time Chapter 1 Logging in and Getting Started The variables are: ip_address - The destination network address. Enter the IP address in dotted-decimal notation (for example, ). subnet_mask - The IP subnet mask. Enter the mask as either: A prefix length in CIDR bitcount notation (for example, /24). Do not enter a space to separate the IP address from the prefix length. An IP address in dotted-decimal notation (for example, ). ip_address2 - The next hop address for the route. Enter the IP address in dotted-decimal notation (for example, ). For complete information on configuring IP routes, refer to Chapter 3, Configuring CSS Network Protocols. Configuring Date and Time To set the date, enter the clock command. When you enter this command, the CSS displays the current date. The clock command does not allow backspacing. If you enter the wrong date or time, re-enter the command with the new information. Enter the new information in the format mm-dd-yy as shown: # clock date Enter date: [ ] To set the time, enter the clock time command. The current time is displayed. Enter the new time in the format hh:mm:ss as shown: # clock time Enter time: [15:12:38] 16:12:38 To display the current date and time, enter the show clock command: Date: Time: 17:56:

39 Chapter 1 Logging in and Getting Started Configuring an FTP Record Configuring European Date Use the date european-date command to enable the clock date command to accept date input in the format of day, month, and year. The syntax for this global configuration mode command is: # date european-date 10/4/00 To reset the format for the clock date command to its default of month, day and year, enter: # no date european-date Configuring an FTP Record Use the ftp-record command to create a File Transfer Protocol (FTP) record file to use when accessing an FTP server from the CSS. The syntax for this global configuration mode command is: ftp-record ftp_record ipaddress_or_hostname username [ password des-password des_password encrypted-password encrypted_password] {base_directory} The variables are: ftp_record - The name for the FTP record file. Enter an unquoted text string with no spaces and a maximum length of 16 characters. ip_address or hostname - The IP address or host name of the FTP server you want to access. Enter an IP address in dotted-decimal notation (for example, ) or a mnemonic host name (for example, myhost.mydomain.com). username - A valid login username on the FTP server. Enter a case-sensitive unquoted text string with no spaces and a maximum length 16 characters. password - The password for the valid login username on the FTP server. Enter a case-sensitive quoted text string with no spaces and a maximum length of 16 characters. des_password - The Data Encryption Standard (DES) encrypted password for the valid login username on the FTP server. Enter a case-sensitive unquoted text string with no spaces and a maximum length of 64 characters. 1-11

40 Configuring an FTP Record Chapter 1 Logging in and Getting Started encrypted_password - The encrypted password for the valid login username on the FTP server. Enter a case-sensitive unquoted text string with no spaces and a maximum length of 16 characters. base_directory - An optional base directory when using this record. Enter the base directory name as a case-sensitive unquoted text string with no spaces and a maximum length of 64 characters. The config-path and base directory path in the ftp-record associated with a network boot must not contain a pathname that collides with a non-network driver name (for example, c: or host:). For example (using an encrypted password): # ftp-record arrowrecord bobo password secret /outgoing To delete the FTP record arrowrecord from the CSS, enter: # no ftp-record arrowrecord Copying Files from an FTP Server Use the copy ftp command to copy files from an FTP server to the CSS. Before using this command, you must use the (config) ftp-record command to create an FTP record file containing the FTP server IP address, username, and password. The options for this command are: copy ftp ftp_record filename boot-image - Copy a file from an FTP server to the CSS for use as the ArrowPoint Distribution Image (ADI). The file you copy to the CSS must be an ADI. Otherwise, the CSS rejects it. copy ftp ftp_record filename script script_filename - Copy a file from an FTP server to the script directory. copy ftp ftp_record filename startup-config - Copy a file from an FTP server to the startup configuration. 1-12

41 Chapter 1 Logging in and Getting Started Rebooting the CSS Rebooting the CSS Use the reboot command to reboot the CSS. The syntax and option for this boot mode command are: reboot - Reboots the CSS reboot diags - Reboots the CSS and runs diagnostics For example, to reboot the CSS and run diagnostics, enter: (config-boot)# reboot diags Shutting Down the CSS Use the shutdown command in boot mode to shut down the CSS. This command shuts down all CSS processes so that you can power cycle the unit safely. For example: (config)# boot (config-boot)# shutdown Using the Offline Diagnostic Monitor Menu During the boot process, the CSS enables you to access the Offline Diagnostic Monitor (Offline DM) menu. The Offline DM Main menu allows you to: Set the boot configuration: Configure a primary and secondary location from which the CSS accesses the boot image Configure an IP address for the CSS Configure a subnet mask Show the boot configuration 1-13

42 Using the Offline Diagnostic Monitor Menu Chapter 1 Logging in and Getting Started Select Advanced Options to: Delete a software version from the disk Set a password for the Offline DM Main menu Set an administrative username and password Reformat the disk and perform a check disk Reboot the system Accessing the Offline Diagnostic Monitor Main Menu The CSS pauses the boot process for 5 seconds to enable you to press any character after the prompt and display the Offline Diagnostic Monitor Main menu. To access the Offline Diagnostic Monitor Main menu: 1. Connect and configure a console to the CSS SCM console port, or the CSS or CSS front panel. Configure the console to the following default values: 9600 baud, no parity, 8 data bits, 1 stop bit, and flow control set to None. 2. Power on the CSS. After the CSS begins to boot (approximately 15 seconds), it displays the following message: Press any key to access the Offline Diagnostic Monitor menu At this point in the boot sequence, you may either: Take no action and let the CSS continue booting automatically with the default boot configuration Press any key to halt the boot process and display the Offline DM Main menu 3. If you choose to access the Offline DM Main menu, press any key before the 5-second window elapses. 1-14

43 Chapter 1 Logging in and Getting Started Using the Offline Diagnostic Monitor Menu The Offline DM Main menu is displayed as shown below. If 5 seconds elapse before you press a key, power down the CSS and then power it up again. CS-x00 Offline Diagnostic Monitor, Version x.x MAIN MENU Enter the number of a menu selection: 1* Set Boot Configuration 2. Show Boot Configuration 3* Advanced Options 4. Reboot System An asterisk (*) next to a menu option indicates that the option contains a submenu. Table 1-2 describes each menu item. Table 1-2 Offline Diagnostic Monitor Menu Options Menu Option Enables you to... 1* Set Boot Configuration 1. Set Primary Boot Configuration 2. Set Secondary Boot Configuration 3. Set IP Address, and Subnet Mask r. Return to previous menu 2. Show Boot Configuration Display boot configurations (including primary and secondary boot configurations, records, and IP information). 1-15

44 Using the Offline Diagnostic Monitor Menu Chapter 1 Logging in and Getting Started Table 1-2 Offline Diagnostic Monitor Menu Options (continued) Menu Option Enables you to... 3* Advanced Options 1. Delete a software version 2. Security Options 3. Disk Options r. Return to previous menu 4. Reboot System Reboot the CSS. The CSS displays the following message before rebooting: Are you sure you want to reboot? (Y/N) Enter: Y to reboot the CSS N to continue using the Offline DM Main menu 1-16

45 Chapter 1 Logging in and Getting Started Using the Offline Diagnostic Monitor Menu Using the Boot Configuration Menu The flowchart in Figure 1-1 illustrates how the CSS uses the Boot Configuration information to complete the boot process. Figure 1-1 Boot Configuration Flowchart CSS Begins Boot Process No Is Primary Boot Record Configured? Yes Attempt Primary Boot Record Primary Boot Succeed? No Yes Done No configuration No Is Secondary Boot Record Configured? Attempt Secondary Boot Record Boot Failed No Secondary Boot Succeed? Yes Done

46 Using the Offline Diagnostic Monitor Menu Chapter 1 Logging in and Getting Started The Boot Configuration menu enables you to perform the following tasks as described in Table 1-3. Table 1-3 Boot Configuration Options Menu Option 1. Set Primary Boot Configuration 2. Set Secondary Boot Configuration 3. Set IP Address and subnet mask r. Return to previous menu Enables you to... Specify the primary location (Network, FTP, Disk, or Clear) from which the CSS accesses the boot image. The default location is Disk. Specify the secondary location (Network, FTP, Disk, or Clear) from which the CSS accesses the boot image. The default location is Clear. Configure an IP address for the Ethernet Management port, and configure a subnet mask. Display the Offline DM main menu. The Boot Configuration menu is displayed as shown below. BOOT CONFIGURATION MENU Enter the number of a menu selection: 1. Set Primary Boot Configuration 2. Set Secondary Boot Configuration 3. Set IP Address and Subnet Mask r Return to previous menu 1-18

47 Chapter 1 Logging in and Getting Started Using the Offline Diagnostic Monitor Menu Setting Primary Boot Configuration The information you provide for the Primary Boot Configuration specifies the location from which the CSS accesses the primary boot image upon system reboot or when you download new software. When you select Set Primary Boot Configuration from the Boot Configuration menu, the CSS displays the following information. If you have previously entered information, the CSS displays the existing information and default values in [square brackets]. Configuring PRIMARY Boot Record Boot via [N]etwork, [F]TP, [D]isk, or [C]lear: [D] Boot via Network allows you to boot the CSS via FTP from CSS software on a network drive on a remote system (such as a PC or UNIX workstation) Boot via FTP allows you to download an ADI file containing CSS software that you want to install on the CSS drive Boot via Disk allows you to boot the CSS from software currently on the CSS drive Boot via Clear instructs the CSS to boot the CSS from the secondary boot record Refer to the following sections for a description of each Primary Boot Record option: Specifying a Network-Mounted File System as the Primary Boot Record Specifying FTP as the Primary Boot Record Specifying Disk as the Primary Boot Record Specifying Clear as the Primary Boot Record 1-19

48 Using the Offline Diagnostic Monitor Menu Chapter 1 Logging in and Getting Started Specifying a Network-Mounted File System as the Primary Boot Record Set the Primary Boot Record to Network when you want to boot the system from a network-mounted file system on a remote system (such as a PC or UNIX workstation) via FTP. Instead of the CSS disk, the network filesystem contains the CSS software. Perform a network boot when: You want multiple CSSs to use the same boot image while keeping their own configuration information. You provide an alternate path for the location of the configuration information. However this information must exist on the same network filesystem with the boot image. Note When using an alternate configuration path, make sure that the path leads to a directory containing the script, log, and info subdirectories. These subdirectories must contain the files in the corresponding subdirectories in the boot image. Create these subdirectories. Then copy the files from the boot image. The CSS has a disk failure. A network boot allows the CSS to boot independent from its disk and to load the configuration into memory. Before the CSS can boot from the network: Locate the remote system on the network where you will copy the CSS software. Make sure that the CSS can access the system via FTP. Copy the CSS software zip file from the CSS CD onto the system disk. Create a directory and unzip the file into it. This directory will contain all of the boot files and directories. On the CSS, create an FTP record to the directory containing the CSS software on the network drive. Make sure that you cable the following port on the CSS to the network: CSS SCM 10/100 Mbps-Ethernet Management port CSS or CSS rear panel 10/100-Mbps Ethernet Management port 1-20