Wide-Area Networking Configuration Guide: Wide-Area - Cisco

100 Pages·2016·2.7 MB·English

Wide-Area Networking Configuration Guide: Wide-Area Application
Services, Cisco IOS Release 15M&T
AmericasHeadquarters
CiscoSystems,Inc.
170WestTasmanDrive
SanJose,CA95134-1706
USA
http://www.cisco.com
Tel:[phone]
800553-NETS(6387)
Fax:[phone]
THESPECIFICATIONSANDINFORMATIONREGARDINGTHEPRODUCTSINTHISMANUALARESUBJECTTOCHANGEWITHOUTNOTICE.ALLSTATEMENTS,
INFORMATION,ANDRECOMMENDATIONSINTHISMANUALAREBELIEVEDTOBEACCURATEBUTAREPRESENTEDWITHOUTWARRANTYOFANYKIND,
EXPRESSORIMPLIED.USERSMUSTTAKEFULLRESPONSIBILITYFORTHEIRAPPLICATIONOFANYPRODUCTS.
THESOFTWARELICENSEANDLIMITEDWARRANTYFORTHEACCOMPANYINGPRODUCTARESETFORTHINTHEINFORMATIONPACKETTHATSHIPPEDWITH
THEPRODUCTANDAREINCORPORATEDHEREINBYTHISREFERENCE.IFYOUAREUNABLETOLOCATETHESOFTWARELICENSEORLIMITEDWARRANTY,
CONTACTYOURCISCOREPRESENTATIVEFORACOPY.
TheCiscoimplementationofTCPheadercompressionisanadaptationofaprogramdevelopedbytheUniversityofCalifornia,Berkeley(UCB)aspartofUCB'spublicdomainversionof
theUNIXoperatingsystem.Allrightsreserved.Copyright©1981,RegentsoftheUniversityofCalifornia.
NOTWITHSTANDINGANYOTHERWARRANTYHEREIN,ALLDOCUMENTFILESANDSOFTWAREOFTHESESUPPLIERSAREPROVIDED“ASIS"WITHALLFAULTS.
CISCOANDTHEABOVE-NAMEDSUPPLIERSDISCLAIMALLWARRANTIES,EXPRESSEDORIMPLIED,INCLUDING,WITHOUTLIMITATION,THOSEOF
MERCHANTABILITY,FITNESSFORAPARTICULARPURPOSEANDNONINFRINGEMENTORARISINGFROMACOURSEOFDEALING,USAGE,ORTRADEPRACTICE.
INNOEVENTSHALLCISCOORITSSUPPLIERSBELIABLEFORANYINDIRECT,SPECIAL,CONSEQUENTIAL,ORINCIDENTALDAMAGES,INCLUDING,WITHOUT
LIMITATION,LOSTPROFITSORLOSSORDAMAGETODATAARISINGOUTOFTHEUSEORINABILITYTOUSETHISMANUAL,EVENIFCISCOORITSSUPPLIERS
HAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.
AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.Anyexamples,commanddisplayoutput,network
topologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentional
andcoincidental.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.S.andothercountries.ToviewalistofCiscotrademarks,gotothisURL:
https://www.cisco.com/go/trademarks.Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.Theuseofthewordpartnerdoesnotimplyapartnershiprelationship
betweenCiscoandanyothercompany.(1721R)
©2018CiscoSystems,Inc.Allrightsreserved.
CONTEN TS
CHAPTER 1 Wide-AreaNetworkingOverview 1
FindingFeatureInformation 1
FrameRelay 1
FrameRelay-ATMInternetworking 4
SwitchedMultimegabitDataService 4
LinkAccessProcedure-BalancedandX.25 5
Layer2VPN 6
Layer2TunnelingProtocolVersion3 7
L2VPNPseudowireRedundancy 7
L2VPNInterworking 7
Layer2LocalSwitching 7
WAASExpress 7
CHAPTER 2 ConfiguringWAASExpress 9
FindingFeatureInformation 9
PrerequisitesforWAASExpress 9
RestrictionsforWAASExpress 10
InformationAboutWAASExpress 11
WAASExpressOverview 11
WAASExpress-EnabledTrafficOptimizationProcess 13
KeyServicesofWAASExpress 14
TransportFlowOptimization 14
Compression 15
AutodiscoveryofWAASExpressDevices 16
ApplicationAcceleration 16
CIFS-ExpressAccelerator 17
Wide-AreaNetworkingConfigurationGuide:Wide-AreaApplicationServices,CiscoIOSRelease15M&T
iii
Contents
HTTP-ExpressAccelerator 18
SSL-ExpressAccelerator 20
WAASExpressApplicationPolicies 22
MultipleWANLinks 32
SNMPSupportforWAASExpress 32
TroubleshootingTips 32
HowtoConfigureWAASExpress 33
ConfiguringWANOptimizationParameters 33
DefiningWAASExpressPolicies 34
DefiningClassMaps 34
AssociatingClassMapswithPolicyMaps 36
TroubleshootingTips 38
EnablingWAASExpress 38
TroubleshootingTips 39
ConfiguringUploadDRE 39
ConfiguringCIFS-ExpressAccelerator 40
ConfiguringHTTP-ExpressAccelerator 42
ConfiguringHTTPMetadataCaching 43
ConfiguringSSL-ExpressAccelerator 46
ConfiguringSNMPTrapsforWAASExpress 48
ConfigurationExamplesforWAASExpress 49
Example:AssociatingClassMapswithPolicyMaps 49
Example:ConfiguringWAASExpress 50
Example:ConfiguringCIFS-ExpressAccelerator 51
Example:ConfiguringHTTP-ExpressAccelerator 51
Example:ConfiguringSSL-ExpressAccelerator 51
Example:ConfiguringSNMPTrapsforWAASExpress 52
AdditionalReferences 52
FeatureInformationforWAASExpress 53
CHAPTER 3 ConfiguringCiscoIOSNAMPAforWAASExpress 55
FindingFeatureInformation 55
RestrictionsforCiscoIOSNAMPAforWAASExpress 56
InformationAboutCiscoIOSNAMPAforWAASExpress 56
Wide-AreaNetworkingConfigurationGuide:Wide-AreaApplicationServices,CiscoIOSRelease15M&T
iv
Contents
NetFlowOverview 56
MACEMetrics 56
MACEConfigurationPlane 56
WAASExpress 57
ARTEngine 57
MACEExporter 58
HowtoConfigureCiscoIOSNAMPAforWAASExpress 59
EnablingMACEonanInterface 59
EnablingMACEonWAAS 62
ConfigurationExamplesforCiscoIOSNAMPAforWAASExpress 64
Example:EnablingMACEonanInterface 64
Example:EnablingMACEonWAAS 65
AdditionalReferences 65
FeatureInformationforCiscoIOSNAMPAforWAASExpress 66
CHAPTER 4 ConfiguringAVCtoMonitorMACEMetrics 67
FindingFeatureInformation 67
RestrictionsforConfiguringAVCtoMonitorMACEMetrics 67
InformationaboutConfiguringAVCtoMonitorMACEMetrics 68
NewFunctionalityforMACEPhase2 68
NetFlowOverview 70
MACEMetrics 70
MACEConfigurationPlane 70
WAASExpress 71
ARTEngine 71
MACEExporter 72
HowtoConfigureAVCtoMonitorMACEMetrics 72
ConfiguringMACEforWAAS 72
ConfiguringMACEforanInterface 76
AdditionalReferences 82
FeatureInformationforConfiguringAVCtoMonitorMACEMetrics 82
Wide-AreaNetworkingConfigurationGuide:Wide-AreaApplicationServices,CiscoIOSRelease15M&T
v
Contents
Wide-AreaNetworkingConfigurationGuide:Wide-AreaApplicationServices,CiscoIOSRelease15M&T
vi
1
CH APTER
Wide-Area Networking Overview
CiscoIOSsoftwareprovidesarangeofwide-areanetworkingcapabilitiestofitalmosteverynetwork
environmentneed.CiscoofferscellrelayviatheSwitchedMultimegabitDataService(SMDS),circuit
switchingviaISDN,packetswitchingviaFrameRelay,andthebenefitsofbothcircuitandpacketswitching
viaAsynchronousTransferMode(ATM).LANemulation(LANE)providesconnectivitybetweenATMand
otherLANtypes.Cisco'sWide-AreaApplicationServices(WAAS)Expresssoftwareoffersbandwidth
optimizationandapplicationaccelerationcapabilities.TheCiscoIOSWide-AreaNetworkingConfiguration
Guidepresentsasetofgeneralguidelinesforconfiguringthefollowingsoftwarecomponents:
Thismodulegivesahigh-leveldescriptionofeachtechnology.Forspecificconfigurationinformation,see
theappropriatemodule.
•FindingFeatureInformation,onpage1
•FrameRelay,onpage1
•SwitchedMultimegabitDataService,onpage4
•LinkAccessProcedure-BalancedandX.25,onpage5
•Layer2VPN,onpage6
•WAASExpress,onpage7
Finding Feature Information
Yoursoftwarereleasemaynotsupportallthefeaturesdocumentedinthismodule.Forthelatestcaveatsand
featureinformation,seeBugSearchToolandthereleasenotesforyourplatformandsoftwarerelease.To
findinformationaboutthefeaturesdocumentedinthismodule,andtoseealistofthereleasesinwhicheach
featureissupported,seethefeatureinformationtable.
UseCiscoFeatureNavigatortofindinformationaboutplatformsupportandCiscosoftwareimagesupport.
ToaccessCiscoFeatureNavigator,gotowww.cisco.com/go/cfn.AnaccountonCisco.comisnotrequired.
Frame Relay
TheCiscoFrameRelayimplementationcurrentlysupportsroutingonIP,DECnet,AppleTalk,XNS,Novell
IPX,CLNS,BanyanVINES,andtransparentbridging.
AlthoughFrameRelayaccesswasoriginallyrestrictedtoleasedlines,dialupaccessisnowsupported.For
moreinformation,fordialerprofilesorforlegacydial-on-demandrouting(DDR)seetheseethemodule
Dial-on-DemandRoutingConfiguration.
Wide-AreaNetworkingConfigurationGuide:Wide-AreaApplicationServices,CiscoIOSRelease15M&T
1
Wide-AreaNetworkingOverview
FrameRelay
Toinstallsoftwareonanewrouteroraccessserverbydownloadingsoftwarefromacentralserveroveran
interfacethatsupportsFrameRelay,seethemoduleLoadingandMaintainingSystemImages.
ToconfigureaccessbetweenSystemsNetworkArchitecture(SNA)devicesoveraFrameRelaynetwork,see
themoduleConfiguringSNAFrameRelayAccessSupport.
TheFrameRelaysoftwareprovidesthefollowingcapabilities:
•SupportforthethreegenerallyimplementedspecificationsofFrameRelayLocalManagementInterfaces
(LMIs):
•TheFrameRelayInterfacejointspecificationproducedbyNorthernTelecom,DigitalEquipment
Corporation,StrataCom,andCiscoSystems
•TheANSI-adoptedFrameRelaysignalspecification,T1.617AnnexD
•TheITU-T-adoptedFrameRelaysignalspecification,Q.933AnnexA
•ConformitytoITU-TI-series(ISDN)recommendationasI122,"FrameworkforAdditionalPacketMode
BearerServices":
•TheANSI-adoptedFrameRelayencapsulationspecification,T1.618
•TheITU-T-adoptedFrameRelayencapsulationspecification,Q.922AnnexA
•ConformitytoInternetEngineeringTaskForce(IETF)encapsulationinaccordancewithRFC2427,
exceptbridging.
•Supportforakeepalivemechanism,amulticastgroup,andastatusmessage,asfollows:
•Thekeepalivemechanismprovidesanexchangeofinformationbetweenthenetworkserverandthe
switchtoverifythatdataisflowing.
•Themulticastmechanismprovidesthenetworkserverwithalocaldata-linkconnectionidentifier
(DLCI)andamulticastDLCI.ThisfeatureisspecifictoourimplementationoftheFrameRelay
jointspecification.
•ThestatusmechanismprovidesanongoingstatusreportontheDLCIsknownbytheswitch.
•SupportforbothPVCsandSVCsinthesamesitesandrouters.
SVCsallowaccessthroughaFrameRelaynetworkbysettingupapathtothedestinationendpointsonly
whentheneedarisesandtearingdownthepathwhenitisnolongerneeded.
•SupportforFrameRelayTrafficShapingbeginningwithCiscoIOSRelease11.2.Trafficshapingprovides
thefollowing:
•Rateenforcementforindividualcircuits--Thepeakrateforoutboundtrafficcanbesettothe
committedinformationrate(CIR)orsomeotheruser-configurablerate.
•Dynamictrafficthrottlingonaper-virtual-circuitbasis--Whenbackwardexplicitcongestion
notification(BECN)packetsindicatecongestiononthenetwork,theoutboundtrafficrateis
automaticallysteppeddown;whencongestioneases,theoutboundtrafficrateissteppedupagain.
•Enhancedqueueingsupportonaper-virtualcircuitbasis--Customqueueing,priorityqueueing,and
weightedfairqueueingcanbeconfiguredforindividualvirtualcircuits.
•TransmissionofcongestioninformationfromFrameRelaytoDECnetPhaseIVandCLNS.This
mechanismpromotesforwardexplicitcongestionnotification(FECN)bitsfromtheFrameRelaylayer
toupper-layerprotocolsaftercheckingfortheFECNbitontheincomingDLCI.UsethisFrameRelay
congestioninformationtoadjustthesendingratesofendhosts.FECN-bitpromotionisenabledbydefault
onanyinterfaceusingFrameRelayencapsulation.Noconfigurationisrequired.
Wide-AreaNetworkingConfigurationGuide:Wide-AreaApplicationServices,CiscoIOSRelease15M&T
2
Wide-AreaNetworkingOverview
FrameRelay
•SupportforFrameRelayInverseARPasdescribedinRFC1293fortheAppleTalk,BanyanVINES,
DECnet,IP,andIPXprotocols,andfornativehellopacketsforDECnet,CLNP,andBanyanVINES.It
allowsarouterrunningFrameRelaytodiscovertheprotocoladdressofadeviceassociatedwiththe
virtualcircuit.
•SupportforFrameRelayswitching,wherebypacketsareswitchedbasedontheDLCI--aFrameRelay
equivalentofaMediaAccessControl(MAC)-leveladdress.RoutersareconfiguredasahybridDTE
switchorpureFrameRelayDCEaccessnodeintheFrameRelaynetwork.
FrameRelayswitchingisusedwhenalltrafficarrivingononeDLCIcanbesentoutonanotherDLCItothe
samenext-hopaddress.Insuchcases,theCiscoIOSsoftwareneednotexaminetheframesindividuallyto
discoverthedestinationaddress,and,asaresult,theprocessingloadontherouterdecreases.
TheCiscoimplementationofFrameRelayswitchingprovidesthefollowingfunctionality:
• •SwitchingoveranIPtunnel
•SwitchingoverNetwork-to-NetworkInterfaces(NNI)tootherFrameRelayswitches
•Localserial-to-serialswitching
•SwitchingoverISDNBchannels
•TrafficshapingonswitchedPVCs
•CongestionmanagementonswitchedPVCs
•TrafficpolicingonUser-NetworkInterface(UNI)DCE
•FRF.12fragmentationonswitchedPVCs
•Supportforsubinterfacesassociatedwithaphysicalinterface.ThesoftwaregroupsoneormorePVCs
underseparatesubinterfaces,whichinturnarelocatedunderasinglephysicalinterface.Seethe
ConfiguringFrameRelaymodule.
•Supportforfast-pathtransparentbridging,asdescribedinRFC1490,forFrameRelayencapsulated
serialandHigh-SpeedSerialInterfaces(HSSIs)onallplatforms.
•SupportoftheFrameRelayDTEMIBspecifiedinRFC1315.However,theerrortableisnotimplemented.
TousetheFrameRelayMIB,refertoyourMIBpublications.
•SupportforFrameRelayfragmentation.CiscohasdevelopedthefollowingthreetypesofFrameRelay
fragmentation:
•End-to-EndFRF.12Fragmentation
FRF.12fragmentationisdefinedbytheFRF.12ImplementationAgreement.Thisstandardwasdevelopedto
allowlongdataframestobefragmentedintosmallerpieces(fragments)andinterleavedwithreal-timeframes.
End-to-endFRF.12fragmentationisrecommendedforuseonPVCsthatsharelinkswithotherPVCsthatare
transportingvoiceandonPVCstransportingVoiceoverIP(VoIP).
• •FrameRelayFragmentationUsingFRF.11AnnexC
WhenVoFR(FRF.11)andfragmentationarebothconfiguredonaPVC,theFrameRelayfragmentsaresent
intheFRF.11AnnexCformat.ThisfragmentationisusedwhenFRF.11voicetrafficissentonthePVC,and
itusestheFRF.11AnnexCformatfordata.
SeethemoduleConfiguringVoiceoverFrameRelayintheCiscoIOSVoice,Video,andFaxConfiguration
GuideforconfigurationtasksandexamplesforFrameRelayfragmentationusingFRF.11AnnexC.
• •CiscoProprietaryFragmentation
Wide-AreaNetworkingConfigurationGuide:Wide-AreaApplicationServices,CiscoIOSRelease15M&T
3
Wide-AreaNetworkingOverview
FrameRelay-ATMInternetworking
CiscoproprietaryfragmentationisusedondatapacketsonaPVCthatisalsousedforvoicetraffic.
SeethemoduleConfiguringVoiceoverFrameRelayintheCiscoIOSVoice,Video,andFaxConfiguration
GuideforconfigurationtasksandexamplesforCiscoproprietaryfragmentation.
Frame Relay-ATM Internetworking
CiscoIOSsoftwaresupportstheFrameRelayForumimplementationagreementsforFrameRelay-ATM
Interworking.FrameRelay-ATMInterworkingenablesFrameRelayandATMnetworkstoexchangedata,
despitedifferingnetworkprotocols.TherearetwotypesofFrameRelay-ATMInterworking:
FRF.5FrameRelay-ATMNetworkInterworking
FRF.5providesnetworkinterworkingfunctionalitythatallowsFrameRelayenduserstocommunicateover
anintermediateATMnetworkthatsupportsFRF.5.Multiprotocolencapsulationandotherhigher-layer
proceduresaretransportedtransparently,justastheywouldbeoverleasedlines.
FRF.5describesnetworkinterworkingrequirementsbetweenFrameRelayBearerServicesandBroadband
ISDN(BISDN)permanentvirtualcircuit(PVC)services.
TheFRF.5standardisdefinedbytheFrameRelayForumDocumentNumberFRF.5:FrameRelay/ATMPVC
NetworkInterworkingImplementationAgreement. Forinformationaboutwhichsectionsofthisimplementation
agreementaresupportedbyCiscoIOSsoftware,seeFrameRelay-ATMInterworkingSupportedStandards.
FRF.8FrameRelay-ATMServiceInterworking
FRF.8providesserviceinterworkingfunctionalitythatallowsaFrameRelayendusertocommunicatewith
anATMenduser.Trafficistranslatedbyaprotocolconverterthatprovidescommunicationamongdissimilar
FrameRelayandATMequipment.
FRF.8describesaone-to-onemappingbetweenaFrameRelayPVCandanATMPVC.
TheFRF.8standardisdefinedbytheFrameRelayForumDocumentNumberFRF.8:FrameRelay/ATMPVC
NetworkServiceInterworkingImplementationAgreement. Forinformationaboutwhichsectionsofthis
implementationagreementaresupportedbyCiscoIOSsoftware,seeFrameRelay-ATMInterworkingSupported
Standards.
Switched Multimegabit Data Service
TheCiscoimplementationoftheSMDSprotocolisbasedoncellrelaytechnologyasdefinedintheBellcore
Technicaladvisories,whicharebasedontheIEEE802.6standard.WeprovideaninterfacetoanSMDS
networkusingDS1orDS3high-speedtransmissionfacilities.Connectiontothenetworkismadethrougha
devicecalledanSDSU--anSMDSdigitalserviceunit(DSU).TheSDSUattachestoarouteroraccessserver
throughaserialport.Ontheotherside,theSDSUterminatestheline.
TheimplementationofSMDSsupportstheIP,DECnet,AppleTalk,XNS,NovellIPX,BanyanVINES,and
OSIinternetworkingprotocols,andtransparentbridging.
TheimplementationofSMDSalsosupportsSMDSencapsulationoveranATMinterface.Formoreinformation
andforconfigurationtasks,seeConfiguringATM.
RoutingofAppleTalk,DECnet,IP,IPX,andISOCLNSisfullydynamic;thatis,theroutingtablesare
determinedandupdateddynamically.Routingoftheothersupportedprotocolsrequiresthatyouestablisha
Wide-AreaNetworkingConfigurationGuide:Wide-AreaApplicationServices,CiscoIOSRelease15M&T
4