Computer Data, Inc.

Learning objectives

• Describe IP traffic flows in n-tier web applications
• Describe the key hardware and software features of the ACE module and appliance
• Design and configure integration of the ACE into the network topology, including bridged, routed, and one-arm modes
• Design and configure multiple ACE contexts to virtualize network services
• Manage allocation of resources to virtual contexts
• Describe the methods used to manage the ACE module and appliance
• Use the Cisco Modular Policy CLI to configure ACE features
• Configure IP application-based security
• Configure Layer 4-7 load balancing
• Configure health monitoring
• Configure Layer 7 protocol processing options
• Configure SSL protocol processing
• Configure the web application acceleration features on the ACE appliance
• Configure the ACE module or appliance for high availability to provide reliable application networking services
• Apply a methodology for designing an end-to-end ACE configuration that integrates multiple feature sets

Who should attend

• This course is designed for systems engineers and network architects who need to design or deploy server load-balancing solutions using the Cisco ACE module or appliance.

Course Outline

1. Introducing ACE

• IP Protocol Stack Review
• IP Application Review
• Introducing ACE

2. Deploying ACE

• Connecting ACE to the Network
• Network Topologies
• Virtualization
• Resource Management
• Authorizing Management Users
• Configuring Interfaces

3. Modular Policy CLI

• Class Maps
• Policy Maps
• Applying Policy Maps
• Permitting Management Traffic

4. Layer 4/7 Load Balancing

• IP Access Control Lists
• Load Balancing Concepts
• Load Balancing Algorithms
• Configuring Layer 4 Load Balancing
• Configuring Layer 7 Load Balancing
• Health Monitoring Overview
• Active Health Probes
• HTTP Error Code Monitoring
• Using TCL Scripting
• Route Health Injection
• Persistent and Pipelined Client Connections
• Server Reuse

5. Layer 7 Protocol Processing

• Session Persistence
• HTTP Modifications
• Protocol Inspection

6. Processing Secure Connections

• Digital Encryption Technologies
• SSL Service Options
• Configuring a Public-Key Infrastructure
• Configuring SSL Proxy Services

7. Security Features

• TCP/IP Fragmentation/Reassembly
• TCP/IP Normalization
• Network Address Translation

8. High Availability

• Redundancy
• Object Tracking
• Failover
• State Replication
• Displaying Fault Tolerance Information

9. Integrating Multiple Features

• Analyzing Network Requirements
• Designing ACE contexts
• Designing ACE features
• Configuring Multiple Integrated Features

Labs

Lab 1: Virtualization

Observe the lab configuration of the Catalyst 6500 and the ACE Admin Context, and then create new contexts and resource classes to understand the flexibility around ACE module virtualization.

Lab 2: Network Address Translation (NAT)

Configure the ACE context to perform a variety of NATs. The steps required to configure NAT on ACE are significantly very different from Cisco firewalls. NAT on ACE entirely relies on the MPC framework.

Lab 3: Server Load Balancing

Configure the ACE context to match VIP-destined traffic and load balance these flows to the real servers on a private network behind the ACE context. Apply class maps to classify client traffic destined to a VIP address. This traffic is then load balanced to a server farm, and one of the real servers is selected to respond to the client request. To allow client traffic into the ACE context, an access list is required to permit the client flows.

Lab 4: Health Monitoring

Configure the ACE context to monitor real servers.

Lab 5: HTTP SLB (L7) Load Balancing

Create new class maps and server farms to show URL load balancing.

Lab 6: Sticky Connections

Configure the ACE context to match VIP-destined traffic and load balance these flows to the real servers on a private network behind the ACE context. Apply class maps to classify client traffic destined to a VIP address. This traffic is then load balanced to a server farm, and one of the real servers is selected to respond to the client request. The same real server will then respond to all future requests from the same source. To allow client traffic into the ACE context, an access list is required to permit the client flows.

Lab 7: Protocol Inspection

Implement fix-ups and inspection for the FTP protocol.

Lab 8: SSL Termination

Configure SSL termination.

Lab 9: Multiple Feature Integration

Configure the ACE context to perform a variety functions in an integrated environment.

Classroom Dates and Locations

Date

Location Details

To request a location or date, use our By Request service.