SteelConnect Virtual Gateway Installation Guide

Size: px

Start display at page:

Download "SteelConnect Virtual Gateway Installation Guide"

Lawrence Norris
5 years ago
Views:

1 SteelConnect Virtual Gateway Installation Guide Version 2.8 August 2017

2 2017 Riverbed Technology, Inc. All rights reserved. Riverbed and any Riverbed product or service name or logo used herein are trademarks of Riverbed. All other trademarks used herein belong to their respective owners. The trademarks and logos displayed herein cannot be used without the prior written consent of Riverbed or their respective owners. Akamai and the Akamai wave logo are registered trademarks of Akamai Technologies, Inc. SureRoute is a service mark of Akamai. Apple and Mac are registered trademarks of Apple, Incorporated in the United States and in other countries. Cisco is a registered trademark of Cisco Systems, Inc. and its affiliates in the United States and in other countries. EMC, Symmetrix, and SRDF are registered trademarks of EMC Corporation and its affiliates in the United States and in other countries. IBM, iseries, and AS/400 are registered trademarks of IBM Corporation and its affiliates in the United States and in other countries. Juniper Networks and Junos are registered trademarks of Juniper Networks, Incorporated in the United States and other countries. Linux is a trademark of Linus Torvalds in the United States and in other countries. Microsoft, Windows, Vista, Outlook, and Internet Explorer are trademarks or registered trademarks of Microsoft Corporation in the United States and in other countries. Oracle and JInitiator are trademarks or registered trademarks of Oracle Corporation in the United States and in other countries. UNIX is a registered trademark in the United States and in other countries, exclusively licensed through X/ Open Company, Ltd. VMware, ESX, ESXi are trademarks or registered trademarks of VMware, Inc. in the United States and in other countries. This product includes Windows Azure Linux Agent developed by the Microsoft Corporation ( Copyright 2016 Microsoft Corporation. This product includes software developed by the University of California, Berkeley (and its contributors), EMC, and Comtech AHA Corporation. This product is derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm. The SteelHead Mobile Controller (virtual edition) includes VMware Tools. Portions Copyright VMware, Inc. All Rights Reserved. NetApp Manageability Software Development Kit (NM SDK), including any third-party software available for review with such SDK which can be found at and are included in a NOTICES file included within the downloaded files. For a list of open source software (including libraries) used in the development of this software along with associated copyright and license agreements, see the Riverbed Support site at https//support.riverbed.com. This documentation is furnished AS IS and is subject to change without notice and should not be construed as a commitment by Riverbed. This documentation may not be copied, modified or distributed without the express authorization of Riverbed and may be used only in connection with Riverbed products and services. Use, duplication, reproduction, release, modification, disclosure or transfer of this documentation is restricted in accordance with the Federal Acquisition Regulations as applied to civilian agencies and the Defense Federal Acquisition Regulation Supplement as applied to military agencies. This documentation qualifies as commercial computer software documentation and any use by the government shall be governed solely by these terms. All other use is prohibited. Riverbed assumes no responsibility or liability for any errors or inaccuracies that may appear in this documentation. Riverbed Technology 680 Folsom Street San Francisco, CA Part Number

3 Contents Welcome... 5 About this guide... 5 Audience... 5 Document conventions... 5 Documentation and release notes... 6 Contacting Riverbed SteelConnect Virtual Gateway Overview... 7 Virtual gateway specifications... 7 Before you begin Building a Virtual Gateway Image Installing a virtual gateway Installing a virtual gateway in OpenStack Installing a virtual gateway in VMware Installing a virtual gateway in Hyper-V Installing a virtual gateway in VirtualBox Installing a virtual gateway in XenCenter SteelConnect Virtual Gateway Installation Guide 3

4 Contents 4 SteelConnect Virtual Gateway Installation Guide

5 Welcome About this guide Welcome to the SteelConnect Virtual Gateway Installation Guide. This guide describes how to install SteelConnect virtual gateways on supported virtual machine platforms. Audience This guide is written for storage and network administrators who are familiar with administering and managing WANs using common network protocols such as TCP, CIFS, HTTP, FTP, and NFS. You must also be familiar with the virtualization orchestration tools for the platform into which you are deploying your gateways, and you should be familiar with SteelConnect Manager. This guide includes information relevant to the following products: SteelConnect SteelConnect Manager (SCM) SteelConnect virtual gateway Document conventions This guide uses the following standard set of typographical conventions Convention italics boldface Courier Meaning Within text, new terms and emphasized words appear in italic typeface. Within text, CLI commands, CLI parameters, and REST API properties appear in bold typeface. Code examples appear in Courier font: amnesiac > enable amnesiac # configure terminal < > Values that you specify appear in angle brackets: interface <ip-address> [ ] Optional keywords or variables appear in brackets: ntp peer <ip-address> [version <number>] SteelConnect Virtual Gateway Installation Guide 5

6 Welcome Documentation and release notes Convention Meaning { } Elements that are part of a required choice appear in braces: {<interface-name> ascii <string> hex <string>} The pipe symbol separates alternative, mutually exclusive elements of a choice. The pipe symbol is used in conjunction with braces or brackets; the braces or brackets group the choices and identify them as required or optional: {delete <filename> upload <filename>} Documentation and release notes To obtain the most current version of all Riverbed documentation, go to the Riverbed Support site at If you need more information, see the Riverbed Knowledge Base for any known issues, how-to documents, system requirements, and common error messages. You can browse titles or search for keywords and strings. To access the Riverbed Knowledge Base, log in to the Riverbed Support site at Each software release includes release notes. The release notes identify new features in the software as well as known and fixed problems. To obtain the most current version of the release notes, go to the Software and Documentation section of the Riverbed Support site at Examine the release notes before you begin the installation and configuration process. Contacting Riverbed This section describes how to contact departments within Riverbed. Technical support - If you have problems installing, using, or replacing Riverbed products, contact Riverbed Support or your channel partner who provides support. To contact Riverbed Support, open a trouble ticket by calling RVBD-TAC ( ) in the United States and Canada or outside the United States. You can also go to Professional services - Riverbed has a staff of professionals who can help you with installation, provisioning, network redesign, project management, custom designs, consolidation project design, and custom coded solutions. To contact Riverbed Professional Services, proserve@riverbed.com or go to Documentation - The Riverbed Technical Publications team continually strives to improve the quality and usability of Riverbed documentation. Riverbed appreciates any suggestions you might have about its online documentation or printed materials. Send documentation comments to techpubs@riverbed.com. 6 SteelConnect Virtual Gateway Installation Guide

7 1 SteelConnect Virtual Gateway Overview SteelConnect gateways enable you to connect branch, data center, private cloud, and public cloud networks together to form a unified, software-defined hybrid WAN (SD-WAN). Gateways also provide: basic network services to zones (subnets). policy enforcement. extended reporting. automated VPN with state-of-the-art security. SteelConnect virtual gateways are compatible with many industry-standard hypervisor and cloud platforms: VMware ESXi, Linux KVM, Microsoft Hyper-V, Citrix Xen, Oracle Virtual Box, Amazon Web Services (AWS), and Azure. Generally, the process for deploying a virtual gateway onto a virtual machine involves these steps: 1. Use SteelConnect Manager (SCM) to define basic parameters, such as sites the gateway will connect and, in rare cases, any special configurations needed for AutoVPN, HA, DHCP, or additional uplinks. 2. Use SCM to build and download the gateway image file based on your specified parameters. 3. Use your hypervisor platform s console to upload and install the image onto a virtual machine. 4. Use SCM to verify your gateway is running and connected. Virtual gateway specifications This table lists available virtual gateway specifications. Model Hardware Interfaces VGW-LIC-BW Mbps VPN VGW-LIC-BW GHz 1 GB DRAM 200 MB storage GHz or GHz 8 GB DRAM 2 GB storage 3 x 1 GbE or 1 x 10 GbE WAN ports 8 x LAN ports 3 x 1 GbE or 1 x 10 GbE WAN ports 8 x LAN ports SteelConnect Virtual Gateway Installation Guide 7

8 SteelConnect Virtual Gateway Overview Before you begin Before you begin Because the purpose of a gateway is to bridge multiple networks together, you should have already established networks and network resources prior to deploying your virtual gateways. This document assumes that you have these resources up and running or, at a minimum, preconfigured and ready to deploy: Access to a SteelConnect Manager console. You must have a realm and organization configured as well as the sites, with accompanying zones, that you want to connect with gateways. Virtual machine instances running a supported virtualization platform to host your gateways. Virtual network adapters configured on the virtual machine host that will enable the gateway to access the internet so that it can communicate with SCM and other gateways, and that will enable resources in the gateway s network to communicate with it. Security configuratons that allow the gateway to perform routing service and that provide the gateway access to all required ports. 8 SteelConnect Virtual Gateway Installation Guide

9 2 Building a Virtual Gateway Image SteelConnect Manager is the configuration and orchestration tool for building your virtual gateway images. With your networks defined within SCM, you can begin to build virtual gateway images tailor made for each of your network s sites. To build a virtual gateway image 1. Log in to the SCM console. 2. Choose Appliances > Gateways. 3. Click Add Appliances. 4. Select Create Virtual Gateway. 5. In the Create Virtual Gateway dialog, select the site where you want to deploy the gateway and click Submit. An entry for your gateway is added to the Gateways page. 6. In the Gateways page, select the gateway. The gateway properties page is displayed. 7. Select the Live tab and find Appliance Image toward the bottom of the page. 8. Click (Re-)Build image and select the target hypervisor platform. After the build process is complete, a Download button is displayed. 9. Click Download to download the image to your browser s download location. SteelConnect Virtual Gateway Installation Guide 9

10 Building a Virtual Gateway Image 10 SteelConnect Virtual Gateway Installation Guide

11 3 Installing a virtual gateway This chapter provides procedures for installing a virtual gateway into a virtual machine on these virtual platforms: Installing a virtual gateway in OpenStack on page 11 Installing a virtual gateway in VirtualBox on page 18 Installing a virtual gateway in VMware on page 14 Installing a virtual gateway in XenCenter on page 19 Installing a virtual gateway in Hyper-V on page 17 The procedures in this chapter assume you have obtained a virtual gateway image file, and that you have prepared your networks to receive the gateway into the topology. See Before you begin on page 8 and Building a Virtual Gateway Image on page 9. Installing a virtual gateway in OpenStack Your KVM gateway image comes in.qcow2 format packaged in a downloadable.zip file. After you build, download, and extract your KVM gateway image, you are ready to install it into a virtual machine instance in your OpenStack environment. The installation process involves these activities: Upload the gateway image into your OpenStack environment. Launch a virtual machine instance with the gateway image installed into it. To upload the gateway image file into your OpenStack environment 1. Log in to your OpenStack dashboard. 2. Choose Compute > Images. 3. Click Create Image. The Create an Image dialog box is displayed. 4. Enter a display name for the image. 5. Optionally enter a description. 6. For Image Source, select Image File. SteelConnect Virtual Gateway Installation Guide 11

12 Installing a virtual gateway Installing a virtual gateway in OpenStack 7. Click Choose File. 8. Navigate to your gateway image.qcow2 file and select it. 9. For Kernel, accept the default setting. 10. For Format, select QCOW2 - QEMU Emulator. 11. For Architecture, accept the default setting. 12. Optionally set Minimum Disk (GB) to Optionally set Minimum RAM (MB) to Click Create Image. Your gateway image is added to the list and is now available for use within your OpenStack environment. To launch a KVM virtual machine with your gateway image 1. Click Launch Instance in either of these locations: On the Images page in the Actions column for your gateway image s row. On the Instances page. The Launch Instance dialog box is displayed. 12 SteelConnect Virtual Gateway Installation Guide

13 Installing a virtual gateway in OpenStack Installing a virtual gateway 2. Select the Details tab. 3. Select an availability zone. 4. Enter a name for the instance. 5. For Flavor, select an instance size that meets or exceeds the performance needs for your model of gateway. 6. For Instance Count, enter the number of instances you want to launch. 7. For Instance Boot Source, select Boot from image. The Image Name drop down menu is displayed. 8. For Image Name, select the image you uploaded earlier. See To upload the gateway image file into your OpenStack environment on page Select the Networking tab. 10. Add the provider network first. Order matters because the gateway by default creates an uplink to communicate with SCM on the first network listed. Adding the provider network first ensures that the gateway will communicate with SCM. 11. Add your remaining private networks. 12. Click Launch. SteelConnect Virtual Gateway Installation Guide 13

Installing a virtual gateway Installing a virtual gateway in VMware Installing a virtual gateway in VMware This section includes two procedures: one for using VMware vsphere which requires an.

14 Installing a virtual gateway Installing a virtual gateway in VMware Installing a virtual gateway in VMware This section includes two procedures: one for using VMware vsphere which requires an.ova file and another for using the ESXi console which requires.vmdk and.vmx files. To create a virtual gateway on an ESXi host using VMware vsphere 1. Log in to your VMware vsphere client. 2. Choose File > Deploy OVF Template. 3. Click Browse and use the file browser to select the.ova virtual gateway image file that you downloaded from SCM. See Building a Virtual Gateway Image on page Click Next. 5. Review the template details and click Next. 14 SteelConnect Virtual Gateway Installation Guide

Installing a virtual gateway in VMware Installing a virtual gateway 6. Enter a name for the virtual gateway host and click Next. 7. Select a disk formate and click Next. 8.

15 Installing a virtual gateway in VMware Installing a virtual gateway 6. Enter a name for the virtual gateway host and click Next. 7. Select a disk formate and click Next. 8. Map the networks defined in template (source networks) to networks in your inventory (destination networks). The bridged network must be mapped to a destination network that has access to the internet. The bridged network will be used by the gateway to communicate with SCM. The custom network should be mapped to a private network that will be behind the gateway and does not require internet access. 9. Click Next. 10. Review deployment settings and click Finish. A virtual machine is created and added to the inventory. The virtual gateway image is installed on the virtual machine host. 11. Power on the virtual machine. SteelConnect Virtual Gateway Installation Guide 15

16 Installing a virtual gateway Installing a virtual gateway in VMware To create an ESXi virtual machine with your.vmx and.vmdk gateway image files 1. Log in to your ESXi console. 2. Select Virtual Machines. 3. Click Create / Register VM. The New virtual machine wizard is displayed. 4. Select Register an existing virtual machine and click Next. The Datastore browser is displayed. 5. Select a datastore and select Upload. A file system browser is displayed. 6. Navigate to your virtual gateway.vmx file and select it. 7. In the Datastore browser, select the.vmx file you uploaded in Step 6, and then click Select. 8. Click Next. 9. Click Finish. 10. Select Virtual Machines in the main ESXi console. 11. Select your newly created virtual machine. 12. Choose Actions > Edit Settings. The Edit Settings dialog box is displayed. 13. Choose Add hard disk > Existing hard disk. The Datastore browser is displayed. 14. Select Upload. A file system browser is displayed. 15. Navigate to your gw-vm.vmdk file and select it. 16. In the Datastore browser, select the gw-vm.vmdk file and then click Select. 17. In the Edit settings dialog box, click Save. 16 SteelConnect Virtual Gateway Installation Guide

Installing a virtual gateway in Hyper-V Installing a virtual gateway Installing a virtual gateway in Hyper-V Your Hyper-V gateway image comes as a virtual disk (.

17 Installing a virtual gateway in Hyper-V Installing a virtual gateway Installing a virtual gateway in Hyper-V Your Hyper-V gateway image comes as a virtual disk (.vhd), an XML specification file, and an empty Snapshots folder all packaged in a downloadable.zip file. After you build, download, and extract your Hyper-V gateway image, you are ready to install it into a virtual machine instance in your Hyper-V environment. Prerequisite: Ensure that your Hyper-V environment includes a virtual switch that is configured to connect to the internet. You can configure virtual switches by using the Virtual Switch Manager in the Hyper-V Manager console. Consult Microsoft documentation for details. 1. Log in to your Hyper-V manager console. 2. In the navigation pane on the left, select a virtual machine instance. 3. Choose Action > Import Virtual Machine. The Import Virtual Machine wizard is displayed. 4. Click Next. 5. Select the folder containing the extracted Hyper-V gateway image. That folder should contain these three subfolders: Virtual Hard Disks Snapshots Virtual Machines 6. Click Next. SteelConnect Virtual Gateway Installation Guide 17

Installing a virtual gateway Installing a virtual gateway in VirtualBox 7. Select Virtual Gateway. 8. Click Next. 9. Select Register the virtual machine in place (use the existing unique ID). 10.

18 Installing a virtual gateway Installing a virtual gateway in VirtualBox 7. Select Virtual Gateway. 8. Click Next. 9. Select Register the virtual machine in place (use the existing unique ID). 10. Click Next. 11. Click Finish. The virtual gateway is installed. 12. In the Virtual Machines panel, select the virtual machine instance that hosts your virtual gateway. 13. Choose Action > Setting. 14. Select a network adapter. 15. Select a virtual switch that has connectivity to the internet. 16. Click Apply and then click OK. 17. Optionally adjust Memory and Processor settings. Installing a virtual gateway in VirtualBox Your VirtualBox gateway image comes in.ova format. After you build and download your image, you are ready to import it as an appliance into your VirtualBox environment. 18 SteelConnect Virtual Gateway Installation Guide

19 Installing a virtual gateway in XenCenter Installing a virtual gateway To import your gateway appliance 1. Launch VirtualBox. 2. Choose File > Import Appliance. 3. Navigate to your gateway.ova image file and select it. 4. Click Import. Installing a virtual gateway in XenCenter The XenCenter virtual gateway image comes in.ova format. Ensure that you have added XenServer instances to XenCenter before you begin installing a gateway. To create a Xen virtual machine with your.ova gateway image file 1. Log in to your XenCenter console. 2. Choose File > Import. 3. Enter the pathname to your.ova file, or click Browse to open a file browser and navigate to it. 4. Verify the pathname is correct and then click Next. 5. Accept the terms of the EULA if this screen is displayed. 6. Select the server pool or standalone server where you want to run the virtual machine and then click Next. 7. Select a storage repository and then click Next. 8. Map network interfaces cards (NICs) in the virtual machine to NICs on the XenServer instance and then click Next. 9. Select an OS fixup setting and then click Next. 10. Configure network options for the transfer virtual machine and then click Next. 11. Review your settings and then click Finish. SteelConnect Virtual Gateway Installation Guide 19

20 Installing a virtual gateway Installing a virtual gateway in XenCenter 20 SteelConnect Virtual Gateway Installation Guide

Riverbed Central Management Console Virtual Edition Installation Guide. Version 8.5 September 2013

Riverbed Central Management Console Virtual Edition Installation Guide Version 8.5 September 2013 2013 Riverbed Technology. All rights reserved. Riverbed, Cloud Steelhead, Granite, Interceptor, RiOS, Steelhead,