Radware 设备
基本配置步骤及日常维护
Radware China
1
Index
1 LinkProof设置................................................................................................................. 4 1.1 Active LinkProof ................................................................................................ 4 1.1.1 初始化 .............................................................................................................. 4 1.1.2 连接设备........................................................................................................... 5 1.1.3 IP地址设置 ....................................................................................................... 5 1.1.4 Routing表 ......................................................................................................... 5 1.1.5 Global Configuration........................................................................................... 6 1.1.6 定义NHR ......................................................................................................... 6 1.1.7 Virtual IP ........................................................................................................... 6 1.1.8 Mapped IP ......................................................................................................... 6 1.1.9 SmartNAT ......................................................................................................... 7 1.1.10 Proximity设置 ................................................................................................... 7 1.1.11 DNS.................................................................................................................. 7 1.1.12 冗余配置........................................................................................................... 8 1.2 带宽管理配置.................................................................................................. 11 1.2.1 全局参数......................................................................................................... 11 1.2.2 网络分类......................................................................................................... 11 1.2.3 服务类型......................................................................................................... 12 1.2.4 定义策略......................................................................................................... 12 1.3 应用安全配置.................................................................................................. 13 1.3.1 全局参数......................................................................................................... 13 1.3.2 安全策略......................................................................................................... 13 1.4 Backup LinkProof............................................................................................. 14 1.4.1 初始化 ............................................................................................................ 14 1.4.2 连接设备......................................................................................................... 14 1.4.3 IP地址设置 ..................................................................................................... 14 1.4.4 Routing表 ....................................................................................................... 14 1.4.5 Global Configuration......................................................................................... 14 1.4.6 定义NHR ....................................................................................................... 14 1.4.7 Virtual IP ......................................................................................................... 14 1.4.8 Mapped IP ....................................................................................................... 15 1.4.9 SmartNAT ....................................................................................................... 15 1.4.10 Proximity设置 ................................................................................................. 15 1.4.11 DNS................................................................................................................ 15 1.4.12 冗余配置......................................................................................................... 15 1.4.13 带宽管理和应用安全 ....................................................................................... 17 2 WSD 配置 ..................................................................................................................... 18 2.1 Active WSD..................................................................................................... 18 2.1.1 初始化 ............................................................................................................ 18 2.1.2 连接设备......................................................................................................... 18 2.1.3 IP地址设置 ..................................................................................................... 18 2.1.4 Routing表 ....................................................................................................... 18 2.1.5 Global Configuration......................................................................................... 18 2.1.6 Farm ............................................................................................................... 19 2.1.7 Server ............................................................................................................. 19 2.1.8 SuperFarm ....................................................................................................... 19
2
2.1.9 NHR表 ........................................................................................................... 19 2.1.10 VIP NHR ......................................................................................................... 20 2.1.11 冗余配置......................................................................................................... 20 2.2 Backup WSD ................................................................................................... 22 2.2.1 初始化 ............................................................................................................ 22 2.2.2 连接设备......................................................................................................... 22 2.2.3 IP地址设置 ..................................................................................................... 22 2.2.4 Routing表 ....................................................................................................... 22 2.2.5 Global Configuration......................................................................................... 22 2.2.6 Farm ............................................................................................................... 22 2.2.7 Server ............................................................................................................. 23 2.2.8 SuperFarm ....................................................................................................... 23 2.2.9 NHR表 ........................................................................................................... 23 2.2.10 VIP NHR ......................................................................................................... 23 2.2.11 冗余配置......................................................................................................... 23 3 Certain T 100 配置 ......................................................................................................... 24 3.1 初始化 ............................................................................................................ 24 3.2 设备连接......................................................................................................... 25 3.3 生成Key ......................................................................................................... 25 3.4 认证配置......................................................................................................... 25 3.5 SSL加速模式配置 ........................................................................................... 25 3.6 网络配置......................................................................................................... 25 4 日常维护....................................................................................................................... 26
3
说明：本文主要介绍项目中相关Radware设备的安装步骤，如果具体配置信息（如IP地址等）与实际情况出现差异，请以实际配置为准。
1 LinkProof设置
配置步骤主要以Configware工具为例做相应说明。命令行方式请参照命令手册。配置步骤中重要或需要注意的部分用红色或黑体表明。
LinkProof版本：3.73.01。 1.1
Active LinkProof
LinkProof采用冗余方式时，必须使用“主－备”模式。 1.1.1
初始化
连接LinkProof的Console端口，进行初始化。终端设置如下： 出现以下提示：
StartUp Configuration
4
0. Exit
1. IP address
2. IP subnet mask 3. Port number ……
配置管理端口。
1.1.2 连接设备
使用Configware软件连接设备。在地址栏输入管理端口IP地址，默认Community为Public。
1.1.3
打开 “Router ? IP Router ? Interface Parameters”，单击 “Insert”，加入以下IP地址： Interface FE -1 FE -2 G -1 IP Address 218.108.1.2 218.108.17.2 10.10.10.1 Subnet Mask 255.255.255.224 255.255.255.224 255.255.255.0 备注 Active LP Active LP Active LP IP地址设置
单击 “Update” 图标确认，单击“Set”存储配置。 1.1.4
打开 “Router ? IP Router ? Route Table”， 单击 “Insert”，加入以下路由： Interface FE -1 FE -2 G-1 G-1 Destination Address 0.0.0.0 0.0.0.0 10.22.22.0 10.22.22.0 Subnet Mask 0.0.0.0 0.0.0.0 255.255.255.0 255.255.255.0 Next Hop 218.108.1.1 218.108.17.1 10.10.10.20 10.10.10.30 备注 链路负载均衡 链路负载均衡 FW负载均衡 FW负载均衡 Routing表
单击 “Update” 图标确认，单击“Set”存储配置。 5