3Com SUPERSTACK 3 WEBCACHE 3000 User manual

http://www.3com.com/
Part No. DUA1611-5AAA04
Published November 2002
SuperStack®3
Webcache
User Guide
SuperStack 3 Webcache 1000 3C16115
SuperStack 3 Webcache 3000 3C16116
SuperStack 3 Web Site Filter 3C16118
dua1611-5aaa04.book Page 1 Friday, November 29, 2002 8:56 PM

3Com Corporation
5400 Bayfront Plaza
Santa Clara, California
95052-8145
Copyright © 2002, 3Com Technologies. All rights reserved. No part of this documentation may be reproduced
in any form or by any means or used to make any derivative work (such as translation, transformation, or
adaptation) without written permission from 3Com Technologies.
3Com Technologies reserves the right to revise this documentation and to make changes in content from time
to time without obligation on the part of 3Com Technologies to provide notification of such revision or
change.
3Com Technologies provides this documentation without warranty, term, or condition of any kind, either
implied or expressed, including, but not limited to, the implied warranties, terms or conditions of
merchantability, satisfactory quality, and fitness for a particular purpose. 3Com may make improvements or
changes in the product(s) and/or the program(s) described in this documentation at any time.
If there is any software on removable media described in this documentation, it is furnished under a license
agreement included with the product as a separate document, in the hard copy documentation, or on the
removable media in a directory file named LICENSE.TXT or !LICENSE.TXT. If you are unable to locate a copy,
please contact 3Com and a copy will be provided to you.
UNITED STATES GOVERNMENT LEGEND
If you are a United States government agency, then this documentation and the software described herein are
provided to you subject to the following:
All technical data and computer software are commercial in nature and developed solely at private expense.
Software is delivered as “Commercial Computer Software” as defined in DFARS 252.227-7014 (June 1995) or
as a “commercial item” as defined in FAR 2.101(a) and as such is provided with only such rights as are
provided in 3Com’s standard commercial license for the Software. Technical data is provided with limited rights
only as provided in DFAR 252.227-7015 (Nov 1995) or FAR 52.227-14 (June 1987), whichever is applicable.
You agree not to remove or deface any portion of any legend provided on any licensed program or
documentation contained in, or delivered to you in conjunction with, this User Guide.
Unless otherwise indicated, 3Com registered trademarks are registered in the United States and may or may not
be registered in other countries.
3Com, the 3Com logo and SuperStack are registered trademarks of 3Com Corporation.
Intel and Pentium are registered trademarks of Intel Corporation. Microsoft, MS-DOS, Windows, and Windows
NT are registered trademarks of Microsoft Corporation. Novell and NetWare are registered trademarks of
Novell, Inc. UNIX is a registered trademark in the United States and other countries, licensed exclusively
through X/Open Company, Ltd.
Netscape Navigator is a registered trademark of Netscape Communications.
JavaScript is a trademark of Sun Microsystems
All other company and product names may be trademarks of the respective companies with which they are
associated.
ENVIRONMENTAL STATEMENT
It is the policy of 3Com Corporation to be environmentally-friendly in all operations. To uphold our policy, we
are committed to:
Establishing environmental performance standards that comply with national legislation and regulations.
Conserving energy, materials and natural resources in all operations.
Reducing the waste generated by all operations. Ensuring that all waste conforms to recognized environmental
standards. Maximizing the recyclable and reusable content of all products.
Ensuring that all products can be recycled, reused and disposed of safely.
Ensuring that all products are labelled according to recognized environmental standards.
Improving our environmental record on a continual basis.
End of Life Statement
3Com processes allow for the recovery, reclamation and safe disposal of all end-of-life electronic components.
Regulated Materials Statement
3Com products do not contain any hazardous or ozone-depleting material.
Environmental Statement about the Documentation
The documentation for this product is printed on paper that comes from sustainable, managed forests; it is
fully biodegradable and recyclable, and is completely chlorine-free. The varnish is environmentally-friendly, and
the inks are vegetable-based with a low heavy-metal content.
dua1611-5aaa04.book Page 2 Friday, November 29, 2002 8:56 PM

CONTENTS
ABOUT THIS GUIDE
Conventions 18
Related Documentation 19
Documentation Comments 20
Product Registration 20
IGETTING STARTED
1WEB CACHING CONCEPTS AND DEPLOYMENT
What is the Webcache? 24
The Webcache and 3Com Network Supervisor 24
Before You Begin 25
Network Configuration Concepts 26
IP Addresses 26
IP Address Rules 27
Subnets and Using a Subnet Mask 27
Domain Name System 28
Domain Name System Syntax 28
Default Router 29
Web Caching Overview 30
Current and Expired Content 32
Revalidating HTTP Content 32
Deployment Modes Overview 32
Choosing a Deployment Mode 35
Transparent Cache Deployment 36
Deploying the SuperStack 3 Switch 4400, 4924 or 4950 with the
Webcache 38
Deploying the SuperStack 3 Server Load Balancer with the
Webcache 40
Web Cache Communication Protocol (WCCP) 41
WCCP Version 1 43
dua1611-5aaa04.book Page 3 Friday, November 29, 2002 8:56 PM

WCCP Version 2 43
Proxy Relay Deployment 44
Proxy Cache Deployment 45
Manual Configuration 47
Proxy Auto Configuration (PAC) Files 48
Web Proxy Auto-Discovery (WPAD) 49
Third-party Tools 52
Inline Cache Deployment 52
Parent Caching 53
How does Parent Caching Work? 54
Parent Caching Network Example 55
ICP Caching 56
2INSTALLING THE WEBCACHE
Package Contents 60
Webcache — Front View Detail 61
LEDs 61
Webcache — Rear View Detail 62
Power Socket 63
Console Port 63
WAN Port 63
LAN Port 63
WAN and LAN Port LEDs 64
Choosing a Suitable Site 65
Rack-Mounting the Webcache 65
The Power-up Sequence 69
Powering-up the Webcache 69
Checking for Correct Operation of LEDs 69
Deploying the Webcache in Your Network 70
Setting Up the Webcache for Management 71
Setting Up Using the Web Interface 71
Setting Up Using the Command Line Interface 74
Connecting the Webcache to the Live Network 76
Choosing the Correct Cables 76
Connecting the Webcache 77
Installing an Additional Cache Storage Device 77
dua1611-5aaa04.book Page 4 Friday, November 29, 2002 8:56 PM

II MANAGING THE WEBCACHE
3USING THE CLI INTERFACE
Accessing the Command Line Interface 82
Accessing the Command Line Interface Through the Console Port 82
Accessing the Command Line Interface Over the Network 83
Logging In To the Command Line Interface 83
Exiting the Interface 84
Understanding the Command Line Interface 84
Entering Commands 85
Displaying Menus 86
Obtaining Help 86
4USING THE WEB INTERFACE
Management Software Interfaces 88
Logging in as a Default User 88
Accessing the Web Interface 89
Understanding the Web Interface 91
The Toolbar 92
The Navigation Tree 94
The Information Area 96
The Device Mimic 96
The Status Tables 99
The Performance View 100
The Help View 100
5SECURING ACCESS TO THE WEBCACHE MANAGEMENT
INTERFACES
Passwords 104
Setting Passwords 104
Management Interface Setup 105
Disabling Port 80 105
Restricting Address Access 105
Password Recovery 106
Enabling/Disabling Password Recovery 106
dua1611-5aaa04.book Page 5 Friday, November 29, 2002 8:56 PM

Performing Password Recovery 107
III CONFIGURING THE WEBCACHE
6CONFIGURING DEPLOYMENT MODES
Configuring Transparent Cache Mode 112
Configuring WCCP V1 112
Configuring WCCP V2 113
Configuring Proxy Relay with the SuperStack 3 Firewall 114
Configuring Proxy Cache Mode 115
Creating a Proxy Auto-configuration File 115
Using the Webcache as a PAC File Server 116
Configuring the Client Web Browser 117
Configuring Inline Cache Mode 118
Configuring Parent Caching 119
Creating a Parent Cache Exclusion List 119
Saving the Parent Cache Exclusion List 121
Clearing the Parent Cache Exclusion List 122
Configuring ICP Caching 123
Adding ICP Peers 124
Deleting ICP Peers 125
7STATIC ROUTES
What are Static Routes? 128
Static Routes Example 128
Advantages of Static Routes 129
Configuring Static Routes 129
8SYSTEM TIME
Configuring the System Time 132
Network Time Protocol 132
Choosing a Network Time Protocol Server 133
Configuring the System Time Using the Network Time Protocol 134
Configuring the System Time Manually 134
System Time and Performance Graphs 135
dua1611-5aaa04.book Page 6 Friday, November 29, 2002 8:56 PM

IV CONTROLLING AND MONITORING WEB ACCESS
9MONITORING WEB ACCESS
Access Logging 140
Filter Logging 140
Storing the Log Files 140
Viewing the Access Log 142
Analyzing the Access Log 142
Viewing the Filter Log 143
10 USING CONTENT FILTERING
Introducing Content Filtering 146
Understanding Content Filtering Modes 146
3Com Web Site Filter 147
Registering the Webcache 149
Activating the Web Site Filter 149
Downloading a New Web Site Filter 150
Setting Up the 3Com Web Site Filter 151
Setting Up
Filtering Policies 152
Testing a URL 154
Websense Enterprise Filtering 155
Acquiring the Websense Enterprise Filtering Software 155
Installing the Websense Enterprise Filtering Software 155
Setting Up Websense Enterprise Filtering on your Webcache 156
Manual Content Filtering 157
Setting Up Manual Content Filtering 158
Default Rule 159
Setting the Default Rule 159
Filter Logging 159
Blocking and Logging Behavior 160
Setting Blocking and Logging Behavior 160
Storing the Filter Log 161
Viewing the Filter Log 161
Web Client Blocking 161
Using Web Client Blocking with DHCP Servers 162
dua1611-5aaa04.book Page 7 Friday, November 29, 2002 8:56 PM

Setting Up Web Client Blocking 162
Creating a Web Client Blocking List 163
Saving the Web Client Blocking List 165
Clearing the Web Client Blocking List 166
Filter Exclusions 166
Setting Up Filter Exclusion Lists 166
Editing the Filter Exclusion List 166
Loading Entries From a File into the Filter Exclusion List 167
Saving the New Filter Exclusion List 168
Clearing the Filter Exclusion List 169
Setting Up Allow Lists and Deny Lists 169
Editing the Allow and Deny Lists 169
Loading Entries From a File into the Allow List or Deny List 172
Saving the New Allow List or Deny List 173
Clearing the Allow List or Deny List 173
Keyword Blocking 174
Setting Up Keyword Blocking Lists 174
Editing the Keyword Blocking List 174
Loading Entries From a File into the Keyword Blocking List 175
Saving the New Keyword Blocking List 176
Clearing the Keyword Blocking List 176
Customizing the Content Filter Response Screen 176
VCONTROLLING CACHING
11 CONTROLLING HOW WEB SITES ARE CACHED
Cache Control 182
Setting Up Cache Control 182
Creating a Cache Control List 182
Saving the Cache Control List 185
Clearing the Cache Control List 185
Clearing the Cache 186
Cache Bypass 186
Setting Up Cache Bypass 188
Creating Cache Bypass Lists 188
Saving the Cache Bypass Lists 190
dua1611-5aaa04.book Page 8 Friday, November 29, 2002 8:56 PM

Clearing the Cache Bypass Lists 191
12 PRELOADING CONTENT
Introduction 194
Advantages and Disadvantages of Preloading Content 194
Methods of Preloading Content 195
Setting up Content Preload 195
Preloading a Site 196
Adding/Editing Scheduled Tasks 197
Temporarily Disabling a Scheduled Task 198
Forcing a Preload Task to Start Immediately 198
Deleting Scheduled Tasks 199
Checking the Status of Scheduled Tasks 199
Viewing Details of Scheduled Tasks 200
Using the 3Com Web Scheduler Browser Client 201
Configuring the Webcache for the 3Com Web Scheduler Browser
Client 201
Installing the 3Com Web Scheduler Browser Client 202
VI MONITORING THE WEBCACHE
13 MONITORING SYSTEM EVENTS
System Events 208
Email Notification 208
Configuring Email Notification 208
SMTP Authentication 210
SNMP Traps 212
Configuring SNMP Traps 212
Configuring SNMP Community Strings 212
Automatic System Events 214
14 PERFORMANCE MONITORING
Performance Monitoring 220
Viewing Performance Graphs 220
Viewing Caching Performance Graphs 220
dua1611-5aaa04.book Page 9 Friday, November 29, 2002 8:56 PM

Viewing I/O Performance Graphs 223
Viewing System Performance Graphs 224
Emailing Performance Graphs 224
Configuring Email Performance Graphs 225
15 SYSTEM DIAGNOSTICS
System Diagnostics 228
Pinging Other Devices 228
Performing a Ping 228
Tracing IP Addresses 229
Performing a Trace Route 229
System Log 230
Configuring the System Log 230
What is a Syslog Server? 231
Obtaining a Syslog Server 231
Viewing the System Log 232
VII MANAGING THE WEBCACHE SOFTWARE
16 CONFIGURATION MANAGEMENT
Saving and Restoring Configurations 236
Saving a Configuration 237
Restoring a Configuration 238
17 SOFTWARE UPGRADES
Software Upgrades 240
Software Upgrade SNMP Traps 240
Unsuccessful Software Upgrades 241
Software Downgrades 241
Detecting a Software Upgrade 241
Performing a Software Upgrade 243
Performing an Automatically Detected Software Upgrade 243
Performing a Manual Software Upgrade 245
dua1611-5aaa04.book Page 10 Friday, November 29, 2002 8:56 PM

VIII COMMAND LINE INTERFACE
18 COMMAND LINE INTERFACE
A Quick Guide to the Commands 252
Getting Started 253
Exiting the Command Line Interface 256
Displaying and Changing WAN and LAN Port Information 256
Configuring the WAN and LAN Ports 256
Displaying WAN and LAN Port Summary Information 257
Displaying and Changing Protocol Information 258
Specifying Basic Network Configuration 258
Specifying Domain Name System Configuration 259
Resetting IP and DNS Information to Factory Default Settings 260
Specifying IP Configuration 261
Pinging Other Devices 262
Displaying IP Summary Information 263
Tracing IP Addresses 263
Displaying and Changing Security Information 264
Securing the Management Interface 264
Changing the Admin Password 266
Enabling and Disabling Password Recovery 266
Displaying and Changing Webcache Information and Functions 267
Initializing the Webcache 267
Rebooting the Webcache 268
Setting the Webcache SNMP Community String 268
Specifying a Contact Name 269
Specifying Location Details 269
Specifying a Webcache Name 269
Displaying Summary Information 270
IX PROBLEM SOLVING
19 PROBLEM SOLVING
Accessing the Webcache via the Console Line 276
Accessing the Webcache via Telnet 276
dua1611-5aaa04.book Page 11 Friday, November 29, 2002 8:56 PM

Solving Problems Indicated by LEDs 277
Solving Web Interface Problems 277
Solving Command Line Interface Problems 280
Solving Webcache Performance Problems 280
Solving Client Browser Problems 282
Solving General Webcache Problems 283
XAPPENDICES AND INDEX
ASAFETY INFORMATION
Important Safety Information 288
Consignes importantes de sécurité 290
Wichtige Sicherheitsinformationen 292
BCABLE SPECIFICATIONS AND PIN-OUTS
Cable Specifications 295
Pin-outs 296
Null-Modem Cable 296
PC-AT Serial Cable 296
Modem Cable 297
RJ-45 Pin Assignments 297
CTECHNICAL SPECIFICATIONS
DTECHNICAL SUPPORT
Online Technical Services 301
World Wide Web Site 301
3Com Knowledgebase Web Services 302
3Com FTP Site 302
Support from Your Network Supplier 302
Support from 3Com 303
Internet Support 303
Telephone Support 303
Returning Products for Repair 305
dua1611-5aaa04.book Page 12 Friday, November 29, 2002 8:56 PM

EDEFAULT SETTINGS FOR THE WEBCACHE
Default Settings 307
Getting Started Wizard Settings 309
FREPLACING AND INSTALLING CACHE STORAGE DEVICES
Replacing a Failed Cache Storage Device 314
Removing the Failed Cache Storage Device 314
Adding a New Cache Storage Device 316
Installing an Additional Cache Storage Device 317
GCISCO WCCP COMMANDS
Configuring WCCP Version 1.0 320
Configuring WCCP Version 2.0 321
Configuring WCCP for a Service Group 321
Configuring WCCP Multicast 322
Example Configurations 322
Monitoring WCCP 323
Configuring WCCP Version 2.0 Within a Single Subnet 324
Enabling Cisco Express Forwarding (CEF) 324
Further Information 324
HLOG FORMATS
Access Log Formats 325
Squid Log Format 326
Netscape Common Format 327
Netscape Extended Format 327
Netscape Extended 2 Format 328
WebTrends Extended Log Format 330
Filter Log Format 331
ITRACE ROUTE SYMBOLS
JCATEGORY SET DEFINITIONS
Core Categories 335
Sexually Explicit 335
dua1611-5aaa04.book Page 13 Friday, November 29, 2002 8:56 PM

Drugs/Alcohol 335
Gambling 336
Violence 336
Hate Speech 336
Productivity Categories 337
Astrology and Mysticism 337
Entertainment 337
Games 338
General News 338
Glamour and Intimate Apparel 338
Hobbies 338
Investment 339
Job Search 339
Motor Vehicles 339
Personals and Dating 339
Real Estate 339
Shopping 340
Sports 340
Travel 340
Usenet News 340
ChatBlock 340
dua1611-5aaa04.book Page 14 Friday, November 29, 2002 8:56 PM

GLOSSARY
INDEX
3COM END USER SOFTWARE LICENSE AGREEMENT
3COM END USER WEB SITE FILTER PRODUCT LICENSE
AGREEMENT
GNU GENERAL PUBLIC LICENSE VERSION 2, JUNE 1991
REGULATORY NOTICES
dua1611-5aaa04.book Page 15 Friday, November 29, 2002 8:56 PM

dua1611-5aaa04.book Page 16 Friday, November 29, 2002 8:56 PM

ABOUT THIS GUIDE
This guide provides all the information you need to install and use a
SuperStack®3 Webcache 1000/3000. It also describes the features of the
Webcache and outlines how to use those features to optimize the
performance of the Webcache.
This guide is intended for the system or network administrator who is
responsible for installing, configuring and managing the network. It
assumes a basic working knowledge of local area network (LAN) and
wide area network (WAN) operations.
If release notes are shipped with your product and the information there
differs from the information in this guide, follow the instructions in the
release notes.
Most user guides and release notes are available in Adobe Acrobat
Reader Portable Document Format (PDF) or HTML on the 3Com
World Wide Web site:
http://www.3com.com/
dua1611-5aaa04.book Page 17 Friday, November 29, 2002 8:56 PM

18 ABOUT THIS GUIDE
Conventions Table 1 and Table 2 list conventions that are used throughout this guide.
Tab le 1 Notice Icons
Icon Notice Type Description
Information note Information that describes important features or
instructions
Caution Information that alerts you to potential loss of data or
potential damage to an application, system, or device
Warning Information that alerts you to potential personal injury
Tab le 2 Text Conventions
Convention Description
Screen displays This typeface represents information as it appears on the
screen.
Syntax The word “syntax” means that you must evaluate the syntax
provided and then supply the appropriate values for the
placeholders that appear in angle brackets. Example:
To change your password, use the following syntax:
system password <password>
In this example, you must supply a password for
<password>.
Commands The word “command” means that you must enter the
command exactly as shown and then press Return or Enter.
Commands appear in bold. Example:
To reboot the Webcache, enter the following command:
system control reboot
The words “enter”
and “type”
When you see the word “enter” in this guide, you must type
something, and then press Return or Enter. Do not press
Return or Enter when an instruction simply says “type.”
Keyboard key names If you must press two or more keys simultaneously, the key
names are linked with a plus sign (+). Example:
Press Ctrl+Alt+Del
(continued)
dua1611-5aaa04.book Page 18 Friday, November 29, 2002 8:56 PM

Related Documentation 19
Related
Documentation
In addition to this Guide, the Webcache 1000/3000 documentation set
includes the following documents:
■Webcache 1000/3000 Online Help
This online help system contains information about the Web interface
operations that enable you to manage the Webcache. It contains an
explanation for each operation and the available parameters. You can
access it by clicking Help on any of the Web interface screens or by
clicking the Online Help button in the Help View.
■Webcache 1000/3000 Release Notes
These notes provide information about the current software release,
including new features, modifications, and known problems.
There are other publications you may find useful, such as:
■Documentation accompanying 3Com Network Supervisor. This is
supplied on the CD-ROM that accompanies the Webcache.
■Documentation accompanying switches capable of Layer 4 redirection
(for example the SuperStack 3 Switch 4400), and other devices that
can be used with the Webcache (for example the SuperStack 3
Firewall and SuperStack 3 Server Load Balancer).
Words in italics Italics are used to:
■Emphasize a point.
■Denote a new term at the place where it is defined in the
text.
■Identify menu names, menu commands, and software
button names. Examples:
From the Help menu, select Contents.
Click OK.
Tab le 2 Text Conventions (continued)
Convention Description
dua1611-5aaa04.book Page 19 Friday, November 29, 2002 8:56 PM

20 ABOUT THIS GUIDE
Documentation
Comments
Your suggestions are very important to us. They will help make our
documentation more useful to you. Please e-mail comments about this
document to 3Com at:
[e-mail]
Please include the following information when contacting us:
■Document title
■Document part number (on the title page)
■Page number (if appropriate)
Example:
■SuperStack 3 Webcache 1000/3000 User Guide
■Part number: DUA1611-5AAA04
■Page 25
Please note that we can only respond to comments and questions about
3Com product documentation at this e-mail address. Questions related to
technical support or sales should be directed in the first instance to your
network supplier.
Product
Registration
You can now register your SuperStack 3 Webcache on the 3Com Web
site:
http://www.3com.com/register/
Registering your Webcache:
■Provides access to the latest Webcache software (at time of
registration).
■Activates the warranty. See the warranty flyer supplied with your
Webcache for details.
■Allows you to activate the 30 day free trial of the Webcache Web Site
Filtering service. See “3Com Web Site Filter” on page 147.
dua1611-5aaa04.book Page 20 Friday, November 29, 2002 8:56 PM