Riverbed SteelHead SD Series User manual

SteelHead
™
SD User Guide
Models 570-SD, 770-SD, 3070-SD
SteelHead SD 2.12, SteelConnect 2.12
May 2019

Riverbed Technology
680 Folsom Street
San Francisco, CA 94107
www.riverbed.com
Part Number
712-00328-01
© 2019 Riverbed Technology, Inc. All rights reserved.
Riverbed and any Riverbed product or service name or logo used herein are trademarks of Riverbed. All other trademarks used
herein belong to their respective owners. The trademarks and logos displayed herein cannot be used without the prior written
consent of Riverbed or their respective owners.
Akamai® and the Akamai wave logo are registered trademarks of Akamai Technologies, Inc. SureRoute is a service mark of
Akamai. Apple and Mac are registered trademarks of Apple, Incorporated in the United States and in other countries. Cisco is
a registered trademark of Cisco Systems, Inc. and its affiliates in the United States and in other countries. EMC, Symmetrix, and
SRDF are registered trademarks of EMC Corporation and its affiliates in the United States and in other countries. IBM, iSeries,
and AS/400 are registered trademarks of IBM Corporation and its affiliates in the United States and in other countries. Juniper
Networks and Junos are registered trademarks of Juniper Networks, Incorporated in the United States and other countries.
Linux is a trademark of Linus Torvalds in the United States and in other countries. Microsoft, Windows, Vista, Outlook, and
Internet Explorer are trademarks or registered trademarks of Microsoft Corporation in the United States and in other countries.
Oracle and JInitiator are trademarks or registered trademarks of Oracle Corporation in the United States and in other countries.
UNIX is a registered trademark in the United States and in other countries, exclusively licensed through X/Open Company, Ltd.
VMware, ESX, ESXi are trademarks or registered trademarks of VMware, Inc. in the United States and in other countries.
This product includes Windows Azure Linux Agent developed by the Microsoft Corporation (http://www.microsoft.com/).
Copyright 2017 Microsoft Corporation.
This product includes software developed by the University of California, Berkeley (and its contributors), EMC, and Comtech
AHA Corporation. This product is derived from the RSA Data Security, Inc. MD5 Message-Digest Algorithm.
The SteelHead Mobile Controller (virtual edition) includes VMware Tools. Portions Copyright © 1998-2016 VMware, Inc. All
Rights Reserved.
NetApp Manageability Software Development Kit (NM SDK), including any third-party software available for review with such
SDK which can be found at http://communities.netapp.com/docs/DOC-1152, and are included in a NOTICES file included
within the downloaded files.
For a list of open source software (including libraries) used in the development of this software along with associated copyright
and license agreements, see the Riverbed Support site at https://support.riverbed.com.
This documentation is furnished “AS IS” and is subject to change without notice and should not be construed as a commitment
by Riverbed. This documentation may not be copied, modified or distributed without the express authorization of Riverbed and
may be used only in connection with Riverbed products and services. Use, duplication, reproduction, release, modification,
disclosure or transfer of this documentation is restricted in accordance with the Federal Acquisition Regulations as applied to
civilian agencies and the Defense Federal Acquisition Regulation Supplement as applied to military agencies. This
documentation qualifies as “commercial computer software documentation” and any use by the government shall be
governed solely by these terms. All other use is prohibited. Riverbed assumes no responsibility or liability for any errors or
inaccuracies that may appear in this documentation.

Contents |3
Contents
Welcome to SteelHead SD ..................................................................................................................................... 7
Documentation and release notes............................................................................................................. 7
Contacting Riverbed...................................................................................................................................... 7
1 - Introducing SteelHead SD ...............................................................................................................................9
Overview of the SteelHead SD ....................................................................................................................9
Routing features by model......................................................................................................................... 11
Hardware and software requirements .....................................................................................................12
NIC support............................................................................................................................................ 12
Firewall requirements........................................................................................................................... 12
Ethernet network compatibility ......................................................................................................... 13
SNMP-based management compatibility........................................................................................ 13
Next steps ......................................................................................................................................................13
2 - Configuring Virtual SteelHead WAN Optimization................................................................................... 15
Overview of WAN optimization on the virtual SteelHead....................................................................15
Assigning the in-path IP address and default gateway in SCM ..........................................................16
Enabling WAN Optimization in SCM ........................................................................................................ 17
Identifying the primary IP address of the SteelHead .....................................................................19
Enabling WAN optimization on the virtual SteelHead instance .........................................................19
Configuring the in-path interface and default gateway ...............................................................19
Troubleshooting ........................................................................................................................................... 21
3 - Configuring DHCP Options in Zones on SteelHead SD ..........................................................................23
Configuring DHCP options on SteelHead SD LAN clients ..................................................................23
Overriding DNS on guest zones on SteelHead SD................................................................................24
4 - Configuring Local Subnet Discovery on SteelHead SD...........................................................................27
Overview of local subnet discovery .........................................................................................................27
Routing criteria .............................................................................................................................................27

4|Contents
Defining global subnet discovery at the organization level ................................................................28
Defining local subnet discovery............................................................................................................... 30
5 - Configuring AutoVPN on SteelHead SD .....................................................................................................33
Overview of AutoVPN on SteelHead SD..................................................................................................33
Configuring AutoVPN on SteelHead SD..................................................................................................34
6 - Defining VLAN Trunk Ports on SteelHead SD............................................................................................ 37
Overview of multizone VLAN trunk mode on SteelHead SD..............................................................37
Defining trunk mode on ports...................................................................................................................38
7 - Configuring BGP, OSPF, Static Routing, and Route Retraction on SteelHead SD .............................. 41
Configuring BGP on SteelHead SD...........................................................................................................41
BGP on SteelHead SD overview.........................................................................................................42
Enabling BGP and configuring BGP neighbors on SteelHead SD ..............................................42
Configuring BGP routing policies..................................................................................................... 44
Configuring BGP path selection ........................................................................................................45
Configuring BGP inbound and outbound prefixes ....................................................................... 46
Configuring BGP route redistribution...............................................................................................47
Configuring conditional default-route originate routing............................................................ 48
Configuring the BGP origin-type attribute..................................................................................... 49
Enabling multi exit discriminator (MED) settings............................................................................ 51
Configuring BGP route summarization............................................................................................52
Resetting BGP sessions........................................................................................................................54
Viewing BGP status...............................................................................................................................55
Configuring OSPF with ABR on SteelHead SD.......................................................................................55
Introducing OSPF with ABR ................................................................................................................56
Creating an OSPF network..................................................................................................................56
Configuring OSPF interfaces ..............................................................................................................59
Creating OSPF areas............................................................................................................................ 60
Configuring redistribution settings for OSPF ..................................................................................62
Configuring OSPF route summarization......................................................................................... 64
Viewing OSPF status.............................................................................................................................65
Defining static routes on SteelHead SD appliances............................................................................. 66
Route retraction for SteelHead SD ...........................................................................................................67
8 - Configuring BGP and OSPF Routing Policies on SteelHead SD............................................................ 69
Overview of routing policies on SteelHead SD..................................................................................... 69
What are routing policies?..........................................................................................................................70
Basic steps ..............................................................................................................................................72
Creating routing IPv4 prefix lists ...............................................................................................................72
Creating routing community lists .............................................................................................................73

Contents | 5
Creating routing AS path lists ....................................................................................................................74
Configuring route maps..............................................................................................................................76
9 - Configuring LAN-Side Internet Breakout on SteelHead SD ...................................................................85
Overview of LAN-side internet breakout on SteelHead SD ................................................................85
Configuring LAN-side internet breakout................................................................................................ 86
Troubleshooting .......................................................................................................................................... 89
10 - Configuring High Availability on SteelHead SD ...................................................................................... 91
Overview of HA on SteelHead SD.............................................................................................................91
Symmetric and asymmetric uplink connectivity ............................................................................92
Layer 2 and Layer 3 support at the branch......................................................................................93
Failure conditions................................................................................................................................. 94
Prerequisites ................................................................................................................................................. 94
Configuring a SteelHead SD HA pair....................................................................................................... 94
Configuring the AUX port on the HA pair........................................................................................95
Configuring the LAN zone for the SteelHead SD HA pair ............................................................95
Assigning the LAN zone to the SteelHead SD HA pair ................................................................. 96
Configuring the appliances in an HA pair ........................................................................................97
Configuring a standby LAN HA link.................................................................................................. 98
Monitoring a high-availability pair ..........................................................................................................101
Troubleshooting .........................................................................................................................................103
11 - Configuring QoS Shaping on SteelHead SD ..........................................................................................105
QoS shaping on SteelHead SD ................................................................................................................105
SteelHead SD QoS shaper.................................................................................................................105
If you set the QoS priority in a traffic rule............................................................................................ 106
Configuring QoS shaping on SteelHead SD.........................................................................................107
12 - Health Check and Reporting on SteelHead SD.................................................................................... 109
Checking SteelHead SD connectivity to SCM..................................................................................... 109
Viewing the SteelHead SD HA status .....................................................................................................110
Displaying underlay ARP tables ...............................................................................................................110
Displaying FIB tables ...................................................................................................................................111
Displaying BGP peer tables ...................................................................................................................... 112
Displaying OSPF neighbors and routes ................................................................................................. 112
Displaying NTP server status.................................................................................................................... 113
Enabling SNMP reporting and logging .................................................................................................. 114
Exporting syslog messages to an external syslog server ...................................................................114

6|Contents
Exporting Netflow data ............................................................................................................................. 115
A - Port Mapping for SteelHead SD ................................................................................................................. 117
SteelHead SD 570-SD and 770-SD appliances .................................................................................... 117
Physical ports....................................................................................................................................... 117
CVM ports............................................................................................................................................. 117
Physical port to flows port mapping............................................................................................... 117
Service chain virtual machines......................................................................................................... 117
vSwitch mapped VM ports ................................................................................................................ 118
Bridged VM ports for internal communication............................................................................. 119
SteelHead SD 3070-SD appliance ..........................................................................................................119
Physical ports....................................................................................................................................... 119
CVM ports.............................................................................................................................................119
Physical port to flows port mapping............................................................................................... 119
SVM ports.............................................................................................................................................. 119
RVM ports .............................................................................................................................................120
vSH ports...............................................................................................................................................120
B - TOS, DSCP, QoS Traffic Class Table .......................................................................................................... 121
TOS, DSCP, and QoS Traffic Classes Table ........................................................................................... 121

Welcome to SteelHead SD |7
Welcome to SteelHead SD
Welcome to the SteelHead SD User Guide. SteelHead SD combines SD-WAN and cloud networking
capabilities (powered by SteelConnect) with Riverbed WAN optimization (powered by RiOS) into a single
appliance.
This guide describes how to configure the Riverbed SteelHead SD (SteelHead SD) when used in
conjunction with SteelConnect SDI-2030 and SDI-5030 gateways.
This guide is written for network administrators familiar with administering and managing WANs.
For a high-level look at how SteelConnect works, see the SteelConnect Manager User Guide.
Documentation and release notes
The most current version of all Riverbed documentation can be found on the Riverbed Support site at
https://support.riverbed.com.
See the Riverbed Knowledge Base for any known issues, how-to documents, system requirements, and
common error messages. You can browse titles or search for keywords and strings. To access the
Riverbed Knowledge Base, log in to the Riverbed Support site at https://support.riverbed.com.
Each software release includes release notes. The release notes list new features, known issues, and fixed
problems. To obtain the most current version of the release notes, go to the Software and
Documentation section of the Riverbed Support site at https://support.riverbed.com.
Examine the release notes before you begin the installation and configuration process.
Contacting Riverbed
This section describes how to contact departments within Riverbed.
•Technical support - Problems installing, using, or replacing Riverbed products? Contact Riverbed
Support or your channel partner who provides support. To contact Riverbed Support, open a
trouble ticket by calling 1-888-RVBD-TAC (1-888-782-3822) in the United States and Canada or +1
415-247-7381 outside the United States. You can also go to https://support.riverbed.com.
•Professional services - Need help with planning a migration or implementing a custom design
solution? Contact Riverbed Professional Services. Email [email protected] or go to
http://
www.riverbed.com/services/index.htm
.

8 | Welcome to SteelHead SD
Contacting Riverbed
•Documentation - Have suggestions about the online documentation or printed materials? Send
comments to [email protected].

Introducing SteelHead SD |9
1
Introducing SteelHead SD
This topic provides an overview of the SteelHead SD. It includes these sections:
•“Overview of the SteelHead SD” on page 9
•“Routing features by model” on page 11
•“Hardware and software requirements” on page 12
•“Next steps” on page 13
This guide doesn’t provide detailed information about configuring and managing SD-WAN or WAN
optimization features. For details, see the SteelConnect Manager User Guide and the SteelHead User
Guide.
This guide assumes you have installed your SteelHead SD appliances. For details, see the SteelHead SD
Installation Guide.
Overview of the SteelHead SD
SteelHead SD combines SD-WAN and cloud networking capabilities (powered by SteelConnect) with
Riverbed WAN optimization (powered by RiOS) into a single appliance. SteelHead SD seamlessly
integrates advanced SD-WAN functionality with industry-leading WAN optimization, security, and
visibility services all in one streamlined appliance. SteelHead SD WAN optimization reduces bandwidth
utilization and accelerates application delivery and performance, while providing SteelConnect
integration in the SteelOS environment.
SteelHead SD provides you with the ability to quickly provision branch sites and deploy applications
remotely. At the same time, applications are optimized to ensure performance and reduce latency with
zero touch provisioning.
Typically, SteelHead SD appliances and the SteelConnect SDI-2030 gateway are located in the branch
office in conjunction with SteelConnect SDI-5030 gateways at the data center. The SteelConnect SDI-
2030 gateway can also be deployed inline as a 1-Gbps data center gateway with active-active HA. The
SteelConnect SDI-2030 gateway can also serve as a very large branch office box with high throughput
requirements. The SteelConnect SDI-2030 gateway doesn’t support WAN optimization capabilities.

10 | Introducing SteelHead SD
Overview of the SteelHead SD
SteelHead SD advanced routing and high availability (HA) features are supported on the SteelHead SD
570-SD, 770-SD, and 3070-SD appliances and the SteelConnect SDI-2030 gateway located at the
branch. For details, see the SteelHead SD User Guide and the SteelConnect Manager User Guide.
Figure 1-1. SteelHead SD deployment
SteelHead SD supports these configuration modes:
•SD-WAN and WAN optimization - In this configuration, WAN optimization runs as a service on top
of SD-WAN. The SteelCentral Controller for SteelHead (SCC) or the SteelHead Management
Console handles management and configuration of the WAN optimization features. Also, SteelHead
CLI-based management is supported for WAN optimization settings. You connect to the
Management Console via the primary port, which also uses DHCP to acquire its IP address. For
details on configuring WAN optimization features, see the SteelCentral Controller for SteelHead
User Guide and the SteelHead User Guide.
•SD-WAN only - In this configuration, WAN optimization is not required. SCM handles the
management and configuration of SD-WAN features. SCM connectivity requires one of the WAN
ports that are used as uplink ports. Only the SD-WAN service can be enabled or disabled via SCM.
The SD-WAN service upgrades are managed via SCM. SCM pushes the new software version
according to the schedule that you set up. For details on configuring SD-WAN features, see the
SteelConnect Manager User Guide and the SteelHead SD User Guide.
For details on SteelHead SD software architecture and new features for SteelHead SD, see the SteelHead
SD Installation Guide.
.

Introducing SteelHead SD | 11
Routing features by model
Routing features by model
*SCM 2.9 and later support an underlay routing interworking solution that bridges BGP and OSPF. For
details, see the SteelConnect Manager User Guide.
Feature SteelHead-
SD 570-SD,
770-SD,
3070-SD
SDI-
2030
SDI-130 SDI-330 SDI-1030 SDI-
5030
SDI-VGW
eBGP Yes Yes Yes Yes Yes Yes Yes
iBGP Yes Yes No No No No No
OSPF single
area
Yes Yes Yes Yes Yes No No
OSPF multi-
area ABR
Yes Yes No No No No No
ASBR Yes Yes Yes*
(Underlay
routing inter-
working
solution)
Yes*
(Underlay
routing inter-
working
solution)
Yes*
(Underlay
routing inter-
working
solution)
No Yes*
(Underlay
routing inter-
working
solution)
Route
retraction
Yes Yes No No No Yes No
Default route
originate
OSPF/BGP OSPF
/BGP
LAN
and
WAN
OSPF only
LAN
OSPF only
LAN
OSPF only
LAN
BGP
only
OSPF only
LAN
Overlay route
injection in
LAN
Yes Yes No No No Yes No
Local subnet
discovery
Yes Yes No No No Yes No
Static routes Yes Yes
(LAN
and
WAN)
Yes Yes Yes Yes Yes
VLAN
support (LAN
side)
Yes Yes Yes Yes Yes Yes Yes

12 | Introducing SteelHead SD
Hardware and software requirements
Hardware and software requirements
NIC support
Network interface card (NICs) are supported on the SteelHead SD 3070-SD appliances for nonbypass
traffic. SteelHead SD 570-SD and 770-SD appliances do not support NICs.
Note: For SteelHead SD 3070-SD appliances, bypass NICs are not required for SteelConnect gateway deployments
since LAN traffic requires network address translation (NAT) before it reaches the service provider network.
You can install these NICs in the SteelHead SD 3070-SD for nonbypass traffic.
*HHHL = Half Height, Half Length
For details on NICs, see the Network and Storage Card Installation Guide.
Firewall requirements
The SteelHead SD 570-SD, 770-SD, 3070-SD, and SDI-2030 support stateful application-based firewalls
at the network edge. For details on SteelConnect firewall and security features, see the SD-WAN
Deployment Guide.
Riverbed component Hardware and software requirements
SteelHead SD appliance The SteelHead SD 570-SD and 770-SD appliances are desktop
models.
The SteelHead SD 3070-SD appliance requires a 19-inch
(483 mm) four-post rack. For details, see the Rack Installation
Guide.
Virtual SteelHead (vSH) SteelHead SD requires the RiOS 9.8.1 vSH image, which is
contained within the SteelConnect 2.12 image.
The SteelHead Management Console has been tested with all
versions of Chrome, Mozilla Firefox Extended Support Release
version 38, and Microsoft Internet Explorer 11.
JavaScript and cookies must be enabled in your web browser.
SteelConnect Manager (SCM) SteelHead SD requires SteelConnect 2.12.
SCM supports the latest version of the Chrome browser. SCM
requires a minimum screen resolution of 1280 x 720 pixels. We
recommend a maximum of 1600 pixels for optimal viewing.
SteelCentral Controller for SteelHead (SCC) We recommend you have SCC 9.9.0 installed if you are
managing vSHs with WAN optimization enabled on SteelConnect
2.12.
NICs Size (*) Manufacturing part # Orderable part #
Two-Port 10-GbE Fiber SFP+ HHHL 410-00036-02 NIC-1-010G-2SFPP
Four-Port 10-GbE Fiber SFP+ HHHL 410-00108-01 NIC-1-010G-4SFPP

Introducing SteelHead SD | 13
Next steps
All communication is sourced from the site out to the SteelConnect management service. There’s no
need to set up elaborate firewall or forwarding rules to establish the dynamic full-mesh VPN or to gain
connectivity to the cloud. After you register an appliance, it receives its assigned configuration
automatically. For details on SteelConnect firewall requirements, see the SteelConnect Manager User
Guide.
Make sure the firewall ports 80 and 443 are open so that software installation and SCM operations aren’t
blocked. For details on SteelConnect default ports, see the SteelConnect Manager User Guide.
Ethernet network compatibility
The SteelHead SD appliance supports these Ethernet networking standards.
SNMP-based management compatibility
SteelConnect provides support for SNMPv1 and v2c polling, and event logging are supported on the SDI-
130, SDI-330, SDI-1030, SDI-5030, and virtual gateways. SNMP v1, v2c, and v3 are supported in SCM
(and only visible by a realm administrator). SNMP reporting is supported on SteelHead SD SD-570, SD-
770, SD-3070 and 2030-SDI appliances located at the branch. For details, see the SteelConnect
Manager User Guide.
The virtual SteelHead supports proprietary MIBs accessible through SNMP, SNMPv1, SNMPv2c, and
SNMPv3, although some MIB items might only be accessible through SNMPv2 and SNMPv3. For details
on the WAN optimization service MIB, see the SteelHead User Guide.
Next steps
Make sure you read the SteelConnect Manager User Guide. It contains detailed information about how
to design and organize your network of SteelHead SD appliances and SteelConnect gateways.
Ethernet standard IEEE standard
Ethernet Logical Link Control (LLC) IEEE 802.2 - 1998
Fast Ethernet 100BASE-TX IEEE 802.3 - 2008
Gigabit Ethernet over Copper 1000BASE-T (All copper interfaces are autosensing for
speed and duplex.)
IEEE 802.3 - 2008
Gigabit Ethernet over Fiber 1000BASE-SX (LC connector) IEEE 802.3 - 2008
Gigabit Ethernet over Fiber 1000BASE-LX IEEE 802.3 - 2008
Gigabit Ethernet over Fiber 10GBASE-LR Single Mode IEEE 802.3 - 2008
Gigabit Ethernet over 10GBASE-SR Multimode IEEE 802.3 - 2008

14 | Introducing SteelHead SD
Next steps

Configuring Virtual SteelHead WAN Optimization |15
2
Configuring Virtual SteelHead WAN
Optimization
This topic describes how to enable SteelHead WAN optimization for SteelHead SD 2.0. It includes these
sections:
•“Overview of WAN optimization on the virtual SteelHead” on page 15
•“Assigning the in-path IP address and default gateway in SCM” on page 16
•“Enabling WAN Optimization in SCM” on page 17
•“Enabling WAN optimization on the virtual SteelHead instance” on page 19
•“Troubleshooting” on page 21
Important: These instructions assume you have created an organization, site, zones, and uplinks for the SteelHead
SD appliance. For details, see the SteelConnect Manager User Guide. For detailed information on installing
SteelHead SD, see the SteelHead SD Installation Guide.
Overview of WAN optimization on the virtual SteelHead
When you enable WAN optimization on the virtual SteelHead, you perform the initial configuration within
SCM. You must also configure settings on the virtual SteelHead instance itself, using the SteelHead
Management Console, the CLI, or the SteelCentral Controller for SteelHead (SCC).
When enabling WAN optimization, keep these guidelines in mind:
• To enable WAN optimization, the location where the SteelHead SD is installed must have at least
one LAN zone. The in-path IP address in the virtual SteelHead instance must match the address in
SCM.
• The LAN port must be configured as a single-zone uplink for the SteelHead WAN optimization
service. If you do not enable the LAN port, SteelConnect won’t see either the SteelHead WAN
optimization service or the clients on the LAN side of the network.
• The default gateway in the virtual SteelHead instance must be the IP address for the LAN zone in
SCM.
• If the LAN port of the SteelHead SD appliance is on a VLAN trunk, make sure to configure the VLAN
ID on the virtual SteelHead in-path interface.
• Depending on the in-path rules you have defined, the virtual SteelHead instance optimizes any
traffic received from SteelConnect via the LAN interface.

16 | Configuring Virtual SteelHead WAN Optimization
Assigning the in-path IP address and default gateway in SCM
• When WAN optimization is enabled in SCM, there is a momentary interruption to service as the
SteelConnect is reconfigured with its SteelHead LAN and WAN interfaces.
When WAN optimization is enabled, a virtual SteelHead instance is automatically provisioned by the
system. The primary port on the SteelHead SD appliance is connected directly to the primary interface
of the virtual SteelHead instance.
The virtual SteelHead instance is configured with a single in-path interface pair (LAN/WAN). Unlike
physical SteelHead appliances or their virtual equivalents that exist outside of an SD-WAN service-
chained deployment, the number of in-path interfaces is irrelevant. For consistency and compatibility,
the in-path interface pair is configured as LAN0_0 and WAN0_0.
Assigning the in-path IP address and default gateway in SCM
The first step is to assign an in-path IP address within the LAN zone for the site. You choose an IP address
for the LAN zone in which the SteelHead SD is installed. You will use this IP address to configure the in-
path interface and default gateway on the virtual SteelHead instance.
These instructions assume that you have configured the primary and LAN ports on the SteelHead SD
appliance in SCM:
• The LAN port is configured as a single-zone uplink for the SteelHead WAN optimization service. By
default, the LAN port is disabled on SteelHead SD appliances unless it is explicitly enabled. If you
don't enable the LAN port, SteelConnect won’t see either the SteelHead WAN optimization service
or the clients on the LAN side of the network.
• The primary port is configured as SteelHead Primary mode for the SteelHead SD appliance.
Note: If the LAN port attached to the SteelHead SD appliance is in a VLAN trunk, the virtual SteelHead instance must
be given an IP address from one of the zones that is part of the trunk, and the virtual SteelHead in-path IP address
must also be configured with the corresponding VLAN ID.
For details on configuring the primary and LAN ports, see the SteelHead SD Installation Guide.
To assign the in-path IP address and the default gateway in SCM
1. In SCM, choose Network Design > Zones.
2. Select the zone with the SteelHead SD appliance to expand the pane. The IP tab is displayed.

Configuring Virtual SteelHead WAN Optimization | 17
Enabling WAN Optimization in SCM
3. Under IPv4 Network, specify the LAN zone subnet. Write down this IP address. You will use this
address when you configure the inpath0_0 interface for WAN optimization on the virtual SteelHead
instance.
Figure 2-1. Assigning the IP address for the in-path IP address and default gateway
For example, if the network IP address is 172.16.20.0/24, you can assign any IP address from
172.16.20.1 to 172.16.20.254 for the SteelHead in-path interface.
4. Under IPv4 Gateway, specify the default gateway. Write down this IP address. You will use this
address when you configure the default gateway for WAN optimization on the virtual SteelHead
instance.
Enabling WAN Optimization in SCM
You enable WAN optimization in SCM in the Appliances page under the Services tab. You also specify
the virtual SteelHead instance in-path IP address. The in-path IP address must be within the LAN zone
subnet that you have defined.
The WAN optimization service is disabled by default. When disabled, the WAN optimization service will
not participate in any WAN optimization functionality. If disabled, any configuration related to WAN
optimization service on this appliance will not be applied.
Important: Only zones that are attached to a physical port can be used to configure the SteelHead SD IP address.
Choose Appliances > Port to attach a zone to a port.
To enable WAN optimization
1. Choose Appliances > Overview.

18 | Configuring Virtual SteelHead WAN Optimization
Enabling WAN Optimization in SCM
2. Select the SteelHead SD appliance to expand the page.
3. Select the Services tab.
Figure 2-2. Enabling WAN optimization in SCM
4. Under WAN Optimization Service, fill out these required session attributes:
•WAN Optimization Service - Click Enabled to enable the WAN optimization service for the selected
SteelHead SD appliance. When disabled, the WAN optimization service will not participate in any
WAN optimization functionality. If disabled, any configuration related to WAN optimization service
on this appliance will not be applied.
•SteelHead Zone - Select the zone to which this SteelHead SD appliance belongs. Only zones that
are attached to a physical port can be used to configure the SteelHead SD IP address. Choose
Appliances > Port to attach a zone to a port.
•SteelHead Inpath IP Address - Specify the SteelHead in-path IP address. The IP address must be
within the LAN zone subnet. This value tells SCM what in-path IP address you are using for the
virtual SteelHead instance.
5. Click Submit.
After the WAN optimization service has been enabled within SCM, the SteelHead SD triggers the
orchestration and provisioning of the virtual SteelHead instance. This action causes a momentary
interruption to operations within SteelConnect because it is reconfigured with the SteelHead LAN and
WAN interfaces.

Configuring Virtual SteelHead WAN Optimization | 19
Enabling WAN optimization on the virtual SteelHead instance
As the virtual SteelHead instance boots within SteelHead SD, its primary interface tries to obtain an IP
address via DHCP. It is important to ensure the SteelHead SD primary port is attached to a network where
a DHCP service is available.
Identifying the primary IP address of the SteelHead
You use the primary IP address to connect to the virtual SteelHead instance. You can identify the primary
IP address of the SteelHead in one of the following ways:
•When SteelConnect acts as the DHCP server - You can set the SteelConnect virtual gateway to act
as a DHCP server and identify the primary IP address for the SteelHead in SCM. To view the
SteelHead primary IP address in SCM, choose Appliances > Overview and select the SteelHead SD
appliance. The primary IP address is listed under the IPs tab. For details on configuring SteelConnect
to act as a DHCP server, see the SteelHead SD Installation Guide.
•When the SCC is used to manage SteelHeads - If you are using the SCC to manage the WAN
optimization service, you can obtain the primary IP address for each appliance in your network. SCC
automatically registers all SteelHeads it detects in your network and provides the primary IP address
for each in the Appliances page. For details on connecting to SCC, see the SteelCentral Controller
for SteelHead User Guide.
•When an external server acts as the DHCP server - You can obtain the MAC address from the
appliance and search for the primary IP address on the DHCP server console. You can find the MAC
address on the appliance label or you can view it in SCM. To view the MAC address in SCM, choose
Ports and select the primary port for the appliance. The MAC address is listed under the Info-Mode
tab.
After you have discovered the primary IP address that has been leased to the virtual SteelHead instance,
you simply log in to the management console user interface and complete the configuration of the
virtual SteelHead instance.
Enabling WAN optimization on the virtual SteelHead instance
To enable WAN optimization for SteelHead SD, you must configure the inpath0_0 interface and default
gateway for each appliance in your network using the SCC or the SteelHead Management Console.
Configuring the in-path interface and default gateway
These instructions describe how to configure the in-path interface and default gateway using the
SteelHead Management Console.
Tip: In the SCC, choose Manage: Appliances > Appliance Pages > In-Path Interfaces to modify the inpath0_0
interface and default gateway. You can push the policy to the selected appliance.

20 | Configuring Virtual SteelHead WAN Optimization
Enabling WAN optimization on the virtual SteelHead instance
To configure the in-path interface and the default gateway in the SteelHead
1. Using the Primary IP address you obtained from SCM, SCC, or the DHCP server, enter it in the address
bar of your web browser using HTTPS. The login page for the SteelHead Management Console is
displayed.
2. Specify the default user login (admin)and password (password).
3. Click Sign In to display the Dashboard.
4. Choose Networks > Networking: In-Path Interfaces.
Figure 2-3. In-Path Interfaces page