Duration: 4 Days
This course combines lecture and labs to show you how to deploy and configure the Cisco Catalyst 6500 Application Control Engine (ACE) module and the Cisco ACE 4710 appliance (release 4.1).
Combining ACEAP - Implementing the Cisco ACE Appliance v1.0 and ACESM - Implementing the Application Control Engine Service Module, this course covers all of the key features of the ACE module and appliance, including:
- Resource virtualization and management
- Server load balancing (Layers 2-4 and Layer 7)
- SSL termination and offload
- Security features such as application-layer inspection and fix-ups
- Application optimization features
To participate in this course and access the remote labs, you are required to bring a laptop running Windows 98, ME, NT4, 2000, XP, or Vista, and including Internet Explorer 6.0 or higher. Also, the ability to install new ActiveX components may be required.
What You Will Learn
- Updated ACE software release 4.1 for the ACE 4710 Appliance
- IP traffic flows in N-tier web applications
- Key hardware and software features of the ACE module and appliance
- Design and configure integration of the ACE into the network topology, including bridged, routed, and one-arm modes
- Design and configure multiple ACE contexts to virtualize network services
- Manage allocation of resources to virtual contexts
- Methods used to manage the ACE module and appliance
- Use the Cisco Modular Policy CLI to configure ACE features
- Configure IP application-based security
- Configure Layer 4-7 load balancing
- Configure health monitoring
- Configure Layer 7 protocol processing options
- Configure SSL protocol processing
- Configure the web application acceleration features on the ACE appliance
- Configure the ACE module or appliance for high availability to provide reliable application networking services
- Apply a methodology for designing an end-to-end ACE configuration that integrates multiple feature sets
Audience
Systems engineers and network architects who need to design or deploy server load-balancing solutions using the Cisco ACE module or appliance
Prerequistes
Experience with:
- TCP/IP protocol
- HTTP and SSL protocols
- N-tier application architecture
- Server load balancing
Course Outline
1. Data Center Application Services Overview
- IP-Based Data Center Applications
- IP Protocol Stack Review
- IP Application Review
- Web Technology Overview
- ACE Family Solutions
- Multi-Tier Applications
- Application Delivery Products
- Deploying the ACE Appliance and Service Module
- Connecting ACE to the Network
- Network Topologies
- ACE 4710 Installation Procedure
- ACE Appliance GUI
- Virtualization
- Resource Management
- Authorizing Management Users
- Configuring Interfaces
- Configuring Management
2. Implementing Server Load Balancing
- Modular Policy CLI
- Class and Policy Maps
- Applying Policy Maps
- Managing the ACE Appliance and Service Module
- Permitting Management Traffic
- Remote Management
- SNMP Manageability
- XML Management API
- Application Networking Manager
- Security Features
- IP Access Control Lists
- ACL Object Groups
- TCP/IP Fragmentation/Reassembly
- TCP/IP Normalization
- SYN Cookies
- Network Address Translation
- Layer 4 Load Balancing
- Load Balancing Concepts
- Load Balancing Algorithms
- Configuring Layer 4 Load Balancing
- Traffic Rate Limiting
- Firewall Load Balancing
- Health Monitoring
- Active Health Probes
- HTTP Error Code Monitoring
- Using TCL Scripting
- Route Health Injection
- Backup Servers/Server Farms
- KAL-AP Integration
- Layer 7 Protocol Processing
- Configuring HTTP Layer 7 Load Balancing
- Persistent and Pipelined HTTP Extensions
- Server Reuse
- HTTP Modifications
- Session Persistence
- Protocol Inspection
- HTTP Inspection
- FTP, RDP, Radius, RTSP, and SIP Protocol Processing
- Generic Protocol Parsing
- Other Inspected Protocols
- Processing Secure Connections
- Digital Encryption Technologies
- SSL Service Options
- Configuring a Public Key Infrastructure
- Configuring SSL Proxy Services
- SSL Session Reuse
- SSL Queue Delay
- SSL Client Authentication
- Web Application Acceleration
- Performance Factors
- Acceleration Architecture
- FlashForward
- Delta Optimization
- Single-Request Optimizations
- Compression Overview
- Configuring Compression
- High Availability
- Redundancy
- Object Tracking
- Failover
- State Replication
- Fault Tolerance Configuration
- Displaying Fault Tolerance Information
- Integrating Multiple Features
- Analyzing Network Requirements
- Designing Cisco ACE Contexts and Features
- Configuring Multiple Integrated Features
Course Labs
Lab 1: Implementing Virtualization
Lab 2: Using Network Address Translation
Lab 3: Configuring Server Load Balancing
Lab 4: Implementing Health Monitoring
Lab 5: Configuring Layer 7 Load Balancing
Lab 6: Enabling Sticky Connections
Lab 7: Enabling Protocol Inspection
Lab 8: Configuring SSL Termination
Lab 9: Cisco ACE Appliance HTTP Optimizations
Lab 10: Integrating Multiple Features