Tải bản đầy đủ (.pdf) (649 trang)

Tài liệu Deploying Cisco Wide Area Application Services potx

Bạn đang xem bản rút gọn của tài liệu. Xem và tải ngay bản đầy đủ của tài liệu tại đây (10.68 MB, 649 trang )

Deploying Cisco Wide Area
Application Services,
Second Edition
Joel Christner, CCIE No. 15311
Zach Seils, CCIE No. 7861
Nancy Jin
Cisco Press
800 East 96th Street
Indianapolis, IN 46240
Deploying Cisco Wide Area Application Services,
Second Edition
Joel Christner, Zach Seils, Nancy Jin
Copyright© 2010 Cisco Systems, Inc.
Published by:
Cisco Press
800 East 96th Street
Indianapolis, IN 46240 USA
All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means,
electronic or mechanical, including photocopying, recording, or by any information storage and retrieval
system, without written permission from the publisher, except for the inclusion of brief quotations in a
review.
Printed in the United States of America
First Printing January 2010
Library of Congress Cataloging-in-Publication data is on file.
ISBN-13: 978-1-58705-912-4
ISBN-10: 1-58705-912-6
Warning and Disclaimer
This book is designed to provide information about deploying Cisco Wide Area Application Services
(WAAS). Every effort has been made to make this book as complete and as accurate as possible, but no
warranty or fitness is implied.


The information is provided on an “as is” basis. The authors, Cisco Press, and Cisco Systems, Inc. shall have
neither liability nor responsibility to any person or entity with respect to any loss or damages arising from
the information contained in this book or from the use of the discs or programs that may accompany it.
The opinions expressed in this book belong to the author and are not necessarily those of Cisco Systems, Inc.
ii Deploying Cisco Wide Area Application Services
Trademark Acknowledgments
All terms mentioned in this book that are known to be trademarks or service marks have been appropriate-
ly capitalized. Cisco Press or Cisco Systems, Inc., cannot attest to the accuracy of this information. Use of
a term in this book should not be regarded as affecting the validity of any trademark or service mark.
Corporate and Government Sales
The publisher offers excellent discounts on this book when ordered in quantity for bulk purchases or spe-
cial sales, which may include electronic versions and/or custom covers and content particular to your busi-
ness, training goals, marketing focus, and branding interests. For more information, please contact: U.S.
Corporate and Government Sales 1-800-382-3419
For sales outside the United States please contact: International Sales
Feedback Information
At Cisco Press, our goal is to create in-depth technical books of the highest quality and value. Each book
is crafted with care and precision, undergoing rigorous development that involves the unique expertise of
members from the professional technical community.
Readers’ feedback is a natural continuation of this process. If you have any comments regarding how we could
improve the quality of this book, or otherwise alter it to better suit your needs, you can contact us through
email at Please make sure to include the book title and ISBN in your message.
We greatly appreciate your assistance.
Publisher: Paul Boger Cisco Representative: Erik Ullanderson
Associate Publisher: Dave Dusthimer Cisco Press Program Manager: Anand Sundaram
Executive Editor: Mary Beth Ray Copy Editor/Proofreader: Deadline Driven Publishing
Managing Editor: Patrick Kanouse Technical Editors: Jim French, Jeevan Sharma
Senior Development Editor: Christopher Cleveland Indexer: Angie Bess
Project Editor: Ginny Bess Munroe
Editorial Assistant: Vanessa Evans

Cover Designer: Sandra Schroeder
Book Designer: Louisa Adair
Composition: Mark Shirar
iii
Cisco has more than 200 offices worldwide. Addresses, phone numbers, and fax numbers are listed on the Cisco Website at www.cisco.com/go/offices.
CCDE, CCENT, Cisco Eos, Cisco HealthPresence, the Cisco logo, Cisco Lumin, Cisco Nexus, Cisco StadiumVision, Cisco TelePresence, Cisco WebEx, DCE, and Welcome to the Human Network are trademarks; Changing the
Way We Work, Live, Play, and Learn and Cisco Store are service marks; and Access Registrar, Aironet, AsyncOS, Bringing the Meeting To You, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, CCVP, Cisco, the
Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Collaboration Without Limitation, EtherFast, EtherSwitch, Event Center, Fast Step,
Follow Me Browsing, FormShare, GigaDrive, HomeLink, Internet Quotient, IOS, iPhone, iQuick Study, IronPort, the IronPort logo, LightStream, Linksys, MediaTone, MeetingPlace, MeetingPlace Chime Sound, MGX, Networkers,
Networking Academy, Network Registrar, PCNow, PIX, PowerPanels, ProConnect, ScriptShare, SenderBase, SMARTnet, Spectrum Expert, StackWise, The Fastest Way to Increase Your Internet Quotient, TransPath, WebEx, and
the WebEx logo are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0812R)
Americas Headquarters
Cisco Systems, Inc.
San Jose, CA
Asia Pacific Headquarters
Cisco Systems (USA) Pte. Ltd.
Singapore
Europe Headquarters
Cisco Systems International BV
Amsterdam, The Netherlands
About the Authors
Joel Christner, CCIE No. 15311, is a distinguished engineer at StorSimple, Inc. Before
StorSimple, Joel was a technical leader in the Application Delivery Business Unit (ADBU)
at Cisco Systems, Inc., driving the long-term product strategy, system architecture, and
solution architecture for the Cisco Wide Area Application Services (WAAS) product and
the Cisco broader application delivery solution. Previously, Joel was director of product
management for Reconnex Corporation (acquired by McAfee), the industry leader in data
loss prevention (DLP) solutions. Prior to joining Reconnex, Joel was the senior manager of
technical marketing for ADBU at Cisco Systems, Inc, and a key contributor to the WAAS

product line, helping shape the system architecture, craft the product requirements, and
enable a global sales team to sell and support the product in a hyper-competitive market.
Joel is co-author of the first edition of this book and also co-author of Application
Acceleration and WAN Optimization Fundamentals (Cisco Press) with Ted Grevers, Jr,
which outlines architecture and relevance for WAN optimization and application accelera-
tion technologies in today’s dynamic IT organizations.
Zach Seils, CCIE No. 7861, is a technical leader in the Application Delivery Business
Unit (ADBU) at Cisco Systems, Inc. Zach is currently focused on developing the architec-
ture and network integration aspects of next-generation WAN optimization and applica-
tion acceleration platforms. In addition, Zach is frequently engaged with partners and
internal Cisco engineers worldwide to advise on the design, implementation, and trou-
bleshooting of Cisco WAAS. Previously, Zach was a technical leader in the Cisco
Advanced Services Data Center Networking Practice, where he served as a subject matter
expert in Application Networking Services for the largest Enterprise and Service Provider
customers at Cisco. Zach is co-author of the first edition of this book and was also a
technical reviewer of Application Acceleration and WAN Optimization Fundamentals
(Cisco Press) by Joel Christner and Ted Grevers, Jr.
Nancy Jin is a senior technical marketing engineer in the Application Delivery Business
Unit (ADBU) at Cisco Systems, Inc. where she helps develop requirements for product
features, drive sales enablement, and manage technical training development for the Cisco
WAAS product family. Before Cisco, Nancy held senior systems engineering positions
with well-known network and managed service providers, including InterNAP Network
Services, Telstra USA, Sigma Networks, and MCI Worldcom.
iv Deploying Cisco Wide Area Application Services
About the Technical Reviewers
Jim French resides in New Jersey. He has more than 15 years of experience in informa-
tion technologies. A 12-year veteran of Cisco, Jim has been in the position of distin-
guished system engineer since early 2003 and holds CCIE and CISSP certifications. Since
joining Cisco, he has focused on routing, switching, voice, video, security, storage, con-
tent networking, application delivery, and desktop virtualization. Primarily, Jim has

helped customers decrease their upfront capital investments in application infrastructure,
reduce application operational costs, speed application time to market, increase applica-
tion touch points (interactions), increase application availability, and improve application
performance. Working internally with Cisco marketing and engineering, Jim is instrumen-
tal in driving new features, acquisitions, and architectures into Cisco solutions to make
customers successful. Prior to joining Cisco, Jim received a BSEE degree from Rutgers
University College of Engineering in 1987 and later went on to obtain an MBA from
Rutgers Graduate School of Management in 1994. In his spare time, Jim enjoys spending
time with family, friends, running, racquetball, basketball, soccer, traveling, coaching
youth recreation sports, and fathering his amazing son Brian.
Jeevan Sharma, CCIE No. 11529, is a technical marketing engineer at Cisco. He works
with Application Delivery Business Unit (ADBU). Jeevan has more than 9 years of experi-
ence at Cisco and 13 years of overall Information Technology experience. Since joining
Cisco, he has held various technical roles in which he has worked extensively with Cisco
customers, partners, and system engineers worldwide on their network designs, and the
implementation and troubleshooting of Cisco products. Working with engineering and
product management at Cisco, he has been focused on systems and solutions testing, new
feature development and product enhancements to improve the quality of Cisco prod-
ucts, and solutions for customers. Prior to Cisco, Jeevan worked at CMC Limited and
HCL Technologies, where he spent time with customers on their network design and sys-
tems integration. In his spare time, Jeevan enjoys family and friends, tennis, hiking, and
traveling.
v
Dedications
This book is dedicated to my beautiful wife Christina, our family, and to our Lord and
Savior Jesus Christ; through Him all things are possible.
—Joel Christner
This book is dedicated to my love. You have opened my eyes and heart and soul to things
I never knew were possible. I am honored that you have let me in your life. I can never
thank you enough for these things. Your unfaltering love, caring heart, and beautiful

smile are what inspires me to keep going day after day. I love you.
—Zach Seils
This book is dedicated to my most supportive family. To my husband Steve, my parents,
and parents-in-law, thank you for always being there for me. To my lovely sons Max and
Leo, I love you!
—Nancy Jin
vi Deploying Cisco Wide Area Application Services
Acknowledgments
From Joel Christner: To Christina, my beautiful, loving, and patient wife—thank you. I
promise I won’t write another book for a little while. This time, I mean it. I know you’ve
heard THAT before.
I’d like to express my deepest appreciation to you, the reader, for taking the time to read
this book. Zach, Nancy, and I are honored to have been given the opportunity to earn a
spot in your personal library, and we look forward to your feedback.
To Zach and Nancy, for being such great co-authors and good friends. Your expertise and
ability to clearly articulate complex technical concepts are unmatched, and I’m thankful
to have been given the opportunity to collaborate with you. Many thanks to Jim French
and Jeevan Sharma, our technical reviewers. Your attention to detail and focus helped
keep our material accurate and concise. It was a pleasure working with you on this
book—and at Cisco.
A tremendous thank you to the production team at Cisco Press—your guidance has been
great, and Zach, Nancy, and I appreciate you keeping us on track and focused.
From Zach Seils: To my love, I could not have finished this project without your constant
encouragement. Thank you. To Rowan, Evan, and Jeeper, I love you guys more than you
will ever know.
To the technical reviewers Jim French and Jeevan Sharma, Thanks for all your hard work
to make this edition of the book a top-notch technical reference. I know that the quality
of this project increased significantly due to your contributions.
I’d like to give special thanks to my co-authors Joel and Nancy, thanks for making this
project happen and your patience throughout the writing process.

Thanks to the Cisco Press team for your patience and support throughout this project.
From Nancy Jin: My most sincere appreciation goes to Joel Christner, who introduced
me to this wonderful opportunity. It is a great honor to work with such a talented team.
Thank you, Jim French and Jeevan Sharma, for doing such great a job as the technical
reviewers. Thank you Cisco Press for working on this project with us.
vii
Contents at a Glance
Foreword xix
Introduction xx
Chapter 1 Introduction to Cisco Wide Area Application Services (WAAS) 1
Chapter 2 Cisco WAAS Architecture, Hardware, and Sizing 49
Chapter 3 Planning, Discovery, and Analysis 77
Chapter 4 Network Integration and Interception 107
Chapter 5 Branch Office Network Integration 153
Chapter 6 Data Center Network Integration 203
Chapter 7 System and Device Management 249
Chapter 8 Configuring WAN Optimization 319
Chapter 9 Configuring Application Acceleration 401
Chapter 10 Branch Office Virtualization 473
Chapter 11 Case Studies 511
Appendix A WAAS Quickstart Guide 547
Appendix B Troubleshooting Guide 569
Appendix C 4.0/4.1 CLI Mapping 595
Index 599
viii Deploying Cisco Wide Area Application Services
Contents
Foreword xix
Introduction xx
Chapter 1 Introduction to Cisco Wide Area Application Services (WAAS) 1
Understanding Application Performance Barriers 3

Layer 4 Through Layer 7 4
Latency 7
Bandwidth Inefficiencies 10
Throughput Limitations 11
Network Infrastructure 12
Bandwidth Constraints 12
Network Latency 15
Loss and Congestion 19
Introduction to Cisco WAAS 21
WAN Optimization 23
Data Redundancy Elimination 25
Persistent LZ Compression 30
Transport Flow Optimization 30
Secure Sockets Layer (SSL) Optimization 31
Application Acceleration 33
Object and Metadata Caching 36
Prepositioning 38
Read-Ahead 39
Write-Behind 40
Multiplexing 41
Other Features 42
Branch Virtualization 45
The WAAS Effect 46
Summary 48
Chapter 2 Cisco WAAS Architecture, Hardware, and Sizing 49
Cisco WAAS Product Architecture 49
Disk Encryption 50
Central Management Subsystem 51
Interface Manager 51
Monitoring Facilities and Alarms 52

Network Interception and Bypass Manager 52
ix
Application Traffic Policy Engine 53
Virtual Blades 55
Hardware Family 55
Router-Integrated Network Modules 56
NME-WAE Model 302 57
NME-WAE Model 502 57
NME-WAE Model 522 58
Appliances 58
WAVE Model 274 59
WAVE Model 474 59
WAE Model 512 60
WAVE Model 574 60
WAE Model 612 60
WAE Model 674 61
WAE Model 7341 61
WAE Model 7371 61
Licensing 61
Performance and Scalability Metrics 62
Device Memory 63
Disk Capacity 64
Number of Optimized TCP Connections 65
WAN Bandwidth and LAN Throughput 70
Number of Peers and Fan-Out 71
Number of Devices Managed 73
Replication Acceleration 74
Virtual Blades 75
Summary 76
Chapter 3 Planning, Discovery, and Analysis 77

Planning Overview 77
Planning Overview Checklist 78
Requirements Collection and Analysis 78
Site Information 80
Site Types 80
User Population 81
Physical Environment 81
Site Information Checklist 82
x Deploying Cisco Wide Area Application Services
Network Infrastructure 82
WAN Topology 82
Remote Office Topology 85
Data Center Topology 86
Traffic Flows 87
Network Infrastructure Checklist 89
Application Characteristics 90
Application Requirements Checklist 91
Application Optimizer Requirements 91
CIFS Accelerator 91
Advanced Features 92
File Services Utilization 93
File Services Requirements Checklist 93
MAPI Accelerator 94
MAPI Requirements Checklist 95
HTTP Accelerator 95
HTTP Requirements Checklist 95
NFS Accelerator 96
NFS Requirements Checklist 96
Video Accelerator 96
Video Requirements Checklist 96

SSL Accelerator 97
SSL Requirements Checklist 97
Replication Accelerator 98
Platform Requirements 98
Platform Requirements Checklist 98
Scalability Requirements 99
Scalability Requirements Checklist 99
Availability Requirements 99
Availability Checklist 100
Management Requirements 100
Cisco WAAS Central Manager and XML-API 100
SNMP Trap/Inform Routing 101
SNMP Community Strings 101
Syslog Servers 102
Management Requirements Checklist 103
xi
Security Requirements 103
Security Requirements Checklist 105
Virtualization Requirements 105
Virtualization Requirements Checklist 106
Summary 106
Chapter 4 Network Integration and Interception 107
Interface Connectivity 107
Link Aggregation Using PortChannel 111
PortChannel Configuration 112
Using the Standby Interface Feature 115
Standby Interface Configuration 116
Interception Techniques and Protocols 119
Web Cache Communication Protocol 119
WCCP Overview 120

Service Groups 120
Forwarding and Return Methods 123
Load Distribution 125
Failure Detection 126
Flow Protection 128
Graceful Shutdown 128
Scalability 129
Redirect Lists 129
Service Group Placement 130
WCCP Configuration 131
Hardware-Based Platforms 136
Policy-Based Routing 137
Inline Interception 139
Content Switching 143
Application Control Engine 144
Egress Methods 145
Directed Mode 149
Network Integration Best Practices 150
Summary 152
Chapter 5 Branch Office Network Integration 153
In-Path Deployment 153
Nonredundant Branch Office 154
Redundant Branch Office 158
xii Deploying Cisco Wide Area Application Services
Serial Inline Clustering 162
Off-Path Deployment 163
Small to Medium-Sized Nonredundant Branch Office 163
Enhanced Network Module (NME-WAE) 170
Two-Arm Deployment 171
Large Nonredundant Branch Office 174

Off-Path Redundant Topology 181
Small to Medium-Sized Redundant Branch Office 181
Large Redundant Branch Office 190
Policy-Based Routing Interception 196
Cisco IOS Firewall Integration 199
Summary 201
Chapter 6 Data Center Network Integration 203
Data Center Placement 203
Deployment Solutions 212
WCCP 212
Server Load Balancing 227
Scaling Transparent Interception 233
WCCP Scalability 233
ACE Scalability 239
Firewall Integration 240
Summary 247
Chapter 7 System and Device Management 249
System and Device Management Overview 250
Initial Setup Wizard 250
CLI 260
CM Overview 261
Centralized Management System Service 266
Device Registration and Groups 269
Device Activation 270
Device Groups 271
Provisioned Management 273
Role-Based Access Control 274
Integration with Centralized Authentication 278
Windows Authentication 280
TACACS+ Authentication 286

xiii
RADIUS Authentication 288
Device Configuration, Monitoring, and Management 289
Alarms, Monitoring, and Reporting 290
Managing Alarms 290
Monitoring Charts 291
Managing Reports 295
SNMP, Syslog, and System Logs 296
Upgrading and Downgrading Software 302
Backup and Restore of CM Database 305
Programmatic Interfaces and the XML-API 308
Vendors Supporting the XML-API 309
Data Accessible via the XML-API 310
Simple Method of Accessing XML-API Data 313
Summary 317
Chapter 8 Configuring WAN Optimization 319
Cisco WAAS WAN Optimization Capabilities 319
Transport Flow Optimization 320
Data Redundancy Elimination 322
Persistent LZ Compression 324
Automatic Discovery 324
Directed Mode 327
Configuring WAN Optimization 329
Configuring Licenses 329
Enabling and Disabling Features 331
TFO Blacklist Operation 333
Directed Mode 338
Adaptive and Static TCP Buffering 339
Replication Acceleration 345
Application Traffic Policy 347

Application Groups 348
Traffic Classifiers 352
Policy Maps 358
Negotiating Policies 365
EndPoint Mapper Classification 366
Monitoring and Reporting 370
Automatic Discovery Statistics 370
xiv Deploying Cisco Wide Area Application Services
Connection Statistics and Details 373
WAN Optimization Statistics 380
Network Profiling 380
Understanding WAAS Performance Improvement 386
Understanding Device and System Performance and Scalability Metrics
388
Executive Reports 393
Integration with Third-Party Visibility Systems 393
WAN Optimization Monitoring with XML-API 394
Application Response Time Monitoring 394
Summary 399
Chapter 9 Configuring Application Acceleration 401
Application Acceleration Overview 401
CIFS Acceleration 403
Windows Print Acceleration 407
NFS Acceleration 408
MAPI Acceleration 409
HTTP Acceleration 411
SSL Acceleration 412
Video Acceleration 414
Enabling Acceleration Features 415
Additional Video Settings 423

Configuring SSL Acceleration 425
Configuring Disk Encryption 426
Managing the Secure Store 430
Configuring SSL Accelerated Services 432
Using the CM GUI to Configure SSL 433
Using the CLI to Configure SSL 438
Configuring Preposition 447
Acceleration Monitoring and Reporting 453
Acceleration Monitoring Using Device CLI 453
Acceleration Monitoring Using CM GUI 460
Acceleration Monitoring with XML-API 463
CIFSStats 463
SSLStats 466
VideoStats 467
xv
HttpStats 467
MapiStats 468
NfsStats 470
Summary 471
Chapter 10 Branch Office Virtualization 473
Branch Office Virtualization Overview 473
Overview of Virtual Blades 475
Management of Virtual Blades 476
Virtual Blade Hardware Emulation 476
Virtualization Capable WAAS Platforms 477
Creating Virtual Blades 478
Guest OS Boot Image 482
Configuring Virtual Blade Resources 484
Virtual Blade Interface Bridging Considerations 489
Starting Virtual Blades 493

Virtual Blade Console Access 495
Stopping Virtual Blades 496
Changing Virtual Blade Boot Sequence 497
Managing Virtual Blades 500
Backup and Restore of Virtual Blades 501
Monitoring and Troubleshooting Virtual Blades 503
Monitoring Virtual Blades 503
Alarms and Error Messages 505
Troubleshooting Common Issues with Virtual Blades 506
Failure to Boot 506
Blue Screen of Death 507
Hang Conditions 508
Summary 509
Chapter 11 Case Studies 511
Common Requirements 511
Existing WAN Topology 511
Remote Site Profile A 512
Profile A Site Requirements 513
Site Network Topology 513
WAE Placement and Interception 513
xvi Deploying Cisco Wide Area Application Services
WAE Configuration Details 513
WAN Router Configuration Details 516
LAN Switch Configuration Details 517
Remote Site Profile B 519
Profile B Site Requirements 519
Site Network Topology 520
WAE Placement and Interception 520
WAE Configuration Details 520
WAN Router Configuration Details 522

Remote Site Profile C 524
Profile C Site Requirements 524
Site Network Topology 525
WAE Placement and Interception 525
WAE Configuration Details 526
WAN Router 1 Configuration Details 528
WAN Router 2 Configuration Details 530
Data Center Profile 532
Data Center Site Requirements 533
Site Network Topology 533
WAE Placement and Interception 533
WAE Configuration Details 534
Data Center Switch 1 Configuration Details 537
Data Center Switch 2 Configuration Details 540
Application Traffic Policy 544
Summary 545
Appendix A WAAS Quickstart Guide 547
Appendix B Troubleshooting Guide 569
Appendix C 4.0/4.1 CLI Mapping 595
Index 599
xvii
Icons Used in This Book
xviii Deploying Cisco Wide Area Application Services
Command Syntax Conventions
The conventions used to present command syntax in this book are the same conventions
used in the IOS Command Reference. The Command Reference describes these conven-
tions as follows:
■ Boldface indicates commands and keywords that are entered literally as shown. In
actual configuration examples and output (not general command syntax), boldface
indicates commands that are manually input by the user (such as a show command).

■ Italic indicates arguments for which you supply actual values.
■ Vertical bars (|) separate alternative, mutually exclusive elements.
■ Square brackets ([ ]) indicate an optional element.
■ Braces ({ }) indicate a required choice.
■ Braces within brackets ([{ }]) indicate a required choice within an optional element.
Network Cloud Ethernet Connection Serial Line
Connection
File
Server
Laptop
Cisco
IP Phone
Relational
Database
Router
Router with
Firewall
Switch
Router/Switch
Processor
Multilayer
Switch
Firewall Services
Module
Wide-Area
Application Engine
Application Control
Engine
Foreword
I am pleased to write the foreword to the second edition of Deploying Cisco Wide Area

Application Services (WAAS). Over the past few years, WAN Optimization technology
has become a standard component of enterprise networks. The benefits accruing from the
use of the technology for server consolidation, simplified IT management, and improve-
ment of the efficiency of information sharing and network utilization have earned it a
place at the top of customers’ buying priorities.
At Cisco, we have made several innovations to our award-winning WAAS solution that
continues to expand the benefits it offers our customers. These include the use of virtual-
ization technology—that is, Virtual Blades (VB)—to rapidly deploy a network service
“anytime, anywhere,” and a variety of application specific acceleration techniques that we
developed in collaboration with the leading application vendors.
At Cisco, we believe that WAN optimization technology needs to be closely integrated
with the routing/VPN architecture of the enterprise network so that customers can bene-
fit from a single, optimized, shared network fabric that delivers all applications: voice,
video, and data.
The authors combine experience from their work with thousands of customers who have
deployed large installations of WAAS with a deep knowledge of enterprise and service
provider network design, IOS, application-aware networking technologies, and WAAS to
provide a comprehensive set of best practices for customer success. I strongly recom-
mend customers who are interested in WAN optimization and particularly Cisco WAAS
to read this volume. It will help you accelerate your understanding of the solution and the
benefits you can accrue.
George Kurian
Vice President and General Manager, Application Networking and Switching
Cisco Systems, Inc.
xix
Introduction
IT organizations are realizing the benefits of infrastructure consolidation and virtualiza-
tion—cost savings, operational savings, better posture toward disaster recovery—and the
challenges associated. Consolidating infrastructure increases the distance between the
remote office worker and the tools they need to ensure productivity—applications,

servers, content, and more. Application acceleration and WAN optimization solutions
such as Cisco Wide Area Application Services (WAAS) bridge the divide between consol-
idation and performance to enable a high-performance consolidated infrastructure.
This book is the second edition of Deploying Cisco Wide Area Application Services,
and updates the content to reflect the innovations that have been introduced in version
4.1.3 of the Cisco Wide Area Application Services (WAAS) solution, whereas the first
edition was written to version 4.0.13. Along with coverage of the key components of the
Cisco WAAS solution, this edition expands on the concepts introduced in the first edi-
tion to provide a more complete understanding of the solution’s capabilities, how to use
them effectively, and how to manage them. This edition expands upon the first edition to
include coverage for new solution components including application-specific acceleration
techniques, hardware form factors, virtualization, application performance management
(APM), monitoring and reporting enhancements, and workflow enhancements. Additional
technical reference material is provided in the appendices to help familiarize users of ver-
sion 4.0 with changes that have occurred in the command-line interface (CLI) with the
introduction of the 4.1 release. A quickstart guide is provided to help users quickly
deploy in a lab or production pilot environment in order to quantify the benefits of the
solution. A troubleshooting guide can also be found at the end which helps associate dif-
ficulties encountered with potential steps for problem resolution.
Goals and Methods
The goal of this book is to familiarize you with the concepts and fundamentals of sizing
and deploying Cisco WAAS in your environment. The book provides a technical intro-
duction to the product, followed by deployment sizing guidelines, through integration
techniques, and configuration of major components and subsystems. The intent of the
book is to provide you with the knowledge that you need to ensure a successful deploy-
ment of Cisco WAAS in your environment, including configuration tips, pointers, and
notes that will guide you through the process.
Who Should Read This Book?
This book is written for anyone who is responsible for the design and deployment of Cisco
WAAS in their network environment. The text assumes the reader has a basic knowledge of

data networking, specifically TCP/IP and basic routing and switching technologies.
As the WAAS technology continues to evolve, the content in this book will provide a
solid framework to build on. Mastering the topics in this book will ensure that you can
approach any WAAS design project with confidence.
xx Deploying Cisco Wide Area Application Services
How This Book Is Organized
Although this book could be read cover to cover, it is designed to be flexible and allow
you to easily move between chapters and sections of chapters to cover just the material
that you need to work with . Although each of the chapters builds upon the foundation
laid by previous chapters, enough background information is provided in each chapter to
allow it to be a standalone reference work in and of itself. Chapter 1 provides a technical
examination of the Cisco WAAS product and its core capabilities, along with use cases
and the “why you care” about each of the solution components. Chapters 2 through 10
are the core chapters and, although they can be covered in any order, it is recommended
that they be covered sequentially for continuity. Chapter 11 provides a series of use cases
for the Cisco WAAS product family, which can also provide insight into how other cus-
tomers use this technology to meet their business infrastructure requirements.
Appendices are provided to help augment and also summarize what is discussed in the
core chapters. Following is a description of each chapter:
■ Chapter 1, “Introduction to Cisco Wide Area Application Services (WAAS):” This
chapter provides a technical examination and overview of Cisco WAAS and its core
components.
■ Chapter 2, “Cisco WAAS Architecture, Hardware, and Sizing:” This chapter dis-
cusses the Cisco WAAS appliance and router-integrated network module hardware
family, positioning of each of the platforms, and system specifications that impact the
design of a solution relative to the performance and scalability of each component.
■ Chapter 3, “Planning, Discovery, and Analysis:” Planning is a critical part to any
successful WAAS deployment. Spending ample time at the beginning of the project
to understand the requirements, including those imposed by the existing network
environment, is critical for a successful deployment. Chapter 3 gives you a head start

by outlining the key topic areas that should be taken into consideration as you are
planning your WAAS deployment.
■ Chapter 4, “Network Integration and Interception:” This chapter provides an in-
depth review of the network integration and interception capabilities of Cisco
WAAS. The topics discussed in Chapter 4 form the foundation for the design discus-
sions in subsequent chapters.
■ Chapter 5, “Branch Office Network Integration:” This chapter provides a detailed
discussion of the different design options for deploying Cisco WAAS in the branch
office environment. Several design options are discussed, including detailed configu-
ration examples.
■ Chapter 6, “Data Center Network Integration:” This chapter examines the key
design considerations for deploying WAAS in the data center. Sample design models
and configuration examples are provided throughout the chapter. Best practices rec-
ommendations for scaling to support hundreds or thousands of remote sites are also
included.
xxi
■ Chapter 7, “System and Device Management:” This chapter walks you through the
initial deployment of the Central Manager and each of the accelerator WAAS
devices, including the setup script, registration, federated management, and use of
management techniques such as device groups. This chapter also provides a detailed
understanding of integration with centralized authentication and authorization,
alarm management, an introduction to the monitoring and reporting facilities of the
CM, CM database maintenance (including backup and recovery), and the XML-API.
■ Chapter 8, “Configuring WAN Optimization:” This chapter guides you through the
WAN optimization framework provided by Cisco WAAS, including each of the opti-
mization techniques and the Application Traffic Policy manager. This chapter also
examines the configuration of optimization policies, verification that policies are
applied correctly, and an examination of statistics and reports.
■ Chapter 9, “Configuring Application Acceleration:” This chapter focuses on the
application acceleration components of Cisco WAAS, including configuration, verifi-

cation, and how the components interact. This chapter also looks closely at how
these components leverage the underlying WAN optimization framework, how they
are managed, and an examination of statistics and reports.
■ Chapter 10, “Branch Office Virtualization:” This chapter examines the virtualiza-
tion capabilities provided by certain Cisco WAAS appliance devices, including con-
figuration, management, and monitoring.
■ Chapter 11, “Case Studies:” This chapter brings together various topics discussed in
the previous chapters through several case studies. The case studies presented focus
on real-world deployment examples, a discussion of the key design considerations,
options, and final device-level configurations.
■ Appendix A, “WAAS Quickstart Guide:” Appendix A provides a quickstart guide
to help you quickly deploy WAAS in a proof-of-concept lab or production pilot.
■ Appendix B, “Troubleshooting Guide:” Appendix B provides a troubleshooting
guide, which helps you isolate and correct commonly encountered issues.
■ Appendix C, “4.0/4.1 CLI Mapping:” Appendix C provides a CLI mapping quick
reference to help identify CLI commands that have changed between the 4.0 and 4.1
versions.
xxii Deploying Cisco Wide Area Application Services
Chapter 1
Introduction to Cisco Wide Area
Application Services (WAAS)
IT organizations struggle with two opposing challenges: to provide high levels of applica-
tion performance for an increasingly distributed workforce and to consolidate costly
infrastructure to streamline management, improve data protection, and contain costs.
Separating the growing remote workforce from the location that IT desires to deploy
infrastructure is the wide-area network (WAN), which introduces significant delay, packet
loss, congestion, and bandwidth limitations, impeding a users’ abilities to interact with
applications and the data they need in a high-performance manner conducive to produc-
tivity. These opposing challenges place IT organizations in a difficult position as they
must make tradeoffs between performance and cost, as shown in Figure 1-1.

Higher cost, but better performance
for remote office users.
Lower cost, but worse performance
for remote office users.
Primary
Data Center
Remote Offices
Distribution of
Resources
Data Center
Consolidation
Regional Offices
Secondary
Data Center
Home Offices
Figure 1-1 Tradeoffs Between Performance and Cost
Cisco Wide Area Application Services (WAAS) is a solution designed to bridge the divide
between application performance and infrastructure consolidation in WAN environments.
Leveraging appliances, router modules, or software deployed at both ends of a WAN
connection and employing robust optimizations at multiple layers, Cisco WAAS is able
to ensure high-performance access for remote workers who access distant application
2 Deploying Cisco Wide Area Application Services
Cisco WAAS
Data Center
Remote Office
Mobile
Cisco WAAS
Mobile Server
Remote Office
VPN

Cisco WAAS
Remote Office
Cisco WAAS
Cisco WAAS
Cisco WAAS
Optimized Connections
Original Connections
Original Connections
Internet
WAN
Figure 1-2 Cisco WAAS Solution Architecture
infrastructure and information, including file services, e-mail, the Web, intranet and
portal applications, and data protection. By mitigating the performance-limiting factors
of the WAN, Cisco WAAS not only improves performance, but also positions IT organi-
zations to better consolidate distributed infrastructure to better control costs and ensure
a stronger position toward data protection and compliance. Coupled with providing
performance-improving techniques to enable consolidation of branch office infrastruc-
ture into the data center, Cisco WAAS provides an extensive platform for branch office
virtualization, enabling IT organizations to deploy or retain applications and services in
the branch office in a more cost-effective manner.
Figure 1-2 shows the deployment architecture for the Cisco WAAS solution.
The purpose of this book is to discuss the Cisco WAAS solution in depth, including a
thorough examination of how to design and deploy Cisco WAAS in today’s challenging
enterprise networks. This chapter provides an introduction to the performance barriers that
are created by the WAN and a technical introduction to Cisco WAAS and its capabilities.
This chapter also examines the software architecture of Cisco WAAS and outlines how
each of the fundamental optimization components overcomes those application perform-
ance barriers. Additionally, this chapter examines the virtualization capabilities provided
by Cisco WAAS to enable branch infrastructure consolidation while allowing applications
that must be deployed in the branch office to remain deployed in the branch office.

The chapter ends with a discussion of how Cisco WAAS fits into a network-based archi-
tecture of optimization technologies and how these technologies can be deployed in con-
junction with Cisco WAAS to provide a holistic solution for improving application per-
formance over the WAN. This book was written according to version 4.1.3 of the Cisco
WAAS solution, whereas the first edition was written according to version 4.0.13.
Although this book provides thorough coverage of Cisco WAAS, it does not provide

×