DCASIshare.fireflycom.net/classes/DCASI/DCASI_DS.pdf · 2012. 8. 9. · Why Firefly Firefly is the...

3
© 2012 Firefly Communications, LLC. All rights reserved. Length: 5 Days Format: Lecture/Lab Course Version: 3.2 Product Version: 3.2 www.fireflycom.net [email protected] ATLANTA LONDON SINGAPORE Course Description In this course, you will learn how to implement intelligent network services using the Catalyst 6500 Application Control Engine Service Module, the Cisco Application Control Engine 4710 Appliance, and the Cisco Global Site Selector (GSS). This course covers all the key features of the Cisco ACE, including resource virtualization and management, server load-balancing (Layer 2-4 and Layer 7), SSL termination and offload, application-layer protocol inspection and fixups, and web application optimization features. DCASI Who Should Attend This course is designed for Cisco Channel Partner Field Engineers (FEs) who are planning to achieve the Cisco Data Center Application Services (DCAS) Support Specialist Certification. Recommended Prerequisites You will gain the most from this course if you have a basic understanding of the following topics: CCNP, CCIE R&S, or CCIE SP Certification; knowledge of Catalyst 6500 architecture and operations; familiarity with common web application protocols, such as HTTP and HTML; and familiarity with common traffic control and monitoring protocols, such as RHI and QoS. Implementing Data Center Application Services Why Firefly Firefly is the go-to company for ACE training, delivering courses for Cisco and other Cisco Learning Partners to train students on the Cisco ACE products. At Firefly, we run our own lab environment, with our in-house-developed labs, to better prepare you for data center implementation and design. © 2012 Firefly Communications, LLC. All rights reserved. Learning Objectives Describe the key functions provided by Cisco Data Center Application Services and the products that support those functions Describe the structure and function of the Modular Policy CLI Describe the web acceleration feature set and how those features can be used in the multi-tier application and data center design Describe the configuration tasks necessary to deploy the Global Site Selector Describe the high-availability features of the ACE Family of products, which are used to provide reliable application networking services Describe the capabilities of the Cisco WAAS solution Describe how to configure the core access point and bridge Design an application services architecture that includes resource virtualization, server load- balancing, application security, web acceleration, and site-to-site load-balancing

Transcript of DCASIshare.fireflycom.net/classes/DCASI/DCASI_DS.pdf · 2012. 8. 9. · Why Firefly Firefly is the...

Page 1: DCASIshare.fireflycom.net/classes/DCASI/DCASI_DS.pdf · 2012. 8. 9. · Why Firefly Firefly is the go-to company for ACE training, delivering courses for Cisco and other Cisco Learning

© 2012 Firefly Communications, LLC. All rights reserved.

Length:5 Days

Format:Lecture/Lab

CourseVersion:3.2

ProductVersion:3.2

[email protected]

A T L A N T A

L O N D O N

S I N G A P O R E

Course Description

In this course, you will learn how to implementintelligent network services using the Catalyst6500 Application Control Engine Service Module,the Cisco Application Control Engine 4710Appliance, and the Cisco Global Site Selector(GSS). This course covers all the key features ofthe Cisco ACE, including resource virtualizationand management, server load-balancing (Layer2-4 and Layer 7), SSL termination and offload,application-layer protocol inspection and fixups,and web application optimization features.

DCASI

Who Should Attend

This course is designed for Cisco Channel PartnerField Engineers (FEs) who are planning to achievethe Cisco Data Center Application Services(DCAS) Support Specialist Certification.

Recommended Prerequisites

You will gain the most from this course if youhave a basic understanding of the followingtopics: CCNP, CCIE R&S, or CCIE SP Certification;knowledge of Catalyst 6500 architecture andoperations; familiarity with common webapplication protocols, such as HTTP and HTML;and familiarity with common traffic control andmonitoring protocols, such as RHI and QoS.

Implementing Data CenterApplication Services

Why Firefly

Firefly is the go-to company for ACE training, delivering courses for Cisco and otherCisco Learning Partners to train students on the Cisco ACE products. At Firefly, we runour own lab environment, with our in-house-developed labs, to better prepare you fordata center implementation and design.

© 2012 Firefly Communications, LLC. All rights reserved.

Learning ObjectivesDescribe the key functions provided by CiscoData Center Application Services and theproducts that support those functions

Describe the structure and function of theModular Policy CLIDescribe the web acceleration feature set andhow those features can be used in the multi-tierapplication and data center design

Describe the configuration tasks necessary todeploy the Global Site Selector

Describe the high-availability features of the ACEFamily of products, which are used to providereliable application networking services

Describe the capabilities of the Cisco WAASsolution

Describe how to configure the core accesspoint and bridgeDesign an application services architecture thatincludes resource virtualization, server load-balancing, application security, webacceleration, and site-to-site load-balancing

Page 2: DCASIshare.fireflycom.net/classes/DCASI/DCASI_DS.pdf · 2012. 8. 9. · Why Firefly Firefly is the go-to company for ACE training, delivering courses for Cisco and other Cisco Learning

© 2012 Firefly Communications, LLC. All rights reserved.

Implementing Data CenterApplication Services

© 2012 Firefly Communications, LLC. All rights reserved.

Module 1: Data Center ApplicationServices Overview

Lesson 1: IP-Based Data CenterApplications

IP Protocol Stack ReviewIP Application ReviewWeb Technology OverviewGSLB Overview

Lesson 2: Introducing ACE FamilySolutions

Multi-Tier ApplicationsIntra-Datacenter RedundancyMulti-Datacenter RedundancyApplication Delivery Products

Lesson 3: Deploying the ACE Applianceand Service Module

Connecting ACE to the NetworkNetwork TopologiesACE 4710 Installation ProcedureACE Appliance GUIVirtualizationResource ManagementAuthorizing Management UsersConfiguring InterfacesConfiguring Management

Module 2: Implementing ServerLoad-Balancing

Lesson 1: Modular Policy CLIClass MapsPolicy MapsApplying Policy Maps

Lesson 2: Managing the ACE Applianceand Service Module

Permitting Management TrafficSNMP ManageabilityApplication Networking Manager

Lesson 3: Security FeaturesIP Access Control ListsACL Object GroupsTCP/IP Fragmentation/ReassemblyTCP/IP NormalizationSYN CookiesNetwork Address Translation

Lesson 4: Layer 4 Load-BalancingLoad-Balancing ConceptsLoad-Balancing AlgorithmConfiguring Layer 4 Load-BalancingTraffic Rate LimitingLoad-Balancing Concepts

Lesson 5: Health MonitoringHealth Monitoring OverviewActive Health ProbesHTTP Error Code MonitoringUsing TCL ScriptingRoute Health InjectionBackup Servers/Server Farms

Lesson 6: Layer 7 Protocol ProcessingConfiguring HTTP Layer 7 Load-BalancingPersistent and Pipelined HTTP ExtensionsServer ReuseHTTP ModificationsSession PersistenceProtocol InspectionHTTP InspectionFTP Protocol ProcessingRDP Protocol ProcessingRadius Protocol ProcessingRTSP Protocol ProcessingSIP Protocol ProcessingGeneric Protocol ParsingOther Inspected Protocols

Lesson 7: Processing ConnectionsDigital Encryption TechnologiesSSL Service OptionsConfiguring a Public Key InfrastructureConfiguring SSL Proxy ServicesSSL Session Reuse Functional OverviewSSL Queue Delay Functional OverviewSSL Client Authentication Functional Overview

Page 3: DCASIshare.fireflycom.net/classes/DCASI/DCASI_DS.pdf · 2012. 8. 9. · Why Firefly Firefly is the go-to company for ACE training, delivering courses for Cisco and other Cisco Learning

© 2012 Firefly Communications, LLC. All rights reserved.

Implementing Data CenterApplication Services

© 2012 Firefly Communications, LLC. All rights reserved.

Lesson 8: Migrating From CSS and CSMOverview of CSS and CSMMigrating CSS ConfigurationsMigrating CSM Configurations

Lesson 9: Deploying ApplicationAcceleration and Optimization

FlashForwardDelta OptimizationSmart RedirectFast RedirectFlashConnectJust-in-Time Object AccelerationAdaptive Dynamic CacheSingle-Request OptimizationsCompression OverviewConfiguring Compression

Lesson 10: Integrating Multiple FeaturesAnalyzing Network Requirements

Designing ACE ContextsDesigning ACE FeaturesConfiguring Multiple Integrated Features

Module 3: Implementing Site-to-SiteLoad-Balancing

Lesson 1: Deploying the GSSIntroducing GSSPurpose of GSLBACE GSS Installation ProcedureConnect the GSS to the Network

Lesson 2: Managing the GSSDefault Management RolesConfiguring Management RolesGSS Network Management

Lesson 3: Implementing Global ServerLoad-Balancing

GSLB MethodsGSS Load and Keep-Alive TrackingKAL-AP IntegrationUsing Network ProximityGSS Zones and LocationsProximity Subsystem and DatabaseProximity Network Design GuidelinesConfiguring Network ProximityUsing DNS StickyDNS Sticky Configuration and Monitoring

Module 4: Redundancy andTroubleshooting

Lesson 1: High AvailabilityRedundancyObject TrackingFailoverState ReplicationFault-Tolerance ConfigurationDisplaying Fault-Tolerance InformationGSS Redundancy

Lesson 2: Troubleshooting ApplicationServices

ACE ArchitectureTroubleshooting Layer 1 and DeviceManagementLayer 2 ConnectivityLayer 3 ConnectivityServer Load-BalancingSecurity Features

Appendix: Initial Setup of the ACE 4492Global Site Selector

Lab 1: Implementing Virtualization

Lab 2: Basic SLB

Lab 3: Implementing NAT

Lab 4: Implementing Health Monitoring

Lab 5: Configuring Layer 7 Load-Balancing

Lab 6: Enabling Sticky Connections

Lab 7: Enabling Protocol Inspection

Lab 8: Configuring SSL Termination

Lab 9: Enabling HTTP Optimizations

Lab 10: Integrating Multiple Features

Lab 11: Implementing Global ServerLoad-Balancing