Riverbed and any Riverbed product or service na me or logo used herein are trademarks of Riverbed. All other trademarks used
herein bel ong to their respectiv e owners. The tradem arks and logos displ ayed herein cannot b e used without the p rior written
consent of Riverbed or their respective owners.
Akamai® and the Akamai wave logo are registered trademarks of Akamai Technologies, Inc. SureRoute is a service mark of
Akamai. Apple and Mac are registered trademarks of Apple, Incorporated in the United States and in other countries. Cisco
is a registered trademark of Cisco Systems, Inc. an d its affiliates in the United States and in other countries. EMC, Symmetrix,
and SRDF are registered trademarks of EMC Corporation and its affiliates in the United States and in other countries. IBM,
iSeries, and AS/400 are registered trademarks of IBM Corporation and its affiliates in the United States and in other
countries. Juniper Networks and Jun os are registered trademarks of Juniper Networks, Incorporat ed in the United States and
other countries. Linux is a t rademark of Linus Torvalds in the United States a nd in other countries. Microsoft, Windows, Vista,
Outlook, and Internet Explorer are trademarks or registered trademarks of Microsoft Corporation in the United States and in
other countries. Oracle and JInitiator are trademarks or registered trademarks of Oracle Corporation in the United States and
in other countries. UNIX is a registered trademark in the United States and in other countries, exclusively licensed through X/
Open Company, Ltd. VMware, ESX, ESXi are trademarks or registered trademarks of VMware, Inc. in the United States and in
other countries.
This product includes Windows Azure Linux Agent developed by the Microsoft Corporation (http://www.microsoft.com/).
Copyright 2016 Microsoft Corporation.
This product includes software developed by the University of California, Berkeley (and its contributors), EMC, and Comtech
AHA Corporation. This product is derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm.
NetApp Manageability Software Development Kit (NM SDK), including any third-party software available for review with such
SDK which can be found at http://communities.netapp.com/docs/DOC-1152, and are included in a NOTICES file included
within the downloaded files.
For a list of open source software (including libraries) used in the development of this software along with associated
copyright and license agreements, see the Riverbed Support site at https//support.riverbed.com.
This documentation is furnished “AS IS” and is subject to change without notice and should not be construed as a
commitment by Riverbed. This documentation may not be copied, modified or distributed without the express authorization
of Riverbed and may be used only in connection with Riverbed products and services. Use, duplication, reproduction, release,
modification, disclosure or transfer of this documentation is restricted in accordance with the Federal Acquisition
Regulations as applied to civilian agencies and the Defense Federal Acquisition Regulation Supplement as applied to military
agencies. This documentation qualifies as “commercial computer software documentation” and any use by the government
shall be governed solely by these terms. All other use is prohibited. Riverbed assumes no responsibility or liability for any
errors or inaccuracies that may appear in this documentation.
Connecting the SteelFusion Edge to your network........................................................... 56
Connecting hypervisor storage network to the Edge VIP .................................................. 57
Running the Configuration Wizard ................................................................................... 58
Verifying you are connected to the appliance .................................................................. 62
Connecting to the Management Console ......................................................................... 64
Verifying WAN optimization ............................................................................................. 65
Checking for speed and duplex errors.............................................................................. 65
Next steps ............................................................................................................................. 66
4SteelFusion Edge Installation and Configuration Guide
Welcome
About this guide
Welcome to the SteelFusion Edge Installation and Configuration Guide. This guide describes how to
install and configure the SteelFusion Edge (Edge appliance). For the appliance specifications, status
lights, and ports, see the SteelFusion Edge Hardware and Maintenance Guide.
Audience
This guide is written for storage and network administrators familiar with administering and managing
WANs using common network protocols such as TCP, CIFS, HTTP, FTP, and NFS.
This guide includes information relevant to these products and product features:
Riverbed SteelFusion Edge (Edge appliance)
Riverbed SteelFusion Core (Core)
Riverbed Optimization System (RiOS)
Riverbed SteelHead CX (SteelHead)
Riverbed SteelHead EX (EX)
SteelCentral Controller for SteelHead (SCC)
Riverbed command-line interface (CLI)
This guide is intended to be used with these documents:
SteelFusion Core Installation and Configuration Guide
SteelFusion Core Management Console User’s Guide
SteelFusion Edge Installation and Configuration Guide 5
WelcomeSafety guide lines
Document conventions
This guide uses the following standard set of typographical conventions.
ConventionMeaning
italicsWithin text, new terms and emphasized words appear in italic typeface.
boldfaceWithin text, CLI commands, CLI parameters, and REST API properties appear in bold typeface.
CourierCode examples appear in Courier font:
amnesiac > enable
amnesiac # configure terminal
< >Values that you specify appear in angle brackets: interface <ip-address>
[ ]Optional keywords or variables appear in brackets: ntp peer <ip-address> [version <number>]
{ }Elements that are part of a required choice appear in braces: {<interface-name> | ascii
<string> | hex <string>}
|The pipe symbol separates alternative, mutually exclusive elements of a choice. The pipe
symbol is used in conjunction with braces or brackets; the braces or brackets group the
choices and identify them as required or optional: {delete <filename> | upload <filename>}
Safety guidelines
Follow the safety precautions outlined in the Safety and Compliance Guide when installing and setting
up your equipment.
Caution: Failure to follow these safety guidelines can result in injury or damage to the equipment. Mishandling of
the equipment voids all warranties. Read and follow safety guidelines and installation instructions carefully.
Many countries require the safety information to be presented in their national languages. If this
requirement applies to your country, consult the Safety and Compliance Guide. Before you install,
operate, or service the Riverbed products, you must be familiar with the safety information. Refer to the
Safety and Compliance Guide if you do not clearly understand the safety information provided in the
product documentation.
Documentation and release notes
To obtain the most current version of all Riverbed documentation, go to the Riverbed Support site at
https://support.riverbed.com.
If you need more information, see the Riverbed Knowledge Base for any known issues, how-to
documents, system requirements, and common error messages. You can browse titles or search for
keywords and strings. To access the Riverbed Knowledge Base, log in to the Riverbed Support site at
https://support.riverbed.com.
Each software release includes release notes. The release notes identify new features in the software
as well as known and fixed problems. To obtain the most current version of the release notes, go to the
Software and Documentation section of the Riverbed Support site at https://support.riverbed.com.
6SteelFusion Edge Installation and Configuration Guide
Contacting RiverbedWelcome
Examine the release notes before you begin the installation and configuration process.
Contacting Riverbed
This section describes how to contact departments within Riverbed.
Technical support - Problems installing, using, or replacing Riverbed products? Contact Riverbed
Support or your channel partner who provides support. To contact Riverbed Support, open a
trouble ticket by calling 1-888-RVBD-TAC (1-888-782-3822) in the United States and Canada or +1
415-247-7381 outside the United States. You can also go to https://support.riverbed.com.
Professional services - Need help with planning a migration or implementing a custom design
solution? Contact Riverbed Professional Services. Email proserve@riverbed.com or go to http://
www.riverbed.com/services/index.html.
Documentation - Have suggestions about Riverbed’s online documentation or printed materials?
Send comments to techpubs@riverbed.com.
SteelFusion Edge Installation and Configuration Guide
7
WelcomeContacting Riverbed
8SteelFusion Edge Installation and Configuration Guide
1
Introducing the SteelFusion Edge
Appliance
This chapter provides an overview of the SteelFusion Edge appliance, including an overview of the
hardware platform, new features, hardware and software dependencies, and migrating data from the
SteelHead EX appliance. It includes these sections:
“Introducing SteelFusion” on page 9
“How SteelFusion works” on page 10
“New features in 5.0” on page 14
“Hardware and software dependencies” on page 14
“Upgrading the Edge appliance” on page 19
Introducing SteelFusion
SteelFusion is a converged infrastructure solution, encompassing all branch services such as server,
storage, networking, and WAN optimization. It is a dual-ended system that comprises two logical
components: SteelFusion Edge and SteelFusion Core.
Core is a physical or virtual appliance in the data center that mounts all storage (LUNs in iSCSI mode or
exports in NFS mode) that need to be made available to applications and servers at a remote location
from the back-end storage array. Edge provides a virtualized environment that hosts the branch
application servers. Core appliances communicate across the WAN with the Edge appliances at the
branch.
SteelFusion delivers local user performance while enabling data centralization, instant recovery, and
lower total operating costs. Unlike traditional converged infrastructures, SteelFusion enables stateless
branch services. You can access applications that run locally in the branch while the primary data is
centralized in the data center, allowing applications to run in a stateless mode.
You can extend a data center storage array to a remote location, even over a low-bandwidth link.
SteelFusion provides the following functionality:
Innovative storage optimization ensures that you can centrally manage data storage while keeping
that data available to business operations in the branch, even in the event of a WAN outage.
A local authoritative cache ensures LAN-speed reads and fast cold writes at the branch.
Integration with Microsoft Volume Shadow Copy Service enables consistent point-in-time data
snapshots and seamless integration with backup applications.
SteelFusion Edge Installation and Configuration Guide 9
Introducing the SteelFusion Edge ApplianceHow SteelFusion works
Integration with the snapshot capabilities of the storage array enables you to configure
application-consistent snapshots through the SteelFusion Core Management Console.
iSCSI/block mode only - Integration with industry-standard Challenge-Handshake Authentication
Protocol (CHAP) authenticates users and hosts.
A secure vault protects sensitive information using AES 256-bit encryption.
Solid-state disks (SSDs) that guarantee data durability and performance.
An active-active high-availability (HA) deployment option for Core ensures the availability of
storage for remote sites.
Customizable reports provide visibility to key utilization, performance, and diagnostic information.
How SteelFusion works
The SteelFusion product family simplifies infrastructure in remote offices and branch offices, and you
manage it centrally from a data center. SteelFusion can operate in either of two storage delivery modes.
One mode utilizes iSCSI or Fibre Channel protocols to interface with block storage arrays in the data
center and iSCSI to host servers at the branch office; the other mode uses the NFS protocol to interface
with file servers at the data center and host servers at the branch. The SteelFusion product family is
typically deployed in conjunction with SteelHeads and is composed of the following:
SteelFusion Core - A physical or virtual Core is deployed in the data center alongside SteelHeads
and a storage array. The Core mounts LUNs (in iSCSI mode) or exports (in NFS mode) provisioned for
the branch offices from a storage array and manages transfers between this storage and the
Edges. Additionally, in iSCSI mode Core-v can mount LUNs via Fibre Channel. When deployed in an
NFS configuration, Core mounts exports from the centralized file server.
Note: NFS/file mode is only supported on the physical Core model 3500 and the Core-v model VGC-1500.
SteelFusion Edge - Edge refers to the branch component of the SteelFusion solution. The Edge
hosts two distinct functions, or nodes:
– WAN optimization
– Hypervisor platform with VMware vSphere
When deployed in an iSCSI configuration, the Edge presents itself to application servers in the
branch as an iSCSI storage portal. From the portal, the application server uses iSCSI to mount the
iSCSI LUNs that are projected across the WAN from the data center. Edge can also host local LUNs
for use as temporary storage that are not projected from the data center: for example, temporary or
local copies of software repositories.
When deployed in an NFS configuration, Edge presents NFS version 3 storage exports projected
from the data center as local exports to applications and servers at the local branch.
LUN (iSCSI mode only) - A unique identifier associated with individual storage devices or
collections of storage devices used with SCSI, iSCSI, or Fibre Channel interfaces.
Export (NFS/file mode only) - A unique identifier associated with file systems or directories
located on a backend storage array that are accessible to the Core. NFS exports are mounted on
the Core and then mapped to the Edge at the branch. When the Core is running in NFS/file mode, it
uses the NFS protocol to talk to the storage array and presents exports to the branches. The terms
NFS mode and File mode can be used interchangeably.
10SteelFusion Edge Installation and Configuration Guide
How SteelFusion worksIntroducing the SteelFusion Edge Appliance
Branch server - The branch-side servers access data from the SteelFusion system instead of a
local storage device. This server can also run as a Virtual Services Platform (VSP) VM on the local
Edge.
Blockstore - A persistent and authoritative local cache of storage on the Edge that caches the
writes on LUNs/exports presented by the Edge. Blockstore also stores cached portions of the
LUNs/exports to quickly serve read requests.
Figure 1-1. Typical SteelFusion deployment
For detailed information about SteelFusion and how it works, see the SteelFusion Edge Management
Console User’s Guide and the SteelFusion Design Guide.
These terms will help you understand SteelFusion and its features.
Virtualization - All software and hardware concerning the installation, deployment, and
management of the hypervisor and virtual machines (VMs). Virtualization encompasses both RiOS
and hypervisor hardware nodes.
Note: Virtualization is not available in Virtual Edge.
Hypervisor - VMware virtualization software running on bare-metal hardware that creates and
runs VMs.
Note: Hypervisor functionality is not available in Virtual Edge.
Virtual Services Platform (VSP) - Software that runs as a part of the RiOS networking and
optimization software. VSP manages, communicates with, and reports on the hypervisor.
RiOS node - Hardware node that manages and controls WAN optimization, direct attached storage,
and VSP.
Hypervisor node - Hardware node where hypervisor-based hardware resources and software
virtualization are deployed.
Interconnects - Internal TCP network used to communicate to and from RiOS and the hypervisor
nodes.
SteelFusion Edge appliance architecture
The Edge hardware platform contains two distinct computing nodes within a single chassis: the RiOS
node and the hypervisor node.
SteelFusion Edge Installation and Configuration Guide
11
Introducing the SteelFusion Edge ApplianceHow SteelFusion works
The physical node design provides true hardware resource separation and isolation. These two
computing nodes are connected through Gigabit Ethernet interconnects that allow both nodes to
communicate for management, networking, and storage data. Each node has its own resources. For
example each node has its own sensors for temperature, voltage, and dual in-line memory modules
(DIMMs).
RiOS node
The RiOS node incorporates SteelHead RiOS 9.5.0a features to provide WAN optimization. All features
available with RiOS 9.5.0a are available on the Edge appliance. You manage the storage and networking
components using the SteelFusion Management Console, and you utilize VMware vSphere Client or
vCenter to interact with the hosted VMs.
The RiOS node also includes the VSP management software for virtualization.
iSCSI/block mode - the RiOS node provides BlockStream iSCSI storage for the hypervisor
datastores. You configure the space allotted to the BlockStream iSCSI storage using the
SteelFusion Edge Management Console Hypervisor Installer.
NFS/file mode - the RiOS node provides NFS storage for the hypervisor datastores. You configure
the space allotted to the NFS storage using the SteelFusion Edge Management Console Hypervisor
Installer.
For detailed information about the Hypervisor Installer, see the SteelFusion Edge Management Console User’s Guide.
Hypervisor node
The hypervisor node is a bare-metal virtualization platform that enables you to run multiple VMs on the
Edge appliance. With the hypervisor node, you can consolidate multiple basic services in the branch
such as Active Directory (AD), Domain Name Service (DNS), print server, and file server. You install and
run VMs directly from the hypervisor node of the Edge appliance.
The hypervisor uses the ESXi 5.5 Patch 9 software as the virtualization platform. The hypervisor is
included in the Edge appliance and does not require a separate download. After you install the Edge
appliance, you set up the hypervisor using the Edge Management Console Installer.
You set up and configure VMs through the VMware vSphere Client or a licensed vCenter. You must install
the VMware vSphere Hypervisor Client, which enables monitoring and management of a single instance
of the ESX or ESXi server. You can download the vSphere applications from the VMware website, or you
can download the vSphere Client from the hypervisor host.
The hypervisor node enables you to connect to the hypervisor serial console using the RiOS CLI
command hypervisor console. You can also perform debugging by connecting via Secure Shell (SSH) to
the hypervisor baseboard management controller (BMC) internal IP address. For detailed information,
see the SteelFusion Command-Line Interface Reference Manual and the SteelFusion Edge Hardware and Maintenance Guide.
Networking interfaces
The Edge hardware platform includes:
12SteelFusion Edge Installation and Configuration Guide
How SteelFusion worksIntroducing the SteelFusion Edge Appliance
Management/Base interfaces - The primary (PRI) and auxiliary (AUX) interfaces provide
management network ports for the RiOS node, and can also be used for connecting Edge to Core. In
NFS/file mode, these interfaces can also be used for an Edge VIP interface or even high availability.
You can view these interfaces in the Networking > Networking: Base Interfaces page.
Bypass interfaces - A preinstalled network interface card (NIC) (LANX_Y, WANX_Y) provides
SteelHead bypass ports on the RiOS node and is used for optimization. You can view these
interfaces in the Networking > Networking: In-Path Interfaces page.
Data/Storage interfaces - The storage ports (eth0_0, eth0_1) on the RiOS node provide external
storage or high availability connections, and in NFS/file mode they can be used for an Edge VIP
interface. You can view these interfaces in the Networking > Networking: Data Interfaces page.
Hypervisor data interfaces - For the hypervisor node, any of the four data ports labeled gbe0_0,
gbe0_1, gbe0_2, and gbe0_3 can be used for virtualization depending on the hypervisor
configuration. You configure these ports during the initial configuration using the Edge
Management Console Hypervisor Installer and manage them using VMware vSphere Client or
vCenter.
Edge architecture in iSCSI mode
In iSCSI mode, the RiOS node provides storage for the hypervisor node via the Gigabit Ethernet
interconnects using iSCSI.
SteelFusion Edge Installation and Configuration Guide
13
Introducing the SteelFusion Edge ApplianceNew features in 5.0
Edge architecture in NFS mode
In NFS mode, the RiOS node provides storage for the hypervisor node via the external interfaces using
NFSv3. The RiOS node hosts an NFS fileserver. The hypervisor node hosts an instance of VMware
vSphere for running one or more virtual machines. The vSphere datastore is mounted as a fileshare
exported from the NFS fileserver located in the RiOS node. You must have external connectivity
between hypervisor gbeX_X interfaces and your designated Edge VIP interface.
This section provides an overview of the new features available in Edge version 5.0.
Support for Network File System (NFS) - Version 5.0 augments SteelFusion storage protocol
support with NFS. End-to-end native NFS support enables optimization of network file systems
across SteelFusion. When teamed with SteelFusion Core, Edge can now present NFS version 3
storage exports projected from the data center as local exports to applications and servers at the
local branch.
Optional hypervisor upgrade to vSphere ESXi 6.0 Patch 3 - The default virtualization platform for
Edge 5.0 is vSphere ESXi version 5.5 Patch 9. Edge continues to support ESXi 5.5 Update 3a, and an
option exists to install ESXi 6.0 Express Patch 4 or ESXi 6.0 Patch 3.
Parity with RiOS version 9.5 - Version 5.0 includes features in RiOS 9.5 and SteelFusion Core 5.0.
Hardware and software dependencies
This section describes the hardware and software dependencies for the appliance. It includes these
topics:
“Hardware and software dependencies” on page 15
“SCC compatibility” on page 16
“Available blockstore space” on page 17
“VMware license requirements” on page 17
14SteelFusion Edge Installation and Configuration Guide
Hardware and software dependenciesIntroducing the SteelFusion Edge Appliance
“Firewall requirements” on page 18
“SNMP-based management compatibility” on page 18
“Ethernet network compatibility” on page 19
Hardware and software dependencies
This table summarizes the hardware and software requirements for the Edge appliance.
For a RiOS, Storage Edge, SteelFusion Core, and vSphere release matrix, go to the Riverbed Knowledge
Base article at https://supportkb.riverbed.com/support/index?page=content&id=S:S27472.
Riverbed componentHardware and software requirements
SteelFusion Edge19-inch (483-mm) two-post or four-post rack.
SteelFusion Edge Management ConsoleAny computer that supports a web browser with a
color image display.
The SteelFusion Edge Management Console has been
tested with Mozilla Firefox Extended Support Release
version 38.0, Google Chrome, and Microsoft Internet
Explorer 11.0.
JavaScript and cookies must be enabled in your web
browser.
BlockStream, SteelFusion Core Management ConsoleVersion 5.0 (Cores in NFS/file mode)
Version 4.5 or later (Cores in iSCSI/block mode)
Note: Software versions for Core and Edge cannot be
more than two major releases apart. For example, 4.0
and 4.2 are compatible, but 4.0 and 4.3 are not
compatible.
SteelCentral Controller for SteelHeadVersion 9.5.1
SteelFusion Edge Installation and Configuration Guide
15
Introducing the SteelFusion Edge ApplianceHardware and software dependencies
Riverbed componentHardware and software requirements
VMware vSphere HypervisorESXi version 5.5 Patch 9
Optionally, 6.0 Express Patch 4, 6.0 Patch 3, or 5.5
Update 3a. These optional versions require you to
download the image from Riverbed Support at https://
support.riverbed.com.
You can download the vSphere applications from the
VMware website, or you can download the vSphere
Client from the hypervisor host.
The Edge appliance ships with a Riverbed-specific
VMware vSphere Hypervisor license for 5.5 Patch 9.
This license enables basic hypervisor functions such
as monitoring and management of a single instance of
the ESXi or ESXi server.
VMware vCenter Server5.5 Patch 9 provides a centralized platform for
managing your VMware vSphere environments.
The vCenter Server requires a paid license that can be
purchased from a VMware reseller.
SCC compatibility
To manage SteelFusion Edge 5.0 appliances, you need to use SCC 9.5.1. Earlier versions of the SCC do
not support 5.0 SteelFusion Edges. For details about SCC compatibility across versions, see the
SteelCentral Controller for SteelHead Installation Guide.
Note: As a result of updating the version of SSH, older releases of SCC cannot connect to newer software on
managed appliances. If you plan to upgrade your Edge appliances to 5.0, first upgrade the SCC to 9.2 (or later) to
avoid disconnections. See Knowledge Base article S27759 for complete details.
16SteelFusion Edge Installation and Configuration Guide
Hardware and software dependenciesIntroducing the SteelFusion Edge Appliance
Available blockstore space
This section describes the available blockstore, usable storage, and the maximum pinnable storage.
This value refers to the
space after RAID
configuration for the
entire blockstore.
2100750690621
22001,5001,3811,243
31003,5003,2242,902
32007,4006,8186,136
510015,20014,00512,604
Note: The Edge Management Console Installer displays the available physical storage using base 2 (that is, 1024
bytes = 1 KB) rather than base 10 (that is, 1000 bytes = 1 KB). The base 10 value is used in this table and the
specification sheet for the appliance. Please be aware of the slight difference between these values when you are
calculating the available space for your deployment. For example, when 2.6 TB is displayed in the Edge Installer it
represents 2.9 TB of available space.
This value refers to the
space available to store
LUNs after accounting for
the metadata. The
metadata uses
approximately 8% of the
size of the blockstore.
This value refers to the
maximum space that can
be reserved by pinned
LUNs. This is lower than
usable storage to ensure
that a minimum amount
of space is reserved for
writes.
VMware license requirements
These Riverbed licenses are mandatory for virtualization in the appliance:
VSPBASE - The VSP base license to manage virtualization and VSP operations. This software that is
part of RiOS software.
VSPESXI - License to install the embedded ESXi software.
After installing and connecting the Edge appliance, the Riverbed Licensing Portal is automatically
contacted to retrieve and install the required license keys onto the Edge appliance. If either of the
licenses have expired or are about to expire, an alarm is triggered in the Management Console Alarms
page. For detailed information about Riverbed licensing, see “Automatic licensing” on page 24.
The Edge appliance ships with an embedded VMware ESXi vSphere hypervisor license. This license is
the free bare-metal hypervisor that virtualizes servers so you can consolidate your applications on less
hardware. This license enables basic hypervisor functions without support for more advanced vSphere
features such as vCenter, vMotion, high availability, and so on. If you need additional features beyond
what the embedded vSphere Hypervisor license provides, you will need to purchase a license upgrade
through your VMware reseller.
SteelFusion Edge Installation and Configuration Guide
17
Introducing the SteelFusion Edge ApplianceHardware and software dependencies
There are two types of licenses that you can purchase to enable vCenter support:
vSphere license - This license is installed into the vSphere instance of the Edge appliance. This
license controls the infrastructure capabilities of the hypervisor, for example: vMotion, evMotion,
distributed resource scheduler (DRS), high availability (HA), fault tolerance (FT). It does not restrict
how many appliances can be connected to vCenter. You can purchase this license and add it to your
ESXi instance in vCenter.
vCenter Server license - This license is installed onto the vCenter server. There are two levels for
this license: foundation and standard. The foundation license provides management tools for up to
three vSphere hosts. The standard license provides large scale management of VMware vSphere
deployments for up to 1000 vSphere hosts. If you want to manage more than three ESXi hosts, you
must purchase the vCenter Server license.
We recommend purchasing a vCenter Server license as it enables monitoring and management of
multiple ESX, ESXi, and GSX servers. In addition, the vCenter Server license provides infrastructure
services such as vMotion, evMotion, DRS, HA, and FT.
Changing your VMware license
If you prefer to use your own VMware license rather than the Riverbed embedded vSphere Hypervisor
license, you can change the VMware license when you run the Hypervisor Installer in the Edge
Management Console.
You can access the Hypervisor Installer either from the Management Console Dashboard or from
Virtualization > Installer: Installer.
For detailed information about changing your VMware license in the Hypervisor Installer, see the
SteelFusion Edge Management Console User’s Guide.
Firewall requirements
We recommend that you deploy the Edge appliance behind your firewall. The ports 7800 and 7810 must
be open.
SNMP-based management compatibility
The Edge appliance supports a proprietary Riverbed MIB accessible through SNMP. SNMP 1 (RFCs
1155, 1157, 1212, and 1215), SNMP 2c (RFCs 1901, 2578, 2579, 2580, 3416, 3417, and 3418), and SNMP
3 are supported, although some MIB items might be accessible only through SNMP 3 and SNMP 2.
SNMP support allows the Edge to be integrated into network management systems such as Hewlett
Packard OpenView Network Node Manager, BMC Patrol, and other SNMP-based network management
tools.
18SteelFusion Edge Installation and Configuration Guide
Upgrading the Edge applianceIntroducing the SteelFusion Edge Appliance
Ethernet network compatibility
The Edge appliance supports these networking standards. An Edge appliance with a Gigabit Ethernet
card supports jumbo frames on in-path and primary ports.
Ethernet standardIEEE standard
Ethernet Logical Link Control (LLC)IEEE 802.2 - 1998
Fast Ethernet 100BASE-TX IEEE 802.3 - 2008
Gigabit Ethernet over Copper 1000BASE-T (All copper
interfaces are autosensing for speed and duplex.)
Gigabit Ethernet over Fiber 1000BASE-SX (LC connector)IEEE 802.3 - 2008
Gigabit Ethernet over Fiber 1000BASE-LXIEEE 802.3 - 2008
Gigabit Ethernet over Fiber 10GBASE-LR Single ModeIEEE 802.3 - 2008
IEEE 802.3 - 2008
The Edge appliance ports support these connection types and speeds.
PortSpeed
Primary (PRI)10/100/1000BASE-T, autonegotiating
Auxiliary (AUX)10/100/1000BASE-T, autonegotiating
LAN10/100/1000BASE-T or 1000BASE-SX or
1000BASE-LX or 10GBASE-LR or 10GBASE-SR,
depending on configuration
WAN10/100/1000BASE-T or 1000BASE-SX or
1000BASE-LX or 10GBASE-LR or 10GBASE-SR,
depending on configuration
The Edge appliance supports VLAN Tagging (IEEE 802.3 - 2008). It does not support the Inter-Switch
Link (ISL) protocol.
The Edge appliance autonegotiates speed and duplex mode for all data rates and supports full duplex
mode and flow control (IEEE 802.3 – 2008).
Upgrading the Edge appliance
This section describes how to upgrade your software. It includes these sections:
“Upgrading RiOS Edge software” on page 20
“Upgrading the ESXi 5.5 Patch 9 hypervisor” on page 21
“Upgrading to optional hypervisor versions” on page 21
“Migrating data from the SteelHead EX appliance” on page 22
“Downgrading the software” on page 22
These instructions assume that you are upgrading an Edge appliance running 4.0 or later.
SteelFusion Edge Installation and Configuration Guide
19
Introducing the SteelFusion Edge ApplianceUpgrading the Edge appliance
Upgrading RiOS Edge software
Follow these steps to upgrade your software. These instructions assume you are familiar with the Edge
appliance and the Management Console.
Software versions for SteelFusion Core and SteelFusion Edge cannot be more than two major releases
apart. For example, 4.0 and 4.2 are compatible, but 4.0 and 4.3 are not compatible.
To up gra d e t h e R iOS Ed g e s o ft w are
1. Download the software image from the Riverbed Support site to a location such as your desktop.
Optionally, you can download a delta image directly from the Riverbed Support site to the
SteelHead. The delta downloaded image includes only the incremental changes. The smaller file
size means a faster download and less load on the network.
2. Log in to the Edge Management Console using the Administrator account (admin).
3. Choose Administration > Maintenance: Software Upgrade and click Add Image to expand the page.
4. Complete the configuration as described in this table.
From Riverbed Support SiteSelect this option and select the target release number from the Version
drop-down list. The system uploads the new image from the Riverbed
Support site immediately after you click Add Image.
If you receive an “entitlement error” warning, you may not have the correct
credentials for the Riverbed Support site. Contact Riverbed Support at
https://support.riverbed.com.
From Local FileSelect this option and specify the path, or click Browse to go to the local file
directory.
If you specify a file to upload in the Local File text box, the image is uploaded
immediately; however, the image is installed and the system is rebooted at
the time you specify.
FilenameSpecify a new name for the added image. The default name is
hyp_image.img.iso.
Add ImageClick to add the new image to the Hypervisor Images list.
5. Choose Administration > Maintenance: Reboot/Shut Down and click Reboot.
The appliance can take a few minutes to reboot because the software is configuring the recovery
flash device. Do not press Ctrl+C, unplug, or otherwise shut down the system during this first boot.
There is no indication displayed during the system boot that the recovery flash device is being
configured.
20SteelFusion Edge Installation and Configuration Guide
Upgrading the Edge applianceIntroducing the SteelFusion Edge Appliance
After the reboot, the Home page, Software Upgrade, and Help pages of the Management Console
display the software version upgrade.
Upgrading the ESXi 5.5 Patch 9 hypervisor
SteelFusion Edge 5.0 includes the ESXi 5.5 Patch 9 software image—it does not require a separate
download.
For detailed information about upgrading and reinstalling the hypervisor image, see the SteelFusion Edge Management Console User’s Guide.
Upgrading to optional hypervisor versions
Optionally, in SteelFusion Edge 5.0 you can install the ESXi 6.0 Patch 3 or 6.0 Express Patch 4
hypervisors. These images are not preloaded in the SteelFusion Edge software image—you must
download them from Riverbed Support at https://support.riverbed.com.
After you download and save the image(s) locally, you add them using the Management Console. For
detailed information about adding an image, see the SteelFusion Edge Management Console User’s Guide.
Upgrading to ESXi 6.0 Patch 3 or ESXi 6.0 Express Patch 4 is optional.
Known issues with ESXi 6.0 Express Patch 4
Upgrading the hypervisor to ESXi 6.0 Express Patch 4 includes these known issues:
ESXi 5.5 Patch 9 is a later version than the included versions of 6.0 Update 2, and therefore if you
attempt to upgrade from ESXi 5.5 Patch 9 to ESXi 6.0 you must remove the conflicting vSphere
Installation Bundle.
Workaround: If you are installing ESXi for the first time and would like to use version 6.0, run the
installer and choose the ESXi version instead of attempting to upgrade. If an upgrade is required,
see the VMware Knowledge Base article 2140962.
You need to use vCenter or vSphere 6.0 to manage SteelFusion Edge 5.0 virtual machines. If you
use vCenter 5.5 or earlier to manage ESXi, you must upgrade vCenter to version 6.0 or later before
upgrading the SteelHead EX appliance.
iSCSI/block mode only: iSCSI connections fail and datastores become inaccessible when the iSCSI
Qualified Name (IQN) changes. This problem can occur if you change the IQN of an iSCSI adapter
while iSCSI sessions on the adapter are still active.
Workaround: When you change the IQN of an iSCSI adapter, no session should be active on that
adapter. Remove all iSCSI sessions and all targets on the adapter before changing the IQN.
Active Directory settings are not retained. The Active Directory settings configured in the ESXi host
before upgrade are not retained when the host is upgraded to ESXi 6.0 Express Patch 4.
Workaround: Add the host to the Active Directory Domain after the upgrade if the preupgrade ESXi
version is 5.1 or later. Do not add the host to the Active Directory Domain after upgrade if the preupgrade ESXi version is ESXi 5.0.x.
SteelFusion Edge Installation and Configuration Guide
21
Introducing the SteelFusion Edge ApplianceUpgrading the Edge appliance
Hosts that were previously added to the domain are no longer joined to the domain. When
upgrading from vSphere 5.5 to vSphere 6.0 for the first time, the Active Directory configuration is
not retained. After the upgrade, rejoin the hosts to the vCenter Server domain.
Migrating data from the SteelHead EX appliance
Note: iSCSI/block mode only.
There is no upgrade path from SteelHead EX appliance to the Edge appliance as they are different
products that run on different hardware platforms.
If your SteelFusion deployment previously consisted of a BlockStream-enabled SteelHead EX
appliance and a SteelFusion Core appliance, and if your data is backed by a SteelFusion Core, you can
migrate your data to the SteelFusion Edge appliance.
To migrate the data, you unmap the LUN from the SteelHead EX appliance and rejoin that LUN to the
new Edge appliance.
Downgrading the software
Note: iSCSI/block mode only. In NFS/file mode, downgrade from version 5.0 is not supported.
If you want to downgrade to a previous version of the SteelFusion Edge software, you must downgrade
to a version of the software that has previously run on your machine.
When you downgrade the software, RiOS reverts the ESXi version to the version supported in the
installation image. If you upgraded the ESXi using vCenter (separate from the EX installation), the
system cannot restore the state and ESXi starts with the initial configuration.
RiOS appliances cannot use an encrypted RiOS data store with an earlier RiOS version, unless the
release is an update (9.0.x). For example, an encrypted RiOS data store created in 9.0.1 would work with
9.0.3, but not with 9.1.
Before downgrading to an earlier software version, you must select none as the encryption type, clear
the RiOS data store, and restart the service in the Management Console Data Store page. After you clear
the RiOS data store, the data is removed from persistent storage and cannot be recovered. For detailed
information, see the SteelFusion Edge Management Console User’s Guide.
22SteelFusion Edge Installation and Configuration Guide
2
Managing Riverbed Licenses
This chapter describes the Riverbed licensing methods and how to manage Riverbed licenses. It
includes these sections:
“Riverbed licensing methods” on page 23
“Automatic licensing” on page 24
“Manual licensing using the Riverbed Licensing Portal” on page 25
Riverbed licensing methods
A license is a string issued by Riverbed that embeds information that ties the license to data to prevent
tampering. After you install the license, the system saves it in the configuration database and enables
the functionality associated with the license. Riverbed employs these licensing methods:
Automatic licensing - After you connect your appliance to the network, the appliance automatically
contacts the Riverbed Licensing Portal and downloads and installs the licenses.
Manual licensing - You can manually fetch and activate licenses for Riverbed products using the
Riverbed Licensing Portal. To retrieve license keys, follow the instruction at https://
licensing.riverbed.com/index.htm.
Token me t ho d - You use tokens to activate Riverbed software, such as the Virtual SteelCentral
Controller for SteelHead Mobile, and Virtual Core. For detailed information, see the respective
installation guides for these products.
Factory licensing - You can have all your Riverbed licenses installed at the factory for a small fee.
SteelFusion Edge Installation and Configuration Guide 23
Managing Riverbed LicensesAutomatic licensing
Automatic licensing
Automatic licensing allows the appliance, once connected to the network, to automatically contact the
Riverbed Licensing Portal to retrieve and install license keys onto the appliance. Automatic licensing
simplifies inventory management and provides an automated mechanism of fetching licenses for
Riverbed products without having to manually activate individual appliances and licenses.
If you are behind a firewall, you can retrieve licenses at the Riverbed Licensing Portal using the email
option or by downloading an XML file to the appliance. For detailed information, see “Retrieving
licenses using the Riverbed Licensing Portal” on page 25.
Automatic licensing also works over a web proxy. For details on setting up a web proxy, see the
SteelHead Management Console User’s Guide.
Note: If automatic licensing fails, an error message is displayed in the Management Console. Go to the Riverbed
Licensing Portal and follow the instructions for retrieving your licenses.
To view licenses on a new appliance
Connect the new appliance to the network.
The appliance automatically contacts the Riverbed Licensing Portal, which downloads and installs
the licenses. The Management Console Licensing page displays a success message, or the Alarm
Status page reports an actionable error message.
To replace expired licenses
Purchase new downloadable licenses to replace the expired license.
At the time of the next scheduled automatic license fetch, the appliance automatically contacts
the Riverbed License Portal and downloads the new licenses. The Management Console Licensing
page displays a success message, or the Alarm Status page reports an actionable error message.
You do not need to delete the expired license. The system uses the license with the latest
expiration date.
To fetch a license on demand
1. In the Management Console, choose Configure > Maintenance: Licenses to display the Licenses
page.
2. Click Fetch Updates Now.
The Management Console Licensing page displays a success message, or the Alarm Status page
reports an actionable error message.
Note: Only administrator users can fetch and install licenses. For detailed information on administrator and
monitor users, see the SteelFusion Edge Management Console User’s Guide.
24SteelFusion Edge Installation and Configuration Guide
Manual licensing using the Riverbed Licensing PortalManaging Riverbed Licenses
Manual licensing using the Riverbed Licensing Portal
You can retrieve and manage Riverbed licenses using the Riverbed Licensing Portal. After you retrieve
a license from the Riverbed Licensing Portal, you must install it.
Retrieving licenses using the Riverbed Licensing Portal
The Riverbed Licensing Portal requires a unique identifier to retrieve a license, such as a serial number,
a license request key (activation code), or a token. These steps describe how to retrieve a license using
a serial number.
To retrieve your licenses for an appliance using a serial number
1. Go to the License page in the Riverbed Licensing Portal at https://licensing.riverbed.com/
index.htm.
2. Enter your appliance serial number as your unique product identifier.
The serial number is on a label located on your appliance. It also appears in the Help tab of the
Management Console.
3. Click Next.
4. Provide the contact information for the license, including your name and email.
5. Click Submit to display license information for all the products purchased with the serial number
you specified.
6. Click a serial number to see license details.
7. Optionally, if you are behind a firewall, type the email address in the Email address text box and click
Email Keys to have the license keys emailed to you.
Note: Click New Search to look for additional license records.
Installing your license keys
Because each license key is generated for a specific appliance, ensure that you install your license key
on the appropriate appliance.
To install a license using the Management Console
1. Connect to the Management Console. For details, see the SteelFusion Edge Management Console
User’s Guide.
2. Choose Administration > Maintenance: Licenses to display the Licenses page.
3. Click + Add New License to expand the page.
4. Copy and paste the license key provided by the Riverbed Licensing Portal into the text box. Separate
multiple license keys with a space, Tab, or Enter.
SteelFusion Edge Installation and Configuration Guide
25
Managing Riverbed LicensesManual licensing using the Riverbed Licensing Portal
5. Click Add to display the license in the table.
To install a license using the CLI
1. Connect to the CLI of the appliance and enter configuration mode.
For details, see the SteelFusion Command-Line Interface Reference Manual.
2. At the system prompt, enter these commands:
license install <license-key>
write memory
<license-key> is the license key you retrieved from the Riverbed Licensing Portal.
26SteelFusion Edge Installation and Configuration Guide
3
Installing and Configuring the SteelFusion
Edge Appliance (iSCSI/Block Mode)
This chapter describes how to install and configure the SteelFusion Edge appliance in iSCSI/block
mode. It includes these sections:
“Deploying the SteelFusion Edge appliance” on page 27
“Checking your inventory” on page 28
“Preparing your site for installation” on page 29
“Powering on the appliance” on page 34
“Configuring SteelFusion Edge appliances” on page 35
“Next steps” on page 46
Caution: Read and follow the safety guidelines described in the Safety and Compliance Guide. Failure to follow
these safety guidelines can result in damage to the equipment.
For detailed information about installing the appliance to a rack, see the SteelFusion Edge Hardware and Maintenance Guide.
Deploying the SteelFusion Edge appliance
You deploy the Edge appliance in a physical in-path or virtual in-path deployment. This guide describes
how to install the Edge appliance in an in-path deployment.
Position your Edge appliances as close as possible to your network endpoints—that is, branch office
Edge appliances should be as close to your clients as possible, and data center SteelFusion Cores
should be as close to your storage arrays as possible to maximize performance and minimize latency.
Ideally, Edge appliances optimize only traffic that is initiated or terminated at their local site. We
recommend that you deploy the Edge appliances where the LAN connects to the WAN, and not where
any LAN-to-LAN or WAN-to-WAN traffic can pass through (or be redirected to) the Edge appliance.
SteelFusion Edge Installation and Configuration Guide 27
Installing and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)Checking your inventory
For detailed information about your deployment options and best practices for deploying Edge
appliances, see the SteelFusion Design Guide.
Figure 3-1. SteelFusion Edge in-path deployment
You can also deploy the Edge appliance for high availability (HA) where Edge and Core appliances are
deployed as pairs so that if either peer fails, the surviving Edge or Core appliances can take over. We
strongly recommend that you deploy Edge appliances as pairs in an HA cluster configuration. For
detailed information about HA, see the SteelFusion Edge Management Console User’s Guide and the SteelFusion Design Guide.
Figure 3-2. SteelFusion Edge high availability deployment
Checking your inventory
Your shipping carton contains these items:
The Edge appliance
One standard Ethernet straight-through cable
One standard Ethernet crossover cable
One serial null-modem cable
One or two power cables (depending on your order)
Aside from country-specific requirements, all appliances ship with the same power cable. The
power cable has an IEC 60320 C13 plug on one end (to connect to the Edge appliance) and a
country-specific plug that fits the wall socket for that country. If the appliance has two power
supplies, it ships with two suitable cables.
28SteelFusion Edge Installation and Configuration Guide
Preparing your site for installationInstalling and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)
You must always connect the Edge appliance using either the cable in the accessories box or
another cable that is approved for use by the IEC in the country in which the appliance is
connected.
You cannot connect the Edge appliance directly to multiphase outlets. You must use a rack power
distribution unit (PDU) or power strip that provides the appropriate three-prong outlet (hot/
neutral/ground). For details, see the Knowledge Base solution number S13425.
One Phillips screwdriver
Rails
One mounting kit
Documentation kit
If any items are damaged or missing, notify Riverbed Support at https://support.riverbed.com for
replacement or repair.
Preparing your site for installation
The Edge appliance ships completely assembled, with all the equipment parts in place and securely
fastened.
Site requirements
Before you install the Edge appliance, make sure that your site meets these requirements:
It is a standard electronic environment where the ambient temperature does not exceed 104ºF
(40
º
C) and the relative humidity does not exceed 80% (noncondensing). For detailed information,
see the SteelFusion Edge Hardware and Maintenance Guide.
Ethernet connections are available within the standard Ethernet limit.
There is available space on a two-post or four-post 19-inch rack. For details about installing the
Edge to a rack, see the Rack Installation Guide or the printed instructions that were shipped with
the appliance.
A clean power source is available, dedicated to computer devices and other electronic equipment.
The rack is a standard 19-inch Telco-type mounting rack.
Before you begin, consult the SteelFusion Edge Hardware and Maintenance Guide for detailed
information about how to install your model to a rack.
Note: We recommend that you use a four-post mounting rack for 2U appliances.
Note: If your rack requires special mounting screws, contact your rack manufacturer.
SteelFusion Edge Installation and Configuration Guide
29
Installing and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)Preparing your site for installation
SteelFusion Edge ports
This table summarizes the ports that connect the Edge appliance to your network.
PortDescription
PRI
(Primary)
AUX
(Auxiliary)
LAN 1_0 (1U)
LAN 0_0 (2U)
The primary port connects the Edge appliance to a LAN switch. This interface enables
you to connect to the Edge Management Console and the SteelFusion Edge CLI.
This interface can also be used to connect the SteelFusion Core through the RiOS
node, in-path interface.
The primary and auxiliary ports cannot share the same network subnet.
The auxiliary port provides an additional management interface to a secondary
network such as a management VLAN. You can connect a computer directly to the
appliance with a crossover cable, enabling you to access the CLI or Management
Console.
To use external IPMI access for 1U and 2U appliances, the AUX port must be enabled.
IPMI access does not require the AUX port to have an IP address configured but it does
require that the port is enabled. Disabling AUX disables remote management;
enabling remote management without enabling AUX leaves remote management
inaccessible. You enable the AUX port in the Management Console or the CLI. For
detailed information about connecting and monitoring the appliance using the BMC,
see the SteelFusion Edge Hardware and Maintenance Guide.
This port connects the LAN port of the Edge appliance to the LAN switch using a
straight-through cable.
The Edge appliance uses one or more in-path interfaces to provide Ethernet network
connectivity for optimized traffic. Each in-path interface comprises two physical
ports: the LAN port and the WAN port. Use the LAN port to connect the Edge appliance
to the internal network of the branch office.
If the Edge appliance is deployed between two switches, both the LAN and WAN ports
must be connected with straight-through cables.
WAN 1_0 (1U)
WAN 0_0 (2U)
eth0_0, eth0_1These ports provide additional iSCSI interfaces for storage traffic to external servers
30SteelFusion Edge Installation and Configuration Guide
This port connects the WAN port of the Edge appliance to the WAN router using a
crossover cable.
The WAN port is the second of two ports that compose the in-path interface. The WAN
port is used to connect the Edge appliance toward WAN-facing devices such as a
router, firewall, or other equipment located at the WAN boundary.
If you require additional in-path interfaces or require 10GigE or Fiber connectivity, you
can install a bypass NIC in the RiOS node expansion slot.
when used by the RiOS node.
The ports are connected to a LAN switch using a straight-through cable.
These ports can also provide multipath I/O (MPIO) redundancy or SteelFusion Edge
high availability (HA). In an HA deployment, use these ports for BlockStream heartbeat
and synchronization between SteelFusion Edge HA peers. For detailed information
about HA deployments, see the SteelFusion Design Guide.
If you require additional iSCSI connectivity in an HA deployment, install a nonbypass
NIC in the RiOS node expansion slot.
Preparing your site for installationInstalling and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)
PortDescription
gbe0_0, gbe0_1,
gbe0_2, gbe0_3
RIOS COMA RiOS serial RJ45 communication port that manages the RiOS node. Serial settings:
HYP COMA hypervisor serial RJ45 communication port used to manage the hypervisor node.
USB 1, USB 2Optional Hypervisor universal serial bus (USB) ports.
VGAOptional Hypervisor VGA connector. This port is useful for BIOS, POST, and PXE
These 1-Gbps ports provide hypervisor node connectivity.
When configured for use by the hypervisor node, these ports provide LAN connectivity
to external clients. The ports are connected to a LAN switch using a straight-through
cable.
If you require additional connectivity for the hypervisor node, you can install a
nonbypass NIC in the hypervisor expansion slot. The SteelFusion Edge models 2100
and 2200 do not have additional hypervisor expansion slots. The SteelFusion Edge
models 3100, 3200, and 5100 have two hypervisor expansion slots.
9600 bps, 8 data bit, 1 stop bit, no parity.
Connects the serial cable to a terminal device. You establish a serial connection to a
terminal emulation program for console access to the configuration wizard and the
Edge CLI.
Serial settings: 9600 bps, 8 data bit, 1 stop bit, no parity.
debugging.
Figure 3-3 and Figure 3-4 show the locations of the ports on the rear of the 1U and 2U appliances.
Figure 3-3. 1U back panel
SteelFusion Edge Installation and Configuration Guide
31
Installing and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)Preparing your site for installation
Figure 3-4. 2U back panel
Figure 3-5 shows typical branch office connections for the Edge
Figure 3-5. Typical SteelFusion Edge port connections 1U appliance
appliance
.
Network interface cards and expansion slots
The 1U appliance is equipped with a preinstalled four-port 1-Gigabit Ethernet copper bypass NIC. The
1U appliance has an additional slot for an add-on NIC for a total of two slots. Both slots are assigned to
the RiOS node.
The 2U appliance is equipped with a preinstalled four-port 1-Gigabit Ethernet copper bypass NIC with
an integrated LSI expander NIC for bypass support. The 2U appliance has five additional slots for addon NICs for a total of six slots. Slot 1, 2, 3, and 4 are assigned to the RiOS node, and slots 5 and 6 are
assigned to the hypervisor node.
32SteelFusion Edge Installation and Configuration Guide
Preparing your site for installationInstalling and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)
This table summarizes the NIC deployment options for the Edge appliance.
ModelPCI
expansion
slots
SFED 21002in-pathin-path or storage——
SFED 22002in-pathin-path or storage——
SFED 31006in-pathin-path or storagein-path or storagedata
SFED 32006in-pathin-path or storagein-path or storagedata
SFED 51006in-pathin-path or storagein-path or storagedata
Slot 1 (always
populated prior
to shipment)
Slot 2
RiOS node
Slot 3 and 4
RiOS node
Slot 5 and 6
hypervisor node
The NIC deployment options are defined as follows:
in-path - A bypass NIC used by the RiOS node for WAN optimization traffic.
storage - A multiport data NIC used by the RiOS node, enabling iSCSI access for storage traffic to
and from servers external to the Edge appliance, or providing additional heartbeat interfaces in an
HA deployment.
data - A multiport data NIC used by the hypervisor node, enabling LAN access for hypervisor node
traffic.
Note: A multiport data NIC can be used for storage or data—it is the slot that determines its function.
For detailed information about installing additional NICs, see the SteelFusion Edge Hardware and Maintenance Guide and the SteelFusion Design Guide.
Avoiding duplex mismatch
Before you begin the configuration process, ensure that your LAN and WAN interfaces have the same
duplex settings.
The Edge automatically negotiates duplex settings. If one end of the link is set to autonegotiate and the
other end of the link is not set to autonegotiate, the duplex settings on the network device default to
half-duplex. This duplex mismatch passes traffic, but it causes late collisions and results in degraded
optimization. To achieve maximum optimization, set your network devices to 100 and full.
To avoid duplex mismatches, manually configure the duplex settings on your:
router.
switch.
Edge appliance WAN interface.
Edge appliance LAN interface.
Edge appliance primary interface.
These conditions can indicate a duplex mismatch:
Choose Administration > Diagnostics: System Logs to view the System Logs page, errors for sends,
receives, cyclic redundancy check (CRC), and short sends are displayed.
You cannot connect to an attached device.
SteelFusion Edge Installation and Configuration Guide
33
Installing and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)Powering on the appliance
You can connect to a device when you choose autonegotiation, but you cannot connect to that
same device when you manually set the speed or duplex.
Slow performance across the network.
Completing the configuration checklist
This table lists the parameters you specify to complete the initial configuration of the Edge appliance.
Be prepared to provide values for these parameters.
ApplianceParameterYour v a lue
SteelFusion Edge
primary interface)
(the
Hostname
IP address
Netmask
Default gateway (the WAN
gateway)
DNS IP address
Domain name for the
appliance
Administrator password
SMTP server IP address
Events and failures
notification email address
Primary interface speed
Primary interface duplex
In-path deploymentsIn-path interface IP address
In-path netmask
In-path gateway
In-path: LAN interface speed
In-path: LAN interface duplex
In-path: WAN interface speed
In-path: WAN interface duplex
Powering on the appliance
This section describes how to connect the AC power and how to power on the appliance.
Caution: In European electrical environments, you must ground (earth) the green/yellow tab on the power cord or
risk electrical shock.
34SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)
To power on the appliance
1. If your appliance has a master power switch, ensure that it is in the off position.
2. Plug the AC power cord into the appliance.
Note: If your model has multiple power supplies, you must plug in all the power cords or you will hear an alarm.
Figure 3-6. Connecting the AC power
3. Plug the AC power cord into an uninterrupted AC power source.
4. Press the appliance power switch on.
If the Edge appliance does not immediately power on, press the power switch off, and then press
the power switch on again.
5. Check the status lights on the appliance.
For detailed information about the status lights, see the SteelFusion Edge Hardware and Maintenance Guide.
Configuring SteelFusion Edge appliances
The Edge appliance is physically in the direct path between clients and servers. The clients and servers
continue to see client and server IP addresses.
Connecting the SteelFusion Edge to your network
You use standard Ethernet straight-through and crossover cables to connect to your network in an inpath configuration. This table summarizes the correct cable usage when you are connecting LAN and
WAN ports or when you are connecting data ports.
DeviceCable
Edge appliance to a switchStraight-through (for example, primary and LAN ports on the appliance to the
Edge appliance to a routerCrossover (for example, WAN port on the appliance to the WAN router)
SteelFusion Edge Installation and Configuration Guide
LAN switch)
35
Installing and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)Configuring SteelFusion Edge appliances
DeviceCable
Edge appliance to a hostCrossover (for example, LAN and WAN ports on the Edge appliance bypass
cards act like host interfaces during normal operation)
Edge appliance to an Edge
appliance
Crossover (for example, in high availability deployments)
For detailed information about cabling best practices, see the SteelFusion Design Guide.
To connect the appliance to your network
1. Plug the straight-through cable into the primary port of the appliance and the LAN switch. The
primary port can be any port on your LAN switch configured to connect to a host.
Figure 3-7. Connecting the primary port to the LAN switch
2. Identify the straight-through cable that connects your LAN switch to your WAN router. Unplug the
end connected to the WAN router.
Figure 3-8. Disconnecting the WAN router
3. Plug the straight-through cable that you disconnected from the WAN router into the LAN port of the
appliance.
Figure 3-9. Connecting the LAN switch to the LAN port
36SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)
4. Using the provided crossover cable, plug the cable into the WAN port of the appliance and the WAN
router.
Figure 3-10. Connecting the WAN port to the WAN router
Note: If you have additional four-port bypass cards, repeat Step 1 through Step 4. For detailed information about
installing additional bypass cards, see the Network and Storage Card Installation Guide and the SteelFusion Edge
Hardware and Maintenance Guide.
Connecting virtual machines to the Edge appliance
The Edge appliance supports virtual machines (VMs) on the hypervisor node of the appliance. The ports
are labeled gbe0_0, gbe0_1, gbe0_2, and gbe0_3.
To connect the hypervisor to the system
1. Plug the straight-through cable into one of the hypervisor ports: gbe0_0, gbe0_1, gbe0_2, or
gbe0_3.
2. Plug the straight-through cable into any switch that is connected to the hypervisor node.
After you complete the configuration process for the Edge appliance, connect to the Management
Console to configure your hypervisor using the Hypervisor Installer. You can access the Hypervisor
Installer from the Management Console Dashboard or by choosing Virtualization > Installer: Installer.
The hypervisor must be installed before you can host VMs.
Note: Before you launch the Hypervisor Installer, if you are using a SteelFusion Core for storage, you should
configure and connect it before continuing with the installer. A SteelFusion Core allows you to access remote
storage at your data center and make that storage available to your hypervisor. For details, see the SteelFusion Core Management Console User’s Guide.
Running the Configuration Wizard
To access the configuration wizard and the SteelFusion Edge CLI, you establish a serial connection
using a terminal emulator program.
SteelFusion Edge Installation and Configuration Guide
37
Installing and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)Configuring SteelFusion Edge appliances
To run the configuration wizard
1. Plug the serial cable into the RiOS COM port and a terminal.
Figure 3-11. Connecting to the SteelFusion Edge
2. Start your terminal emulation program, such as Tera Term Pro. The terminal device must have these
settings:
Baud rate: 9600 bps
Data bits: 8
Parity: none
Stop bits: 1
vt100 emulation
No flow control
If you are using the Edge appliance with a terminal server, the terminal server must use hardware
flow control for the port connected to the Edge appliance.
We recommend that you connect the console port to a device that logs output to help identify
problems with the system.
3. Log in as administrator user (admin) and enter the default password (password). For example:
login as: admin
Sent username "admin"
password: password
The configuration wizard automatically starts after you have entered the login and default
password. After you have established a connection, you configure the Edge appliance using the
configuration wizard.
4. If you have a SteelCentral Controller for SteelHead (SCC) appliance installed in your network to
manage multiple Edge appliances, you can use it to automatically configure them:
38SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)
Do you want to auto-configure using a SCC? no
If you answer yes, you are prompted for the SCC hostname or IP address. The hostname or IP
address is used to contact the SCC. The default value is riverbedcmc. If you enter no, the wizard
continues.
Note: If you mistakenly answer yes, to return to the wizard from the CLI, enter the configuration jump-start
command from configuration mode. For detailed information, see “To restart the configuration wizard” on page 41.
5. To start the configuration wizard, type yes at the system prompt and press Enter.
Do you want to use the configuration wizard for initial configuration? yes
Note: Press ? for help; press Ctrl+B to go back to the previous step.
6. Complete the configuration wizard steps on the branch office Edge appliance as described in this
table.
Wizard promptDescriptionExample
Step 1: Host name?Enter the hostname for the Edge
appliance.
Step 2: Use DHCP on the
primary interface?
You are given the option to enable
the DHCP to automatically assign an
IP address to the primary interface
for the Edge appliance.
We recommend that you do not set
DHCP.
The default value is no.
Step 3: Primary IP address?Enter the IP address for the Edge
appliance.
Step 4: Netmask?Enter the netmask address.
Step 5: Default gateway?Enter the default gateway for the
Edge appliance.
Step 6: Primary DNS server?Enter the primary DNS server IP
address.
Step 7: Domain name?Enter the domain name for the
network where the Edge appliance is
to reside.
If you set a domain name, you can
enter hostnames in the system
without the domain name.
hostname? amnesiac
Use DHCP? no
Primary IP address? 10.10.10.6
Netmask? 255.255.0.0
Default gateway? 10.0.0.1
Primary DNS server? 10.0.0.2
Domain name? example.com
Step 8: Admin password?We strongly recommend that you
SteelFusion Edge Installation and Configuration Guide
change the default administrator
password at this time. The password
must be a minimum of six
characters.
The default administrator password
is password.
Admin password? xxxyyy
39
Installing and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)Configuring SteelFusion Edge appliances
Wizard promptDescriptionExample
Step 9: SMTP server?Enter the name of the SMTP server.
External DNS and external access
for SMTP traffic is required for email
notification of events and failures to
function.
Note: Make sure that you provide a
valid SMTP server to ensure that the
email notifications for events and
failures are sent to the correct
destinations.
Step 10: Notification email
address?
Enter a valid email address to which
notification of events and failures
are to be sent.
Step 11: Set the primary
interface speed?
Enter the speed on the primary
interface (that is, the Edge
appliance). Make sure that this value
matches the setting on your router or
switch.
The default value is auto.
Step 12: Set the primary
interface duplex?
Enter the duplex mode on the
primary interface. Make sure that
this value matches the setting on
your router or switch. The default
value is auto.
SMTP server? natoma
Notification email address?
example@xample.com
Set the primary interface speed?
[auto] auto
Set the primary interface
duplex? [auto] auto
Step 13: Would you like to
activate the in-path
configuration?
Enter yes at the system prompt to
configure in-path support. An inpath configuration is a configuration
in which the Edge appliance is in the
direct path of the client and server.
Step 14: In-Path IP address?Enter the in-path IP address for the
Edge appliance.
Step 15: In-Path Netmask?Enter the in-path netmask address.
Step 16: In-Path Default
gateway?
Step 17: Set the in-path: LAN
interface speed?
Enter the in-path default gateway
(the WAN gateway).
Enter the in-path, LAN interface
speed. Make sure that this value
matches the setting on your router or
switch.
The default value is auto.
Step 18: Set the in-path: LAN
interface duplex?
Enter the in-path, LAN duplex value.
Make sure that this value matches
the setting on your router or switch.
The default value is auto.
Would you like to activate the
in-path configuration? yes
In-Path IP address? 10.11.11.6
In-Path Netmask? 255.255.0.0
In-Path Default Gateway?
10.11.11.16
Set the in-path: LAN interface
speed? [auto] auto
Set the in-path: LAN interface
duplex? [auto] auto
40SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)
Wizard promptDescriptionExample
Step 19: Set the in-path: WAN
interface speed?
Enter the in-path, WAN interface
speed. Make sure that this value
matches the setting on your router or
switch.
The default value is auto.
Step 20: Set the in-path: WAN
interface duplex?
Enter the in-path, WAN duplex
speed. Make sure that this value
matches the setting on your router or
switch.
13. Would you like to activate the in-path configuration: yes
14. In-Path IP address: 10.11.11.6
15. In-Path Netmask: 255.255.0.0
16. In-Path Default gateway: 10.11.11.16
17. Set the in-path:LAN interface speed: auto
18. Set the in-path:LAN interface duplex: auto
19. Set the in-path:WAN interface speed: auto
20. Set the in-path:WAN interface duplex: auto
To change an answer, enter the step number to return to.
Otherwise hit <enter> to save changes and exit.
Choice:
Set the in-path: WAN interface
speed? [auto] auto
Set the in-path: WAN interface
duplex? [auto] auto
The Edge appliance configuration wizard automatically saves your configuration settings.
8. To log out of the system, enter this command at the system prompt:
For detailed information about the CLI, see the Riverbed Command-Line Interface Reference Manual.
SteelFusion Edge Installation and Configuration Guide
41
Installing and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)Configuring SteelFusion Edge appliances
Verifying you are connected to the appliance
Perform this procedure to verify that you have properly connected the Edge appliance.
To verify you are connected to the appliance
1. Verify that you can connect to the CLI using one of these devices:
An ASCII terminal or emulator that can connect to the serial console. It must have the following
settings: 9600 bps, 8 bits, no parity, 1 stop bit, vt100, and no flow control.
A computer with a Secure Shell (SSH) client that is connected to the Edge appliance Primary
port.
2. At the system prompt, enter one of these commands:
ssh admin@<host>.<domain>
or
ssh admin@<ip-address>
3. You are prompted for the administrator password. This is the password you set in the configuration
wizard.
4. At the system prompt, ping from the management interface:
42SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)
If you have problems connecting to the SteelFusion Edge (SFE), use this flow chart to troubleshoot
issues.
Figure 3-12. Resolving IP connectivity
SteelFusion Edge Installation and Configuration Guide
43
Installing and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)Configuring SteelFusion Edge appliances
Connecting to the Management Console
After you configure the Edge appliance, you can check and modify your configuration settings and view
performance reports and system logs in the Management Console. You can connect to the Management
Console through any supported web browser.
To connect to the Management Console, you must know the host, domain, and administrator password
that you assigned in the configuration wizard.
Note: Cookies and JavaScript must be enabled in your web browser.
Note: Before you begin, clear your browser cache and cookies to ensure the user interface displays correctly.
To connect to the Management Console
1. Specify the URL for the Management Console in the location box of your web browser:
<protocol>://<host>.<domain>
The <protocol> variable is http or https. HTTPS uses the Secure Socket Layer (SSL) protocol to
ensure a secure environment. When you connect using HTTPS, the system prompts you to inspect
and verify the SSL certificate. This is a self-signed certificate that provides encrypted web
connections to the Management Console. The system re-creates the certificate when you change
the appliance hostname or when the certificate expires.
The secure vault does not protect the self-signed certificate used with HTTPS connections.
The <host> variable s the hostname you assigned to the Edge appliance primary interface in the
configuration wizard. If your DNS server maps that IP address to a name, you can specify the DNS
name.
The <domain> variable is the full domain name for the appliance.
Note: Alternatively, you can specify the IP address instead of the host and domain name.
The Management Console appears, displaying the Sign In page.
Figure 3-13. Sign in page
44SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)
2. In the Username text box, specify the user login: admin, monitor, a login from a RADIUS or TACACS+
database, or any local accounts created using the Role-Based Accounts feature. The default login
is admin.
Users with administrator (admin) privileges can configure and administer the Edge. Users with
monitor (monitor) privileges can view the Edge reports and user logs and change their own
password. A monitor user cannot make configuration changes.
3. In the Password text box, type the password you assigned in the configuration wizard of the Edge
appliance. (The default administrator password for the Edge is password.)
4. Click Sign In to display the Dashboard.
Verifying WAN optimization
Perform this procedure to verify that you have properly configured the Edge appliance.
To verify optimization
1. Choose Optimization > Reports: Bandwidth Optimization in the Management Console to verify
optimization.
2. Map a remote drive on a client machine.
3. Drag and drop a 1-MB file from the client to the remote server.
Ensure that the server is located across the WAN.
4. Drag and drop the 1-MB file again.
Performance improves significantly.
Checking for speed and duplex errors
If you selected autonegotiation (auto) for your in-path and primary interfaces, you must ensure that the
Edge appliance negotiated the speed and duplex at the rate your devices expect. For example, ensure
settings are auto on the LAN and WAN and 100 FULL on the LAN and WAN. You can verify your speed and
duplex settings Inpath0_0 page or Base Interfaces page of the Management Console. Choose Configure
> Networking: Inpath0_0 or Networking > Networking: Base Interfaces.
To check for speed and duplex errors
1. In the Management Console, choose Administration > Diagnostics: System Logs to display the
System Logs page.
2. Check the system logs for duplex or speed errors.
3. Choose Networking > Reports: Current Connections page.
4. Check for duplex and speed errors.
SteelFusion Edge Installation and Configuration Guide
45
Installing and Configuring the SteelFusion Edge Appliance (iSCSI/Block Mode)Next steps
If you find errors, change the speed and duplex settings on your LAN and WAN interface in the
Configure > Networking: Inpath 0_0 page.
Next steps
This table summarizes the next steps you should take to configure the Edge appliance.
Ta skReference
If you are using a SteelFusion Core for storage, you
should configure and connect it before running the
Hypervisor Installer. A SteelFusion Core allows you
to access remote storage at your data center and
make that storage available to your hypervisor.
Set up the hypervisor using the Hypervisor Installer.
The Installer guides you through the initial
configuration of the hypervisor.
After you run the Installer, you can customize the
hypervisor password. You can also monitor the
current status and resource allocation from the
Installer.
Connect the SteelFusion Edge to the SteelFusion
Core.
You can also optionally connect the Edge to another
active Edge as a standby peer for high availability.
Configure networking and optimization features. For details, see the SteelFusion Edge Management
Choose Storage > Storage Edge Configuration.
For details, see the SteelFusion Edge Management Console User’s Guide.
Choose Virtualization > Hypervisor: Installer.
For details, see the SteelFusion Edge Management Console User’s Guide.
Choose Storage > Storage Edge Configuration.
For details, see the SteelFusion Edge Management
Console User’s Guide.
Console User’s Guide.
46SteelFusion Edge Installation and Configuration Guide
4
Installing and Configuring the SteelFusion
Edge Appliance (NFS/File Mode)
This chapter describes how to install and configure the SteelFusion Edge appliance in NFS/File Mode.
It includes these sections:
“Deploying the SteelFusion Edge appliance” on page 47
“Checking your inventory” on page 48
“Preparing your site for installation” on page 49
“Powering on the appliance” on page 54
“Configuring SteelFusion Edge appliances” on page 55
“Next steps” on page 66
Caution: Read and follow the safety guidelines described in the Safety and Compliance Guide. Failure to follow
these safety guidelines can result in damage to the equipment.
For detailed information about installing the appliance to a rack, see the SteelFusion Edge Hardware and Maintenance Guide.
Deploying the SteelFusion Edge appliance
You deploy the Edge appliance in a physical in-path or virtual in-path deployment. This guide describes
how to install the Edge appliance in an in-path deployment.
Position your Edge appliances as close as possible to your network endpoints—that is, branch office
Edge appliances should be as close to your clients as possible, and data center SteelFusion Cores
should be as close to your storage arrays as possible to maximize performance and minimize latency.
Ideally, Edge appliances optimize only traffic that is initiated or terminated at their local site. We
recommend that you deploy the Edge appliances where the LAN connects to the WAN, and not where
any LAN-to-LAN or WAN-to-WAN traffic can pass through (or be redirected to) the Edge appliance.
SteelFusion Edge Installation and Configuration Guide 47
Installing and Configuring the SteelFusion Edge Appliance (NFS/File Mode)Checking your inventory
For detailed information about your deployment options and best practices for deploying Edge
appliances, see the SteelFusion Design Guide.
Figure 4-1. SteelFusion Edge in-path deployment
You can also deploy the Edge appliance for high availability (HA) where Edge and Core appliances are
deployed as pairs so that if either peer fails, the surviving Edge or Core appliances can take over. We
strongly recommend that you deploy Edge appliances as pairs in an HA cluster configuration. For
detailed information about HA, see the SteelFusion Edge Management Console User’s Guide and the SteelFusion Design Guide.
Figure 4-2. SteelFusion Edge high availability deployment
Checking your inventory
Your shipping carton contains these items:
The Edge appliance
One standard Ethernet straight-through cable
One standard Ethernet crossover cable
One serial null-modem cable
One or two power cables (depending on your order)
Aside from country-specific requirements, all appliances ship with the same power cable. The
power cable has an IEC 60320 C13 plug on one end (to connect to the Edge appliance) and a
country-specific plug that fits the wall socket for that country. If the appliance has two power
supplies, it ships with two suitable cables.
48SteelFusion Edge Installation and Configuration Guide
Preparing your site for installationInstalling and Configuring the SteelFusion Edge Appliance (NFS/File Mode)
You must always connect the Edge appliance using either the cable in the accessories box or
another cable that is approved for use by the IEC in the country in which the appliance is
connected.
You cannot connect the Edge appliance directly to multiphase outlets. You must use a rack power
distribution unit (PDU) or power strip that provides the appropriate three-prong outlet (hot/
neutral/ground). For details, see the Knowledge Base solution number S13425.
One Phillips screwdriver
Rails
One mounting kit
Documentation kit
If any items are damaged or missing, notify Riverbed Support at https://support.riverbed.com for
replacement or repair.
Preparing your site for installation
The Edge appliance ships completely assembled, with all the equipment parts in place and securely
fastened.
Site requirements
Before you install the Edge appliance, make sure that your site meets these requirements:
It is a standard electronic environment where the ambient temperature does not exceed 104ºF
(40
º
C) and the relative humidity does not exceed 80% (noncondensing). For detailed information,
see the SteelFusion Edge Hardware and Maintenance Guide.
Ethernet connections are available within the standard Ethernet limit.
There is available space on a two-post or four-post 19-inch rack. For details about installing the
Edge to a rack, see the Rack Installation Guide or the printed instructions that were shipped with
the appliance.
A clean power source is available, dedicated to computer devices and other electronic equipment.
The rack is a standard 19-inch Telco-type mounting rack.
Before you begin, consult the SteelFusion Edge Hardware and Maintenance Guide for detailed
information about how to install your model to a rack.
Note: We recommend that you use a four-post mounting rack for 2U appliances.
Note: If your rack requires special mounting screws, contact your rack manufacturer.
SteelFusion Edge Installation and Configuration Guide
49
Installing and Configuring the SteelFusion Edge Appliance (NFS/File Mode)Preparing your site for installation
SteelFusion Edge ports
This table summarizes the ports that connect the Edge appliance to your network.
PortDescription
PRI
(Primary)
AUX
(Auxiliary)
LAN 1_0 (1U)
LAN 0_0 (2U)
The primary port connects the Edge appliance to a LAN switch. This interface enables
you to connect to the Edge Management Console and the SteelFusion Edge CLI.
This interface can also be used to connect the SteelFusion Core through the RiOS
node, in-path interface.
The primary and auxiliary ports cannot share the same network subnet.
The auxiliary port provides an additional management interface to a secondary
network such as a management VLAN. You can connect a computer directly to the
appliance with a crossover cable, enabling you to access the CLI or Management
Console.
To use external IPMI access for 1U and 2U appliances, the AUX port must be enabled.
IPMI access does not require the AUX port to have an IP address configured but it does
require that the port is enabled. Disabling AUX disables remote management;
enabling remote management without enabling AUX leaves remote management
inaccessible. You enable the AUX port in the Management Console or the CLI. For
detailed information about connecting and monitoring the appliance using the BMC,
see the SteelFusion Edge Hardware and Maintenance Guide.
This port connects the LAN port of the Edge appliance to the LAN switch using a
straight-through cable.
The Edge appliance uses one or more in-path interfaces to provide Ethernet network
connectivity for optimized traffic. Each in-path interface comprises two physical
ports: the LAN port and the WAN port. Use the LAN port to connect the Edge appliance
to the internal network of the branch office.
If the Edge appliance is deployed between two switches, both the LAN and WAN ports
must be connected with straight-through cables.
WAN 1_0 (1U)
WAN 0_0 (2U)
eth0_0, eth0_1These ports provide additional iSCSI interfaces for storage traffic to external servers
50SteelFusion Edge Installation and Configuration Guide
This port connects the WAN port of the Edge appliance to the WAN router using a
crossover cable.
The WAN port is the second of two ports that compose the in-path interface. The WAN
port is used to connect the Edge appliance toward WAN-facing devices such as a
router, firewall, or other equipment located at the WAN boundary.
If you require additional in-path interfaces or require 10GigE or Fiber connectivity, you
can install a bypass NIC in the RiOS node expansion slot.
when used by the RiOS node.
The ports are connected to a LAN switch using a straight-through cable.
These ports can also provide SteelFusion Edge high availability (HA). In an HA
deployment, use these ports for BlockStream heartbeat and synchronization between
SteelFusion Edge HA peers. For detailed information about HA deployments, see the
SteelFusion Design Guide.
If you require additional connectivity in an HA deployment, install a supported
nonbypass NIC in the RiOS node expansion slot.
Preparing your site for installationInstalling and Configuring the SteelFusion Edge Appliance (NFS/File Mode)
PortDescription
gbe0_0, gbe0_1,
gbe0_2, gbe0_3
RIOS COMA RiOS serial RJ45 communication port that manages the RiOS node. Serial settings:
HYP COMA hypervisor serial RJ45 communication port used to manage the hypervisor node.
USB 1, USB 2Optional Hypervisor universal serial bus (USB) ports.
VGAOptional Hypervisor VGA connector. This port is useful for BIOS, POST, and PXE
These 1-Gbps ports provide hypervisor node connectivity.
When configured for use by the hypervisor node, these ports provide LAN connectivity
to external clients. The ports are connected to a LAN switch using a straight-through
cable.
If you require additional connectivity for the hypervisor node, you can install a
supported nonbypass NIC in the hypervisor expansion slot. The Edge models 2100 and
2200 do not have additional hypervisor expansion slots. The Edge models 3100, 3200,
and 5100 have two hypervisor expansion slots.
Note: Your hypervisor must have access to the Edge VIP through one of these
interfaces. Only a single port can be used for NFS traffic. For details on Edge VIP, see
the SteelFusion Edge Management Console User’s Guide and SteelFusion Design Guide.
9600 bps, 8 data bit, 1 stop bit, no parity.
Connects the serial cable to a terminal device. You establish a serial connection to a
terminal emulation program for console access to the configuration wizard and the
Edge CLI.
Serial settings: 9600 bps, 8 data bit, 1 stop bit, no parity.
debugging.
Figure 4-3 and Figure 4-4 show the locations of the ports on the rear of the 1U and 2U appliances.
Figure 4-3. 1U back panel
SteelFusion Edge Installation and Configuration Guide
51
Installing and Configuring the SteelFusion Edge Appliance (NFS/File Mode)Preparing your site for installation
Figure 4-4. 2U back panel
Figure 4-5 shows typical branch office connections for the Edge
Figure 4-5. Typical SteelFusion Edge port connections 1U appliance
appliance
.
Network interface cards and expansion slots
The 1U appliance is equipped with a preinstalled four-port 1-Gigabit Ethernet copper bypass NIC. The
1U appliance has an additional slot for an add-on NIC for a total of two slots. Both slots are assigned to
the RiOS node.
The 2U appliance is equipped with a preinstalled four-port 1-Gigabit Ethernet copper bypass NIC with
an integrated LSI expander NIC for bypass support. The 2U appliance has five additional slots for addon NICs for a total of six slots. Slot 1, 2, 3, and 4 are assigned to the RiOS node, and slots 5 and 6 are
assigned to the hypervisor node.
52SteelFusion Edge Installation and Configuration Guide
Preparing your site for installationInstalling and Configuring the SteelFusion Edge Appliance (NFS/File Mode)
This table summarizes the NIC deployment options for the Edge appliance.
ModelPCI
expansion
slots
SFED 21002in-pathin-path or storage——
SFED 22002in-pathin-path or storage——
SFED 31006in-pathin-path or storagein-path or storagedata
SFED 32006in-pathin-path or storagein-path or storagedata
SFED 51006in-pathin-path or storagein-path or storagedata
Slot 1 (always
populated prior
to shipment)
Slot 2
RiOS node
Slot 3 and 4
RiOS node
Slot 5 and 6
hypervisor node
The NIC deployment options are defined as follows:
in-path - a bypass NIC used by the RiOS node for WAN optimization traffic. You can view these
interfaces in the Networking > Networking: In-Path Interfaces page.
storage - a multiport data NIC used by the RiOS node, enabling access for storage traffic to and
from servers external to the Edge appliance, or additional heartbeat interfaces in an HA
deployment. Enables NFSv3 access. You can view these interfaces in the Networking > Networking:
Data Interfaces page.
data - a multiport data NIC used by the hypervisor node, enabling LAN access for hypervisor node
traffic. You can view these interfaces in the Virtualization > Reports: Interfaces page.
Note: A multiport data NIC can be used for storage or data—it is the slot that determines its function.
For detailed information about installing additional NICs, see the SteelFusion Edge Hardware and Maintenance Guide and the SteelFusion Design Guide.
Avoiding duplex mismatch
Before you begin the configuration process, ensure that your LAN and WAN interfaces have the same
duplex settings.
The Edge automatically negotiates duplex settings. If one end of the link is set to autonegotiate and the
other end of the link is not set to autonegotiate, the duplex settings on the network device default to
half-duplex. This duplex mismatch passes traffic, but it causes late collisions and results in degraded
optimization. To achieve maximum optimization, set your network devices to 100 and full.
To avoid duplex mismatches, manually configure the duplex settings on your:
router.
switch.
Edge appliance WAN interface.
Edge appliance LAN interface.
Edge appliance primary interface.
These conditions can indicate a duplex mismatch:
Choose Administration > Diagnostics: System Logs to see errors for sends, receives, cyclic
redundancy check (CRC), and short sends.
SteelFusion Edge Installation and Configuration Guide
53
Installing and Configuring the SteelFusion Edge Appliance (NFS/File Mode)Powering on the appliance
You cannot connect to an attached device.
You can connect to a device when you choose autonegotiation, but you cannot connect to that
same device when you manually set the speed or duplex.
Slow performance across the network.
Completing the configuration checklist
This table lists the parameters you specify to complete the initial configuration of the Edge appliance.
Be prepared to provide values for these parameters.
ApplianceParameterYour v a lue
SteelFusion Edge
primary interface)
(the
Hostname
IP address
Netmask
Default gateway (the WAN
gateway)
DNS IP address
Domain name for the
appliance
Administrator password
SMTP server IP address
Events and failures
notification email address
Primary interface speed
Primary interface duplex
In-path deploymentsIn-path interface IP address
In-path netmask
In-path gateway
In-path: LAN interface speed
In-path: LAN interface duplex
In-path: WAN interface speed
In-path: WAN interface duplex
Powering on the appliance
This section describes how to connect the AC power and how to power on the appliance.
54SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (NFS/File Mode)
Caution: In European electrical environments, you must ground (earth) the green/yellow tab on the power cord or
risk electrical shock.
To power on the appliance
1. If your appliance has a master power switch, ensure that it is in the off position.
2. Plug the AC power cord into the appliance.
Note: If your model has multiple power supplies, you must plug in all the power cords or you will hear an alarm.
Figure 4-6. Connecting the AC power
3. Plug the AC power cord into an uninterrupted AC power source.
4. Press the appliance power switch on.
If the Edge appliance does not immediately power on, press the power switch off, and then press
the power switch on again.
5. Check the status lights on the appliance.
For detailed information about the status lights, see the SteelFusion Edge Hardware and Maintenance Guide.
Configuring SteelFusion Edge appliances
The Edge appliance is physically in the direct path between clients and servers. The clients and servers
continue to see client and server IP addresses.
SteelFusion Edge Installation and Configuration Guide
55
Installing and Configuring the SteelFusion Edge Appliance (NFS/File Mode)Configuring SteelFusion Edge appliances
Connecting the SteelFusion Edge to your network
You use standard Ethernet straight-through and crossover cables to connect to your network in an inpath configuration. This table summarizes the correct cable usage when you are connecting LAN and
WAN ports or when you are connecting data ports.
DeviceCable
Edge appliance to a switchStraight-through (for example, primary and LAN ports on the appliance to the
LAN switch)
Edge appliance to a routerCrossover (for example, WAN port on the appliance to the WAN router)
Edge appliance to a hostCrossover (for example, LAN and WAN ports on the Edge appliance bypass
cards act like host interfaces during normal operation)
Edge appliance to an Edge
appliance
Crossover (for example, in high availability deployments)
For detailed information about cabling best practices, see the SteelFusion Design Guide.
To connect the appliance to your network
1. Plug the straight-through cable into the primary port of the appliance and the LAN switch. The
primary port can be any port on your LAN switch configured to connect to a host.
Figure 4-7. Connecting the primary port to the LAN switch
2. Identify the straight-through cable that connects your LAN switch to your WAN router. Unplug the
end connected to the WAN router.
Figure 4-8. Disconnecting the WAN router
56SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (NFS/File Mode)
3. Plug the straight-through cable that you disconnected from the WAN router into the LAN port of the
appliance.
Figure 4-9. Connecting the LAN switch to the LAN port
4. Using the provided crossover cable, plug the cable into the WAN port of the appliance and the WAN
router.
Figure 4-10. Connecting the WAN port to the WAN router
Note: If you have additional four-port bypass cards, repeat Step 1 through Step 4. For detailed information about
installing additional bypass cards, see the Network and Storage Card Installation Guide and the SteelFusion Edge
Hardware and Maintenance Guide.
Connecting hypervisor storage network to the Edge VIP
The Edge appliance supports virtual machines (VMs) on the hypervisor node of the appliance. The ports
are labeled gbe0_0, gbe0_1, gbe0_2, and gbe0_3.
To connect the hypervisor to the system
1. Plug the straight-through cable into one of the hypervisor ports: gbe0_0, gbe0_1, gbe0_2, or
gbe0_3.
2. Plug the straight-through cable into any switch that is connected to the hypervisor node.
The interface you configured as an Edge VIP should be connected to the same LAN switch to which
you connected the hypervisor port (gbe0_x).
3. After you complete the configuration process for the Edge appliance, configure and connect the
SteelFusion Core. Core allows you to access remote storage at your data center and make that
storage available to your hypervisor. For details, see the SteelFusion Core Management Console User’s Guide.
SteelFusion Edge Installation and Configuration Guide
57
Installing and Configuring the SteelFusion Edge Appliance (NFS/File Mode)Configuring SteelFusion Edge appliances
4. Connect to the Edge Management Console to configure your hypervisor with the Hypervisor
Installer.
You can access the Hypervisor Installer from the Edge Dashboard or by choosing Virtualization >
Installer: Installer.
Note: The hypervisor must be installed before you can host VMs.
Running the Configuration Wizard
To access the configuration wizard and the SteelFusion Edge CLI, you establish a serial connection
using a terminal emulator program.
To run the configuration wizard
1. Plug the serial cable into the RiOS COM port and a terminal.
Figure 4-11. Connecting to the SteelFusion Edge
2. Start your terminal emulation program, such as Tera Term Pro. The terminal device must have these
settings:
Baud rate: 9600 bps
Data bits: 8
Parity: none
Stop bits: 1
vt100 emulation
No flow control
If you are using the Edge appliance with a terminal server, the terminal server must use hardware
flow control for the port connected to the Edge appliance.
58SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (NFS/File Mode)
We recommend that you connect the console port to a device that logs output to help identify
problems with the system.
3. Log in as administrator user (admin) and enter the default password (password). For example:
login as: admin
Sent username "admin"
password: password
The configuration wizard automatically starts after you have entered the login and default
password. After you have established a connection, you configure the Edge appliance using the
configuration wizard.
4. If you have a SteelCentral Controller for SteelHead (SCC) appliance installed in your network to
manage multiple Edge appliances, you can use it to automatically configure them:
Do you want to auto-configure using a SCC? no
If you answer yes, you are prompted for the SCC hostname or IP address. The hostname or IP
address is used to contact the SCC. The default value is riverbedcmc. If you enter no, the wizard
continues.
Note: If you mistakenly answer yes, to return to the wizard from the CLI, enter the configuration jump-start
command from configuration mode. For detailed information, see “To restart the configuration wizard” on page 62.
5. To start the configuration wizard, type yes at the system prompt and press Enter.
Do you want to use the configuration wizard for initial configuration? yes
Note: Press ? for help; press Ctrl+B to go back to the previous step.
6. Complete the configuration wizard steps on the branch office Edge appliance as described in this
table.
Wizard promptDescriptionExample
Step 1: Host name?Enter the hostname for the Edge
appliance.
Step 2: Use DHCP on the
primary interface?
Step 3: Primary IP address?Enter the IP address for the Edge
Step 4: Netmask?Enter the netmask address.
You are given the option to enable
the DHCP to automatically assign an
IP address to the primary interface
for the Edge appliance.
We recommend that you do not set
DHCP.
The default value is no.
appliance.
hostname? amnesiac
Use DHCP? no
Primary IP address? 10.10.10.6
Netmask? 255.255.0.0
Step 5: Default gateway?Enter the default gateway for the
Step 6: Primary DNS server?Enter the primary DNS server IP
SteelFusion Edge Installation and Configuration Guide
Edge appliance.
address.
Default gateway? 10.0.0.1
Primary DNS server? 10.0.0.2
59
Installing and Configuring the SteelFusion Edge Appliance (NFS/File Mode)Configuring SteelFusion Edge appliances
Wizard promptDescriptionExample
Step 7: Domain name?Enter the domain name for the
network where the Edge appliance is
to reside.
If you set a domain name, you can
enter hostnames in the system
without the domain name.
Step 8: Admin password?We strongly recommend that you
change the default administrator
password at this time. The password
must be a minimum of six
characters.
The default administrator password
is password.
Step 9: SMTP server?Enter the name of the SMTP server.
External DNS and external access
for SMTP traffic is required for email
notification of events and failures to
function.
Note: Make sure that you provide a
valid SMTP server to ensure that the
email notifications for events and
failures are sent to the correct
destinations.
Domain name? example.com
Admin password? xxxyyy
SMTP server? natoma
Step 10: Notification email
address?
Enter a valid email address to which
notification of events and failures
are to be sent.
Step 11: Set the primary
interface speed?
Enter the speed on the primary
interface (that is, the Edge
appliance). Make sure that this value
matches the setting on your router or
switch.
The default value is auto.
Step 12: Set the primary
interface duplex?
Enter the duplex mode on the
primary interface. Make sure that
this value matches the setting on
your router or switch. The default
value is auto.
Step 13: Would you like to
activate the in-path
configuration?
Enter yes at the system prompt to
configure in-path support. An inpath configuration is a configuration
in which the Edge appliance is in the
direct path of the client and server.
Step 14: In-Path IP address?Enter the in-path IP address for the
Edge appliance.
Step 15: In-Path Netmask?Enter the in-path netmask address.
Notification email address?
example@xample.com
Set the primary interface speed?
[auto] auto
Set the primary interface
duplex? [auto] auto
Would you like to activate the
in-path configuration? yes
In-Path IP address? 10.11.11.6
In-Path Netmask? 255.255.0.0
60SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (NFS/File Mode)
Wizard promptDescriptionExample
Step 16: In-Path Default
gateway?
Step 17: Set the in-path: LAN
interface speed?
Step 18: Set the in-path: LAN
interface duplex?
Step 19: Set the in-path: WAN
interface speed?
Step 20: Set the in-path: WAN
interface duplex?
Enter the in-path default gateway
(the WAN gateway).
Enter the in-path, LAN interface
speed. Make sure that this value
matches the setting on your router or
switch.
The default value is auto.
Enter the in-path, LAN duplex value.
Make sure that this value matches
the setting on your router or switch.
The default value is auto.
Enter the in-path, WAN interface
speed. Make sure that this value
matches the setting on your router or
switch.
The default value is auto.
Enter the in-path, WAN duplex
speed. Make sure that this value
matches the setting on your router or
switch.
The default value is auto.
In-Path Default Gateway?
10.11.11.16
Set the in-path: LAN interface
speed? [auto] auto
Set the in-path: LAN interface
duplex? [auto] auto
Set the in-path: WAN interface
speed? [auto] auto
Set the in-path: WAN interface
duplex? [auto] auto
13. Would you like to activate the in-path configuration: yes
14. In-Path IP address: 10.11.11.6
15. In-Path Netmask: 255.255.0.0
16. In-Path Default gateway: 10.11.11.16
17. Set the in-path:LAN interface speed: auto
18. Set the in-path:LAN interface duplex: auto
19. Set the in-path:WAN interface speed: auto
20. Set the in-path:WAN interface duplex: auto
To change an answer, enter the step number to return to.
Otherwise hit <enter> to save changes and exit.
Choice:
The Edge appliance configuration wizard automatically saves your configuration settings.
8. To log out of the system, enter this command at the system prompt:
SteelFusion Edge Installation and Configuration Guide
61
Installing and Configuring the SteelFusion Edge Appliance (NFS/File Mode)Configuring SteelFusion Edge appliances
For detailed information about the CLI, see the Riverbed Command-Line Interface Reference Manual.
Verifying you are connected to the appliance
Perform this procedure to verify that you have properly connected the Edge appliance.
To verify you are connected to the appliance
1. Verify that you can connect to the CLI using one of these devices:
An ASCII terminal or emulator that can connect to the serial console. It must have the following
settings: 9600 bps, 8 bits, no parity, 1 stop bit, vt100, and no flow control.
A computer with a Secure Shell (SSH) client that is connected to the Edge appliance Primary
port.
2. At the system prompt, enter one of these commands:
ssh admin@<host>.<domain>
or
ssh admin@<ip-address>
3. You are prompted for the administrator password. This is the password you set in the configuration
wizard.
4. At the system prompt, ping from the management interface:
62SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (NFS/File Mode)
If you have problems connecting to the SteelFusion Edge (SFE), use this flow chart to troubleshoot
issues.
Figure 4-12. Resolving IP connectivity
SteelFusion Edge Installation and Configuration Guide
63
Installing and Configuring the SteelFusion Edge Appliance (NFS/File Mode)Configuring SteelFusion Edge appliances
Connecting to the Management Console
After you configure the Edge appliance, you can check and modify your configuration settings and view
performance reports and system logs in the Management Console. You can connect to the Management
Console through any supported web browser.
To connect to the Management Console, you must know the host, domain, and administrator password
that you assigned in the configuration wizard.
Note: Cookies and JavaScript must be enabled in your web browser.
Note: Before you begin, clear your browser cache and cookies to ensure the user interface displays correctly.
To connect to the Management Console
1. Specify the URL for the Management Console in the location box of your web browser:
<protocol>://<host>.<domain>
The <protocol> variable is http or https. HTTPS uses the Secure Socket Layer (SSL) protocol to
ensure a secure environment. When you connect using HTTPS, the system prompts you to inspect
and verify the SSL certificate. This is a self-signed certificate that provides encrypted web
connections to the Management Console. The system re-creates the certificate when you change
the appliance hostname or when the certificate expires.
The secure vault does not protect the self-signed certificate used with HTTPS connections.
The <host> variable s the hostname you assigned to the Edge appliance primary interface in the
configuration wizard. If your DNS server maps that IP address to a name, you can specify the DNS
name.
The <domain> variable is the full domain name for the appliance.
Note: Alternatively, you can specify the IP address instead of the host and domain name.
The Management Console appears, displaying the Sign In page.
Figure 4-13. Sign in page
64SteelFusion Edge Installation and Configuration Guide
Configuring SteelFusion Edge appliancesInstalling and Configuring the SteelFusion Edge Appliance (NFS/File Mode)
2. In the Username text box, specify the user login: admin, monitor, a login from a RADIUS or TACACS+
database, or any local accounts created using the Role-Based Accounts feature. The default login
is admin.
Users with administrator (admin) privileges can configure and administer the Edge. Users with
monitor (monitor) privileges can view the Edge reports and user logs and change their own
password. A monitor user cannot make configuration changes.
3. In the Password text box, type the password you assigned in the configuration wizard of the Edge
appliance. (The default administrator password for the Edge is password.)
4. Click Sign In to display the Dashboard.
Verifying WAN optimization
Perform this procedure to verify that you have properly configured the Edge appliance.
To verify optimization
1. Choose Optimization > Reports: Bandwidth Optimization in the Management Console to verify
optimization.
2. Map a remote drive on a client machine.
3. Drag and drop a 1-MB file from the client to the remote server.
Ensure that the server is located across the WAN.
4. Drag and drop the 1-MB file again.
Performance improves significantly.
Checking for speed and duplex errors
If you selected autonegotiation (auto) for your in-path and primary interfaces, you must ensure that the
Edge appliance negotiated the speed and duplex at the rate your devices expect. For example, ensure
settings are auto on the LAN and WAN and 100 FULL on the LAN and WAN. You can verify your speed and
duplex settings Inpath0_0 page or Base Interfaces page of the Management Console. Choose Configure
> Networking: Inpath0_0 or Networking > Networking: Base Interfaces.
To check for speed and duplex errors
1. In the Management Console, choose Administration > Diagnostics: System Logs to display the
System Logs page.
2. Check the system logs for duplex or speed errors.
3. Choose Networking > Reports: Current Connections page.
4. Check for duplex and speed errors.
SteelFusion Edge Installation and Configuration Guide
65
Installing and Configuring the SteelFusion Edge Appliance (NFS/File Mode)Next steps
If you find errors, change the speed and duplex settings on your LAN and WAN interface in the
Configure > Networking: Inpath 0_0 page.
Next steps
This table summarizes the next steps you should take to configure the Edge appliance.
Ta skReference
Connect the SteelFusion Edge to the SteelFusion
Core.
You can also optionally connect the Edge to another
active Edge as a standby peer for high availability.
Configure the SteelFusion Core storage. Core allows
you to access remote storage at your data center
and make that storage available to your hypervisor.
Map the NFS exports to the Edge and specify the
exports to install onto the VSP ESXi hypervisor.
Set up the hypervisor using the Hypervisor Installer.
The Installer guides you through the initial
configuration of the hypervisor.
After you run the Installer, you can customize the
hypervisor password. You can also monitor the
current status and resource allocation from the
Installer.
Connect another Edge for high availability.For details, see the SteelFusion Edge Management
Configure networking and optimization features. For details, see the SteelFusion Edge Management
Choose Storage > Storage Edge Configuration.
For details, see the SteelFusion Edge Management Console User’s Guide.
In the SteelFusion Core Management Console, choose
Configure > NFS: Exports.
For details, see the SteelFusion Core Management Console User’s Guide.
Choose Virtualization > Hypervisor: Installer.
For details, see the SteelFusion Edge Management
Console User’s Guide.
Console User’s Guide.
Console User’s Guide.
66SteelFusion Edge Installation and Configuration Guide
Loading...
+ hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.