Course Description
This course combines lecture and labs to show you how to deploy and configure the Cisco Catalyst 6500 Application Control Engine (ACE) module and the Cisco ACE 4710 appliance (release 4.1).
Combining ACEAP - Implementing the Cisco ACE Appliance v1.0 and ACESM - Implementing the Application Control Engine Service Module, this course covers all of the key features of the ACE module and appliance, including:
Resource virtualization and management
Server load balancing (Layers 2-4 and Layer 7)
SSL termination and offload
Security features such as application-layer inspection and fix-ups
Application optimization features
To participate in this course and access the remote labs, you are required to bring a laptop running Windows 98, ME, NT4, 2000, XP, or Vista, and including Internet Explorer 6.0 or higher. Also, the ability to install new ActiveX components may be required.
- Updated ACE software release 4.1 for the ACE 4710 Appliance
-
IP traffic flows in N-tier web applications
-
Key hardware and software features of the ACE module and appliance
-
Design and configure integration of the ACE into the network topology,
including bridged, routed, and one-arm modes
-
Design and configure multiple ACE contexts to virtualize network services
-
Manage allocation of resources to virtual contexts
-
Methods used to manage the ACE module and appliance
-
Use the Cisco Modular Policy CLI to configure ACE features
-
Configure IP application-based security
-
Configure Layer 4-7 load balancing
-
Configure health monitoring
-
Configure Layer 7 protocol processing options
-
Configure SSL protocol processing
-
Configure the web application acceleration features on the ACE appliance
-
Configure the ACE module or appliance for high availability to provide
reliable application networking services
-
Apply a methodology for designing an end-to-end ACE configuration that
integrates multiple feature sets
Agenda
1. Data Center Application Services Overview
IP-Based Data Center Applications
IP Protocol Stack Review
IP Application Review
Web Technology Overview
ACE Family Solutions
Multi-Tier Applications
Application Delivery Products
Deploying the ACE Appliance and Service Module
Connecting ACE to the Network
Network Topologies
ACE 4710 Installation Procedure
ACE Appliance GUI
Virtualization
Resource Management
Authorizing Management Users
Configuring Interfaces
Configuring Management
2. Implementing Server Load Balancing
Modular Policy CLI
Class and Policy Maps
Applying Policy Maps
Managing the ACE Appliance and Service Module
Permitting Management Traffic
Remote Management
SNMP Manageability
XML Management API
Application Networking Manager
Security Features
IP Access Control Lists
ACL Object Groups
TCP/IP Fragmentation/Reassembly
TCP/IP Normalization
SYN Cookies
Network Address Translation
Layer 4 Load Balancing
Load Balancing Concepts
Load Balancing Algorithms
Configuring Layer 4 Load Balancing
Traffic Rate Limiting
Firewall Load Balancing
Health Monitoring
Active Health Probes
HTTP Error Code Monitoring
Using TCL Scripting
Route Health Injection
Backup Servers/Server Farms
KAL-AP Integration
Layer 7 Protocol Processing
Configuring HTTP Layer 7 Load Balancing
Persistent and Pipelined HTTP Extensions
Server Reuse
HTTP Modifications
Session Persistence
Protocol Inspection
HTTP Inspection
FTP, RDP, Radius, RTSP, and SIP Protocol Processing
Generic Protocol Parsing
Other Inspected Protocols
Processing Secure Connections
Digital Encryption Technologies
SSL Service Options
Configuring a Public Key Infrastructure
Configuring SSL Proxy Services
SSL Session Reuse
SSL Queue Delay
SSL Client Authentication
Web Application Acceleration
Performance Factors
Acceleration Architecture
FlashForward
Delta Optimization
Single-Request Optimizations
Compression Overview
Configuring Compression
High Availability
Redundancy
Object Tracking
Failover
State Replication
Fault Tolerance Configuration
Displaying Fault Tolerance Information
Integrating Multiple Features
Analyzing Network Requirements
Designing Cisco ACE Contexts and Features
Configuring Multiple Integrated Features
Labs
Lab 1: Implementing Virtualization
Lab 2: Using Network Address Translation
Lab 3: Configuring Server Load Balancing
Lab 4: Implementing Health Monitoring
Lab 5: Configuring Layer 7 Load Balancing
Lab 6: Enabling Sticky Connections
Lab 7: Enabling Protocol Inspection
Lab 8: Configuring SSL Termination
Lab 9: Cisco ACE Appliance HTTP Optimizations
Lab 10: Integrating Multiple Features
Audience
Systems engineers and network architects who need to design or deploy
server load-balancing solutions using the Cisco ACE module or appliance