Page 1 hp traffic director server appliances user guide for the hp e-commerce traffic director server appliance sa8200/sa8220 and the hp traffic director server appliance sa7200/ sa7220...
Page 2 Hewlett-Packard assumes no responsibility for the use or reliability of its software on equipment that is not furnished by Hewlett- Packard.
Page 3: Table Of Contents
Contents Chapter 1: Introduction Introduction to the Traffic Director Server Appliances ......2 Assumptions ............3 Benefits .
Page 4 C O N T E N T S HP Traffic Director Server Appliances User Guide Sticky Options ........... . 15 Sticky Persistence .
Page 5 Contents Chapter 3: Boot Monitor Using the Boot Monitor CLI..........42 System Requirements.
Page 6 C O N T E N T S HP Traffic Director Server Appliances User Guide Administration Screen ..........82 Settings Tab .
Page 7 Contents Nslookup ............121 Reboot .
Page 8 C O N T E N T S HP Traffic Director Server Appliances User Guide Run-Time CLI Command Reference ........145 Global System Commands.
Page 9 Contents Chapter 7: SNMP Support Using SNMP ............234 Standards Compliance .
Page 10 C O N T E N T S HP Traffic Director Server Appliances User Guide Using Global Site Certificates ........261 Overview .
Page 11 Contents Regulatory Information Taiwan Class A EMI Statement ........309 VCCI Class A (Japan).
Page 12 C O N T E N T S HP Traffic Director Server Appliances User Guide Notes...
Page 13: Chapter 1: Introduction
Introduction This chapter covers the following topics: NOTE: For ease of • Introduction to the Traffic Director Server Appliances reading, all models are • Assumptions referred to as the SA8220 throughout this • Benefits document. Unless noted • Specifications otherwise, all SA8220 references refer to all •...
Page 14: Introduction To The Traffic Director Server Appliances
C H A P T E R 1 HP Traffic Director Server Appliances User Guide Introduction to the Traffic Director Server Appliances The HP e-Commerce Traffic Director Server Appliance SA8200/ SA8220s and the HP Traffic Director Server Appliance SA7200/ SA7220s provide reliable load balancing, failover, and policy-based management to Web sites, Intranets, and e-Commerce sites.
Page 15: Assumptions
C H A P T E R 1 Assumptions Assumptions This User Guide assumes that you are a network administrator and that you have at least a basic understanding of the following: • Networking concepts and terminology • Network topologies •...
Page 16 C H A P T E R 1 HP Traffic Director Server Appliances User Guide Benefit Description Substantial economic The SA8220 improves customer satisfaction by improving the benefits response time for secure transactions. E-Commerce sites can now (SA8200/SA8220 only) enjoy the benefits provided by having secure transactions participate in layer 7 intelligent traffic management.
Page 17 C H A P T E R 1 Benefits Benefit Description Intelligent content The SA8220 incorporates intelligent traffic management for secure routing for SSL transactions, dramatically improving an e-Commerce site’s transactions responsiveness, reliability, and QoS. While typical traffic (SA8200/SA8220 only) management devices make decisions based only on information at Layer 4 in the network stack, the SA8220 combines Layer 4 through 7 (application/content) awareness to speed up response...
Page 18: Specifications
C H A P T E R 1 HP Traffic Director Server Appliances User Guide Specifications SA8220 specifications are listed below. Specification Description SA7200 SA7220 SA8200/ SA8220 Servers Any Web server (Apache, Microsoft, supported Netscape, etc.) Any operating system (UNIX*, Solaris*, Windows NT*, BSD*/BSDI*, AIX*, etc.) Any server hardware (SUN, HP, IBM,...
Page 19 C H A P T E R 1 Specifications Specification Description SA7200 SA7220 SA8200/ SA8220 Performance SA8220 is rated up to 1200 HTTPS connections/sec, 2500 RICH HTTP connections/sec, 3500 HOT connections/ sec, 95 Mb/sec. SA8200 is rated up to 600 HTTPS connections/sec, 1300 RICH HTTP connections/sec, 2800 HOT connections/ sec.
Page 20 C H A P T E R 1 HP Traffic Director Server Appliances User Guide Specification Description SA7200 SA7220 SA8200/ SA8220 Intelligent Content: URL, file types such as *.GIF, Content Routing file paths such as \ads\, file names such as Index.html Transactions: Transaction types such as *.CGI Intelligent...
Page 21: Typographic Conventions
C H A P T E R 1 Typographic Conventions Specification Description SA7200 SA7220 SA8200/ SA8220 Security SSL v2 and v3 for transaction security Features SSH for secure Command Line Interface Supported IP filtering Serial port logon Typographic Conventions The following typographic conventions are used throughout this manual.
Page 22 C H A P T E R 1 HP Traffic Director Server Appliances User Guide 4. To edit the configuration settings, press the Configure tab. COMMANDS are shown in the following ways: • Any command or command response text that appears on the terminal is presented in the courier font.
Page 23: Chapter 2: Theory Of Operations
Theory of Operations This chapter covers the following topics: NOTE: For ease of • Services reading, all models are • FTP Limitations referred to as the SA8220 throughout this • Sticky Options document. Unless noted • SSL Acceleration (SA8200/SA8220 only) otherwise, all SA8220 references refer to all •...
Page 24: General Operating Principles
C H A P T E R 2 HP Traffic Director Server Appliances User Guide General Operating Principles This chapter discusses the general operating principles for the HP e- Commerce Traffic Director Server Appliance SA8200/SA8220s, and the Traffic Director Server Appliance SA7200/SA7220s. For details about the SA8220 command set, please see “Command Line Interface”...
Page 25: Layer 4 (Hot) Services
C H A P T E R 2 Services Layer 4 (HOT) Services HOT services provide very fast brokering performance. HOT services are defined in full by their VIP and port number. In HOT or “Brokered” mode, the SA8220 performs Network Address Translation (NAT) on all incoming packets passing through the connection.
Page 26: Out-Of-Path Return (Opr)
C H A P T E R 2 HP Traffic Director Server Appliances User Guide Out-of-Path Return (OPR) Ordinarily, the SA8220 processes all traffic in both directions between clients and the server farm. Viewing the server return traffic helps the SA8220 accurately determine server response times and handle HTTP errors.
Page 27: Sticky Options
C H A P T E R 2 Sticky Options Sticky Options Some services operate best if all requests from a specific client during a single session are directed to the same fulfillment server. For example, if the server maintains a local database of client activity or context (shopping cart, registration info, navigation history, etc.), it is important that subsequent client requests go to the server with these database records.
Page 28: Sticky Persistence
C H A P T E R 2 HP Traffic Director Server Appliances User Guide Sticky Persistence For source-ip based sticky, the relationship between the client IP address and the fulfillment server remains in effect for the entire time the SA8220 is online or until the sticky timeout value expires. In the event of failover, the sticky relationship is lost.
Page 29: Ssl And Sticky (Sa8200/Sa8220 Only)
C H A P T E R 2 SSL Acceleration (SA8200/SA8220 only) SSL and Sticky (SA8200/SA8220 only) SSL (Secure Sockets Layer, or HTTPS)-enabled services can also be made sticky by specifying “sticky cookie” or “sticky src-ip” on the CLI. For SSL services, sticky cookie behaves exactly as it does for ordinary HTTP services.
Page 30: Ssl Fundamentals (Sa8200/Sa8220 Only)
C H A P T E R 2 HP Traffic Director Server Appliances User Guide SA8220’s dual NIC and packet filtering capabilities can be used to isolate the web servers from the Internet, further preventing unauthorized access. SSL involves an interchange of keys used both to authenticate the parties and to provide information to securely encrypt confidential Fundamentals data.
Page 31 C H A P T E R 2 SSL Fundamentals (SA8200/SA8220 only) are performed either at the server level, by web servers generally providing SSL functionality by way of standalone software components, or by embedded encryption software. The HP methodology places encryption processing on the network side, thus eliminating the need for processing on the servers (see the figure on the next page).
Page 32: Application Message Traffic Management
C H A P T E R 2 HP Traffic Director Server Appliances User Guide Application Message Traffic Management The SA8220 was developed to perform load balancing in SSL environments. The SA8220 allows users to load balance based on application content (Layer 7, or RICH mode), as well as server address and port (Layer 4, or HOT mode).
Page 33: Client Authentication
C H A P T E R 2 SSL Fundamentals (SA8200/SA8220 only) Fulfillment of each virtual service is load balanced across a number of real servers depending on the load balancing algorithm chosen. Servers capable of fulfilling requests for a service are identified and managed with the following commands: config policygroup <name>...
Page 34: Http Header Option Fields
C H A P T E R 2 HP Traffic Director Server Appliances User Guide HTTP Header Option Fields Both the SA7220 and the SA8200/SA8220 can make the IP address of a requesting client available to a fulfillment server by constructing a custom HTTP header option, with the client’s IP as the value: HP_SOURCE_IP:<client-IP>...
Page 35: Load Balancing Across Multiple Servers
C H A P T E R 2 Load Balancing Across Multiple Servers Load Balancing Algorithms Balancing The SA8220 provides a choice of load balancing algorithms. Services can be separately configured to load balance using a round-robin or a Across response time algorithm.
Page 36: Primary And Backup Servers
C H A P T E R 2 HP Traffic Director Server Appliances User Guide Primary and Backup Servers Each server is identified as either a Primary or Backup for a given service. Primary servers are always considered first for request fulfillment.
Page 37: Multi-Hop Source Address Preservation
C H A P T E R 2 Server Configuration Options Multi-hop Source Address Preservation It is possible in sophisticated network topologies to require requests to pass through two SA8220s. In such configurations, the SA8220 topologically closest to the clients must be configured with the Multi- hop Source Address Preservation (MSAP) feature enabled.
Page 38: Order Of Expressions (Not Available On The Sa7200)
C H A P T E R 2 HP Traffic Director Server Appliances User Guide Each server listed for fulfillment of a RICH_HTTP service can be configured to serve any number of specific rich expressions. Applicable expressions are listed below: •...
Page 39: Routing With Dual Interfaces
C H A P T E R 2 Routing with Dual Interfaces Routing with Because the SA8220 has two network interfaces, it can act as a router in some contexts. This means that it can route between two subnets. Dual Interfaces To do this, you must designate the SA8220 as the default gateway for your fulfillment servers.
Page 40: Prioritization And Policy Groups
C H A P T E R 2 HP Traffic Director Server Appliances User Guide Prioritization Policy groups are containers used to organize services. Service prioritization uses policy group information to make decisions about and Policy which services should get more or less server resources. Although the Groups assignment of services to policy groups can be arbitrarily determined by the operator, effective use requires that each policy group contain...
Page 41 C H A P T E R 2 Prioritization and Policy Groups For example, the services HTTP and HTTPS are both assigned to a single policy group. HTTPS is designated the highest priority service, and HTTP the second priority. The SA8220 monitors the response time of each service, and if necessary re-prioritizes server resources of subordinate services to keep the response time for the highest priority service within the specified range.
Page 42: Routing Method For Vip Addresses
C H A P T E R 2 HP Traffic Director Server Appliances User Guide Routing After setting up the service, you must configure the SA8220 to route the VIP address to the Internet. There are two possibilities: Method for VIP •...
Page 43: Error Detection
C H A P T E R 2 Error Detection Error The SA8220 is capable of recognizing and reacting to server error conditions, detecting non-responsive (comatose) servers, and Detection directing traffic to alternate resources until the server is back in operation.
Page 44: Http Error Detection
C H A P T E R 2 HP Traffic Director Server Appliances User Guide command uses the following syntax: dup-syn config policygroup <name> service <name> dup-syn <micro-seconds> HTTP Error Detection NOTE: This section The SA8220 offers HTTP error detection for RICH services. When applies to all models HTTP error detection is enabled, the SA8220 scans the headers of except the SA7200.
Page 45: Serial Cable Failover
C H A P T E R 2 Serial Cable Failover Serial Cable The SA8220 offers two failover methods: Failover • Router Failover (including OSPF, RIPv1 and RIPv2), and • Serial Cable Failover NOTE: DHCP is not When serial cable failover is configured, the Primary and Backup available when serial SA8220s communicate heartbeat, configuration, and status cable failover is enabled.
Page 46 C H A P T E R 2 HP Traffic Director Server Appliances User Guide NOTE: The Online IP 4. Follow the prompts as illustrated below (for single NIC Address is the address operation): used by the SA8220 that is currently accepting Specify failover method (disabled, serial, route) :[disabled]--->serial...
Page 47 C H A P T E R 2 Serial Cable Failover 5. Save the Primary configuration. monitor>save List of currently saved configuration files(s). You may save over an existing configuration file or enter a new name. File name ---------- active.cfg backup.cfg cris.cfg ‘active.cfg’...
Page 48 C H A P T E R 2 HP Traffic Director Server Appliances User Guide : 13.1.1.20 : 0:1:c9:ed:a6:fb NOTE: Use the same Is this machine Primary or Backup? [Backup] Online IP Address and ---> <Enter> name for the Backup Enter Online IP Address [13.1.1.20] --->...
Page 49: Replicating The Configuration
C H A P T E R 2 Serial Cable Failover Replicating the Configuration The active configuration is replicated upon changes to the Backup SA8220 from the Primary. For most configurations, faults are detected within 3 seconds, and the Backup is fully online within 25 seconds.
Page 50 C H A P T E R 2 HP Traffic Director Server Appliances User Guide Failover Status Message Description The broker is PRIMARY and Ethernet cable disconnected, or NIC_FAILED, and the cable, NIC, or HUB port failure remote’s state is ONLINE. The broker is BACKUP and ONLINE, and the remote’s state is NIC_FAILED.
Page 51 C H A P T E R 2 Serial Cable Failover NOTE: The notation, The Failover Status messages in this table are not specific to the PRIMARY/BACKUP Primary or Backup SA8220s. indicates that either “PRIMARY” or Failover Status Message Description “BACKUP”...
Page 52 C H A P T E R 2 HP Traffic Director Server Appliances User Guide Notes...
Page 53: Chapter 3: Boot Monitor
Boot Monitor This chapter covers the following topics: NOTE: For ease of • System Requirements reading, all models are • Accessing the Boot Monitor referred to as the SA8220 throughout this • Boot Monitor Commands document. Unless noted otherwise, all SA8220 references refer to all models.
Page 54: Using The Boot Monitor Cli
C H A P T E R 3 HP Traffic Director Server Appliances User Guide Using the Boot Monitor CLI CAUTION: After The HP e-Commerce Traffic Director Server Appliance SA8200/ configuring the SA8220 SA8220s’ and the HP Traffic Director Server Appliance SA7200/ with the Boot Monitor, SA7220s’...
Page 55: Accessing The Boot Monitor
C H A P T E R 3 Using the Boot Monitor CLI Accessing the You can access the Boot Monitor Command Line Interface in either of the two ways described in this section. Boot Monitor Interrupting the Bootup Sequence 1.
Page 56: Boot Monitor Commands
C H A P T E R 3 HP Traffic Director Server Appliances User Guide Boot Monitor Boot Monitor CLI commands (listed below) are described in this chapter. Commands • autoboot • info • boot • interface • delete • ip •...
Page 57 C H A P T E R 3 Using the Boot Monitor CLI Current active configuration ---------------------------- SA8220 Product: Version: Patch Level: Build: Current time: Tue Sep 12 17:02:05 2000 Hostname: CSLab7k ------------- Network side NIC: IP Address: 10.6.3.21 Netmask: 255.255.255.0 MAC address: 0:a0:c9:ed:6c:cc...
Page 58 C H A P T E R 3 HP Traffic Director Server Appliances User Guide configuration, or choose among a list of previously saved configurations. Procedures for choosing among these options are organized within three groups, described below. 1. Type the boot command. 2.
Page 59 C H A P T E R 3 Using the Boot Monitor CLI First Options: 1. If you select the default, y , the system allows you to save the con- figuration as either active.cfg or the last loaded filename. Configuration file name? [active.cfg] --->...
Page 60 C H A P T E R 3 HP Traffic Director Server Appliances User Guide Third Options: 1. If there are any previously saved configurations on the system, you are offered a choice of configuration files to boot from. Select a boot configuration from the following files.
Page 61 C H A P T E R 3 Using the Boot Monitor CLI dhcp Enables or disables the SA8220’s use of DHCP. When DHCP is enabled, the SA8220 receives its configuration parameters from the DHCP server at startup. When DHCP is disabled, the SA8220 ignores the DHCP server, and so it must be manually configured at restart.
Page 62 C H A P T E R 3 HP Traffic Director Server Appliances User Guide factory_reset Resets the system to factory defaults, listed below. NOTE: The first boot after a factory_reset Parameter Setting command or a new installation will prompt All added user accounts Deleted you for the root...
Page 63 C H A P T E R 3 Using the Boot Monitor CLI failover Specifies the SA8220’s failover method. Three failover options are available: • disabled: no failover method will be used • serial: serial cable failover will be used •...
Page 64 C H A P T E R 3 HP Traffic Director Server Appliances User Guide host Sets the SA8220’s host name. Example: monitor> host Enter the hostname you would like to assign to the Network NIC: ---> CSLab7k info Displays the current boot configuration. interface Configures Ethernet port parameters.
Page 65 C H A P T E R 3 Using the Boot Monitor CLI load Loads a previously saved configuration file into memory. Example: monitor> load Select a configuration file to load from the following files. File name -------------- active.cfg backup.cfg cris.cfg ‘active.cfg’...
Page 66 C H A P T E R 3 HP Traffic Director Server Appliances User Guide save Saves the current configuration. Changes made during the current Boot Monitor session are lost unless you use the save command. Example: save monitor> List of currently saved configuration file(s). You may save over an existing configuration file or enter a new name.
Page 67 C H A P T E R 3 Using the Boot Monitor CLI Select a TIMEZONE from the ‘GMT’ list. 1) GMT-14 2) GMT-13 3) GMT-12 4) GMT-11 5) GMT-10 6) GMT-9 7) GMT-8 8) GMT-7 9) GMT-6 10)GMT-5 11)GMT-4 12)GMT-3 13)GMT-2 14)GMT-1...
Page 68 C H A P T E R 3 HP Traffic Director Server Appliances User Guide Selected TIMEZONE ‘Eastern’ The current time is now: Sat Oct 28 23:59:42 2000 Enter the year (YYYY): [2000]---> Enter the month(MM): [10]---> Enter the day (DD): [28]--->29 Enter the hour (HH): [23]--->01 Enter the minute (MM): [59]-->57 Enter the seconds (SS): [39]--->...
Page 69 C H A P T E R 3 Using the Boot Monitor CLI setup Initiates the SA8220’s setup procedure. The system displays prompts for all inputs necessary to initialize it. Example: setup monitor> Enable dual NIC operation(yes,no)? [no] ---> yes Autoconfigure the Network side NIC speed and duplex? (yes,no)? [yes] --->...
Page 70 C H A P T E R 3 HP Traffic Director Server Appliances User Guide static_routes Deletes and adds any number of static IP routes. Shows the current static IP routes (if any) when the function is entered. You are prompted for the destination and gateway IP addresses.
Page 71: Chapter 4: Graphical User Interface
Graphical User Interface This chapter covers the following topics: NOTE: For ease of • Before You Begin reading, all models are • Logon Screen referred to as the SA8220 throughout this • Topology Screen document. Unless noted • Policy Manager Screen otherwise, all SA8220 references refer to all •...
Page 72: Before You Begin
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Before You Begin NOTE: Some functions The HP e-Commerce Traffic Director Server Appliance SA8200/ and features are not SA8220s and HP Traffic Director Server Appliance SA7200/ available in the GUI.
Page 73: Logon Screen
C H A P T E R 4 Logon Screen Logon Screen To access the various GUI services available to you on the SA8220, you must first log on to the system as described in this section. Logging on to 1.
Page 74 C H A P T E R 4 HP Traffic Director Server Appliances User Guide NOTE: The factory 4. In the space provided, type your User name. default for both the user 5. In the space provided, type your Password. name and password is admin (lowercase 6.
Page 75: Topology Screen
C H A P T E R 4 Topology Screen Topology Screen Topology Screen Using the Purposes of the Topology Screen Topology • Displays a graphical representation of the current topological relationships between the SA8220 and network servers. The Screen SA8220’s status and Serial Cable failover, if configured, are also reflected here.
Page 76: Topology Screen Toolbar
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Topology Screen Toolbar Policy Back Administration Manager Log File Configuration Tools Statistics Topology Screen Toolbar Located at the top left of the window, the toolbar is shown above. The toolbar’s buttons, from left to right, are described below: •...
Page 77: Topology Screen Elements
C H A P T E R 4 Topology Screen Topology Screen Elements SA8220 Icon The SA8220 is represented onscreen by a horizontal "rack unit" icon, as shown above. • Right-clicking on the SA8220 icon displays a popup menu that can take you to other screens.
Page 78: Window Controls
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Window Controls Slider Control To resize the Topology screen elements, click and drag the slider control located in the upper right hand corner of the screen, as shown above.
Page 79: Policy Manager Screen
C H A P T E R 4 Policy Manager Screen Policy Manager Screen When you double-click a SA8220 icon in the Topology screen (or right-click and select Policy Management), the Policy Manager screen displays, as shown below. Policy Manager Screen The Policy Manager consists of a series of screens with multiple tabs that includes the controls used in the implementation of Policies.
Page 80: Policy Manager Controls And Displays
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Policy The Policy Manager screen contains two main regions, as described below: Manager • The Policies display, on the left side of the Policy Manager Controls and screen Displays...
Page 81: Policy Manager's Pop-Up Menu
C H A P T E R 4 Policy Manager Screen The Policy Manager toolbar contains three buttons for creating Policy Groups, Services and Servers, and one button to delete the currently selected item, regardless of its type. The toolbar’s buttons are enabled or disabled (dimmed) according to the type of item selected in the Policies display.
Page 82: Creating Policy Groups
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Creating Policy Groups You can create Policy Groups in either of two ways: 1. Click New Policy Group, in the left of the Policy Manager toolbar, or 2.
Page 83: Throttling
C H A P T E R 4 Policy Manager Screen Naming the New Policy Group 4. To accept the specified name, click Apply. The new Policy Group’s new name displays in the Policies display. When the new Policy Group name displays, Create Service (see above), becomes available.
Page 84: Services
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Services Once a Policy Group exists, you can create Services. Creating Services Follow these steps to create a Service: 1. In the Policies display, click to select a Policy Group. 2.
Page 85: Additional Service Tab Controls And Displays
C H A P T E R 4 Policy Manager Screen 5. From the Virtual IP pull-down menu, click the desired Virtual IP (VIP) address. If there are no VIPs in the menu, or if the desired one is absent, type it in. NOTE: The VIP/port 6.
Page 86 C H A P T E R 4 HP Traffic Director Server Appliances User Guide Control or Display Description Insert Source IP in This check box specifies whether or not the Source IP address is HTTP Header embedded within the HTTP header information. (RICH only on all models except the SA7200)
Page 87: Balance Strategy
C H A P T E R 4 Policy Manager Screen Balance Strategy HOT Services are assigned server resources according to either of two Balance Algorithms. Click the Balance Strategy tab of the Service Details screen to display the Balance Algorithm controls, as shown below.
Page 88: Deleting Services
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Deleting Services To delete a Service: 1. In the Tree, click select the name of the Service to be deleted. 2. In the Policy Manager toolbar, click Delete, or right-click to display the menu and click the Delete Selected Item command.
Page 89 C H A P T E R 4 Policy Manager Screen The Policy Manager’s Server Detail Screen 3. In the Server Name field, type an IP address or server name known to the SA8220 via DNS or static host table. This value cannot be changed after the server is created.
Page 90 C H A P T E R 4 HP Traffic Director Server Appliances User Guide 5. From the drop down menu, click to select the desired Server Type. Available types are listed below: • Primary: Primary servers are immediately available to accept client requests forwarded from the SA8220.
Page 91: Rich Controls (All Models Except The Sa7200)
C H A P T E R 4 Policy Manager Screen RICH Controls (all models except the SA7200) NOTE: OPR cannot be If the type of the Service under which you create a Server is used in conjunction with RICH_HTTP, the Server Details tab displays some additional Services of type controls, as shown below.
Page 92 C H A P T E R 4 HP Traffic Director Server Appliances User Guide • HTTP Error Detection: When HTTP Error Detection is enabled, requests that generate HTTP errors 401-405 and 500- 503 are rerouted, transparently to the client, to the next available server.
Page 93: Order Of Expressions (All Models Except The Sa7200)
C H A P T E R 4 Policy Manager Screen Order of Expressions (all models except the SA7200) When using expressions in Layer 7 (RICH) operations, the order of expressions is significant only when the "not" (!) operator is used. Expressions are described below.
Page 94: Administration Screen
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Administration Screen The Administration Screen is a set of ten tabs containing the functions used to manage the SA8220. Each tab includes controls and displays related to a specific category of administration tasks. Administration Screen —...
Page 95: Software Tab
C H A P T E R 4 Administration Screen • Server Verification Interval: Edit this field to change the interval in seconds at which servers are "pinged" to verify they are available and able to handle traffic requests. (See "IRV" in the Command Line Interface chapter).
Page 96: System Software
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Administration Screen — Software Tab (System Software View) System Software The SA8220 provides sufficient local storage for five software images (though at any time, only one image is active and executing.) The "System Software"...
Page 97: Agent Software
C H A P T E R 4 Administration Screen • Product version number • Patch number • Build number Agent Software The SA8220 can interface with other HP units by using Agent Software images. The SA8220 provides sufficient local storage for at least five Agent software images (though at any time, only one image is enabled).
Page 98 C H A P T E R 4 HP Traffic Director Server Appliances User Guide • Product version number • Patch number • Build number • Compatible Multi-Site Traffic Director version number Specifying the Active System Software Image To change the active system image: 1.
Page 99 C H A P T E R 4 Administration Screen Installing Software Images You can download and install new system and agent software images for the SA8220 using the controls in the Update Software box at the bottom of the Software tab. Downloading a System Software Update NOTE: A key is not 1.
Page 100 C H A P T E R 4 HP Traffic Director Server Appliances User Guide 4. Click Yes. If you selected Agent Software, the prompt shown below displays. Delete Image Confirmation (Agent View) 5. Click Yes.
Page 101: Users Tab
C H A P T E R 4 Administration Screen Users Tab The Users tab contains controls and displays allowing you to perform the following tasks: • Add users • Modify user permissions and passwords • Delete users • View the user names and permissions of all authorized users •...
Page 102 C H A P T E R 4 HP Traffic Director Server Appliances User Guide Adding Users To add a user: 1. In the User Name field, type the new user’s User Name. 2. In the Password field, type the new user’s password. 3.
Page 103 C H A P T E R 4 Administration Screen Demotion and Promotion of Your Permissions NOTE: Use Promote If a user with Read-Write or Read-Write-All permission logs on with care. If you promote while another user with Read-Write or Read-Write-All permission is your permissions, be logged on, the SA8220 "demotes"...
Page 104: Routing Tab
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Routing Tab The Administration screen’s Routing tab (shown below) contains controls that allow you to manage the following: • System Role • Active Routing Protocol •...
Page 105: System Role
C H A P T E R 4 Administration Screen System Role The choice of System Role (or simply "role") depends in part on your network’s topology and on the number of SA8220s installed. A single SA8220’s role must be "Standalone." If two SA8220s are employed, and you intend to use serial cable failover you must designate both SA8220s as "standalone."...
Page 106: Ospf Protocol
C H A P T E R 4 HP Traffic Director Server Appliances User Guide OSPF Protocol NOTE: Unless the The Router tab’s OSPF Protocol box includes controls that allow you to specify the following values: config route protocol command is •...
Page 107: Security Tab
C H A P T E R 4 Administration Screen Security Tab The security screen (shown below) allows you to implement IP Packet Forwarding (IPFW) security policies. Three modes are available: • Closed • Open • Custom Administration Screen’s Security Tab Closed mode disables all remote administration capabilities.
Page 108: Source Ip Filtering
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Source IP Filtering The controls in the Security Tab’s Source IP dialog box allow you to filter administration access by source IP address. This dialog box contains a pair of buttons and combo box.
Page 109: Gui Tab
C H A P T E R 4 Administration Screen GUI Tab The GUI tab (shown below) includes controls that allow you to configure the following aspects of the SA8220’s Graphical User Interface (GUI): • Server port on which the GUI is accessible from the browser •...
Page 110 C H A P T E R 4 HP Traffic Director Server Appliances User Guide • The Broker Response timeout (sec): This field allows you to specify, in seconds, the time the GUI will wait for a response from the SA8220 before timing out. This value must be an integer between 0 and 120.
Page 111: Cli Tab
C H A P T E R 4 Administration Screen CLI Tab The CLI tab (shown below) includes controls that allow you to configure the following aspects of the SA8220’s Command Line Interface: • SSH Port • Telnet Port • Telnet Sessions •...
Page 112 C H A P T E R 4 HP Traffic Director Server Appliances User Guide • The CLI (SSH) Port field specifies the secure telnet port on which the CLI runs. Valid ports are port 22 (the default) or any unused port between 1024 and 65535.
Page 113: Snmp Tab
C H A P T E R 4 Administration Screen SNMP Tab The SNMP tab (shown below) includes controls for the SA8220’s Simple Network Management Protocol (SNMP) agent. Administration Screen’s SNMP Tab SNMP Agent The SNMP agent allows network management applications to monitor and retrieve the SA8220’s status and statistics via SNMP.
Page 114 C H A P T E R 4 HP Traffic Director Server Appliances User Guide • System Contact: corresponds to the MIB variable sysContact in MIB-II. System Contact (sysContact) is the name of the administrator of this SA8220. By default, sysContact is NULL. •...
Page 115: Multi-Site Tab
C H A P T E R 4 Administration Screen For example, the string: ip=209.218.240.5 community=NOC1 causes traps to be sent to IP address 209.218.240.5, and causes the SA8220 SNMP agent to put the community string, NOC1 in the trap sent to that address.
Page 116: Logging Tab
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Logging Tab The Logging tab includes controls that allow you to specify (or filter) the kinds of information written to the SA8220’s log file. This file records operational events for troubleshooting information.
Page 117: Viewing The Log File
C H A P T E R 4 Administration Screen Viewing the Log File 1. To view the log file, click View Log. The System Log File displays, as shown below. Logging Tab’s File Contents Window The File Contents window’s Actions menu contains two items: •...
Page 118 C H A P T E R 4 HP Traffic Director Server Appliances User Guide Log File Filter Window The Filter dialog box (shown above) allows you to filter the view of the log displayed in the File Contents window. 1.
Page 119: Configuration Screen
C H A P T E R 4 Configuration Screen 2. In the Mail Host field, type the name or IP address of your network’s outgoing mail (SMTP) server. 3. Click OK, or Cancel to abort. Configuration Screen The Configuration screen (shown below) includes controls that allow you to save, restore, send, and receive SA8220 configuration information in individual ASCII files.
Page 120: Saving Configuration Files
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Saving To save the SA8220’s current configuration to a file: Configuration 1. In the Configuration Name field, type a filename. Files Valid characters include letters, digits, (-), (_), and (.). File names cannot begin with the (.) character.
Page 121: Deleting Configuration Files
C H A P T E R 4 Configuration Screen Deleting To delete a configuration file: Configuration 1. In the Saved Configurations list, click the name of the file you want to delete. Files 2. Click Delete. A message displays prompting you to confirm the operation, as shown below.
Page 122: Viewing Configuration Files
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Viewing To prevent certificates and keys from being displayed or transmitted as plain text across the network, the GUI View Configuration File Configuration function has been disabled on the SA8200/SA8220. This function is Files still available on the SA7200/SA7220.
Page 123 C H A P T E R 4 Configuration Screen 1. On the SA7200/SA7220: Click View>>. The right hand panel of the Configuration screen displays the contents of the selected file, as shown below. Configuration File View on the SA7200/SA7220 2.
Page 124: Resetting The Factory Configuration
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Resetting the This command allows you to reset the SA8220 to its original factory configuration. Reset deletes all policy groups, services, and servers. Factory Original factory settings are listed below. Configuration Type Parameter...
Page 125 C H A P T E R 4 Configuration Screen Type Parameter Default Setting broker-action 0 (Policy Manager) server-action 1 (Statistics) Security Cleared custom access-control Disabled custom forwarding Disabled custom ssh Enabled custom telnet Disabled custom gui Disabled custom snmp Disabled security mode Closed...
Page 126: Sending And Retrieving Configuration Files
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Sending and By default, configuration files are saved on the SA8220 itself. You can also send them to and retrieve them from remote TFTP servers. Retrieving To send a configuration file to a remote TFTP server: Configuration...
Page 127: Tools Screen
C H A P T E R 4 Tools Screen Tools Screen The SA8220’s Tools screen (shown below) provides network diagnostic tools for your convenience: • ARP • Ether • Ping • Netstat • Nslookup • Reboot • Trace • Traceroute Tools Screen...
Page 128: Arp
C H A P T E R 4 HP Traffic Director Server Appliances User Guide This command displays the SA8220’s ARP table. To use the command: 1. From the Command menu, click arp. 2. Click Run. 3. After a few seconds, the ARP information displays in the Results window, as shown below.
Page 129: Ether
C H A P T E R 4 Tools Screen Ether This command displays the Ethernet interface values. To use the command: 1. From the Command menu, click ether. 2. Click Run. 3. The Ethernet interface information displays in the Results window, as shown below.
Page 130: Ping
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Ping The Ping command tests the network connection to another networking device by sending five ICMP packets from the SA8220 to the target device, which if it receives them, sends a reply. When the SA8220 receives the reply, it displays a message reflecting the response time from the target device.
Page 131: Netstat
C H A P T E R 4 Tools Screen Netstat The Netstat command displays the SA8220’s routing tables. To run Netstat: 1. From the Command menu, click netstat. 2. (Optional) In the Parameter field, type any parameter from these options/variables: •...
Page 132 C H A P T E R 4 HP Traffic Director Server Appliances User Guide Tools Screen Displaying Netstat Results 4. To clear the Results window, click Clear.
Page 133: Nslookup
C H A P T E R 4 Tools Screen Nslookup The nslookup command identifies the IP address of a given host, or the host name of a given IP address. You can use this tool to determine whether the SA8220 can resolve a host name or address, or to get the IP address of a machine of which you know only the host name.
Page 134: Reboot
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Reboot The Reboot command reboots the SA8220. This command requires no parameters, and when executed prompts for confirmation. Reboot Confirmation 1. To reboot click Yes, or No to abort. As the SA8220 reboots, the above screen displays and prompts you to close your browser window.
Page 135: Trace
C H A P T E R 4 Tools Screen Trace The trace command captures traffic on a network that matches the given expression. The trace output can be helpful for troubleshooting network problems. NOTE: By default, Syntax: trace will automatically exit after 60 seconds.
Page 136 C H A P T E R 4 HP Traffic Director Server Appliances User Guide Switch Description Attempt to use the DNS to convert address to names -c <count> Exit after receiving <count> packets -D <tftp-path> The TFTP path directory information. Required parameter. Print the link-level header on each dump line Print “foreign”...
Page 137 C H A P T E R 4 Tools Screen Switch Description Slightly more verbose output Even more verbose output -w <file> The trace output file. Required parameter. Output each packet in hex Output each packet in hex and ASCII The next table lists the <expression>...
Page 138 C H A P T E R 4 HP Traffic Director Server Appliances User Guide Expression Evaluation dst host <host> True if the IP destination field of the packet is <host> src host <host> True if the IP source field of the packet is <host> host <host>...
Page 139: Traceroute
C H A P T E R 4 Tools Screen Traceroute The Traceroute command displays the route that packets travel to the specified network device. To trace the route from the SA8220 to another device: 1. From the Command menu, click traceroute. 2.
Page 140: Statistics Screen
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Statistics Screen The SA8220 provides a screen where you can view four different statistical categories, in a variety of graphical display formats, at the levels of Device, Service, and Server. Statistical data series are defined in the main Screen, and subsequently displayed in a separate window.
Page 141: Statistics Box
C H A P T E R 4 Statistics Screen Selection List Statistics Box Selection Buttons (Arrow Buttons) Graph Options Graph Button Window Options Statistics Screen Statistics Box The Statistics box contains controls for you to select the statistics you want to view graphically, as well as the graph format in which you want those statistics displayed.
Page 142: Graph Options
C H A P T E R 4 HP Traffic Director Server Appliances User Guide NOTE: Statistics for • Available Statistics: In this graphical display, you can specify open connections in which of the available statistics you want to view. These include RICH mode (on the Average Response Time, Average Connections per Second, CPU SA8200/SA8220 and the...
Page 143: Selection List
C H A P T E R 4 Statistics Screen Selection List The Selection List reflects the item (System, Server, Service), statistical category, and graph type of each defined data series. These display in the List’s three columns, described below: •...
Page 144: Graphing Statistics
C H A P T E R 4 HP Traffic Director Server Appliances User Guide Graphing Statistics NOTE: The graph 1. After you’ve entered the desired parameters into the Statistics parameters, including the Screen, display the graph (or graphs, if you’ve defined multiple Legend checkbox, can be data series and have enabled Multiple Graphs) by clicking Graph changed on the fly, but...
Page 145: Chapter 5: Command Line Interface
Command Line Interface This chapter covers the following topics: NOTE: For ease of • CLI Introduction reading, all models are • Categorical List of CLI Commands referred to as the SA8220 throughout this • Run-Time CLI Command Reference document. Unless noted otherwise, all SA8220 references refer to all models.
Page 146: Cli Introduction
C H A P T E R 5 HP Traffic Director Server Appliances User Guide CLI Introduction The HP e-Commerce Traffic Director Server Appliance SA8200/ SA8220s and the HP Traffic Director Server Appliance SA7200/ SA7220s are fully configurable via the Command Line Interface (CLI).
Page 147: Pipes
C H A P T E R 5 Pipes Pipes Any command’s output can be "piped" using the ’|’ symbol with "grep" or "more." • Redirecting a command to more pages that command's output regardless of the config cli more setting. •...
Page 148: Syntax
C H A P T E R 5 HP Traffic Director Server Appliances User Guide Syntax This section on the CLI uses the syntax shown below. Syntax Description Angled brackets Designates where you enter variable (< >) parameters Straight brackets Choices of parameters appear between straight ([ ]) brackets, separated by vertical bars.
Page 149: Categorical List Of Cli Commands
C H A P T E R 5 Global System Commands Categorical List of CLI Commands This section lists the SA8220’s CLI commands by functional category. For more complete details regarding CLI commands, please see “Run-Time CLI Command Reference” in this chapter. Global System These commands manage general functions and are described later in this chapter.
Page 150: File Management Commands
C H A P T E R 5 HP Traffic Director Server Appliances User Guide File Use these commands to view file-related information and manipulate files globally. These commands are described later in this chapter. Management Commands copy remove restore restore-verbose save These commands modify the CLI environment and are described...
Page 151: Routing Commands
C H A P T E R 5 Routing Commands Routing These commands are described later in this chapter. config route ospf-area [backbone | <area>] Commands config route ospf-hello <nseconds> config route ospf-dead <nseconds> config route ospf-authtype [none | simple ospf-authkey <simple key>...
Page 152: Server Commands
C H A P T E R 5 HP Traffic Director Server Appliances User Guide config policygroup <policy-name> service <service-name> header-names [certificate <name> | cipher-used <name> | source-ip <name> | ssl-id <name>] Server These commands are described later in this chapter. config policygroup <policy-name>...
Page 153: Security Commands
C H A P T E R 5 Security Commands <url> {key <license config sys software install key>} {user <user name>} {password <password>} passive <enable | disable>} config sys software ms-software info <index> config sys software ms-software enable <index> config sys software ms-software delete <index> config sys software ms-software install Security These commands are described later in this chapter.
Page 154: Snmp Commands
C H A P T E R 5 HP Traffic Director Server Appliances User Guide SNMP These commands are described later in this chapter. config sys snmp community info Commands config sys snmp community create <community string> ip [<ip address | any>] rights [ro | rw] config sys snmp community delete <string>...
Page 155: Logging Commands
C H A P T E R 5 Logging Commands config policygroup <policy-name> service <service-name> key suite [ all | high | medium | low | export | <custom> ] <CIPHERSUITE> config ssl info config ssl redirect [<url> | none] config ssl suite [all | high | medium | low | export | <custom>] config ssl cache [enable|disable]...
Page 156 C H A P T E R 5 HP Traffic Director Server Appliances User Guide show policygroup <policy-name> service <service- name> key signrequest info show policygroup <policy-name> service <service- name> server info show policygroup <policy-name> service <service- name> server <server-name> info show policygroup <policy-name>...
Page 157: Run-Time Cli Command Reference
C H A P T E R 5 Global System Commands Run-Time CLI Command Reference Global System Descriptive examples of the Global System commands are provided below. Commands Command Description Displays the help command tree Enter ! followed by an index number from the history list to execute the indexed command.
Page 158 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description halt Halts the SA8220. help Displays help for the CLI commands. history Displays the command history. Use " ! " or " h " to recall a command number from the history list.
Page 159 C H A P T E R 5 Global System Commands Command Description ping Tests the network connection to another networking device. The command sends an ICMP packet from the SA8220 to the target device, which (if it receives the packet), sends a ping reply. After the SA8220 receives the reply, it displays a message indicating that the specified IP address is alive.
Page 160 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description reset (continued) GUI Settings: • Response timeout is set to 30 seconds. • Broker-action is set to 0 (Policy Manager). • Server-action is set to 1 (Statistics) Multi-site Settings: •...
Page 161 C H A P T E R 5 Global System Commands Command Description reset (continued) SSL Settings: • Suite is set to ‘default.’ • Cache is set to ‘enable.’ • Redirect is set to ‘none.’ top [box, toplevel] Changes the prompt to the system's top or box level trace Displays TCP packets coming into or out of the SA8220.
Page 162 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description trace (continued) • -x Output each packet in hex. • -X Output each packet in hex and ASCII. The <expression> has the same format as a "tcpdump" expression: If no <expression>...
Page 163 C H A P T E R 5 Global System Commands Command Description trace (continued) • ip proto <protocol> : true if the packet is an ip packet of protocol type <protocol> , where <protocol> is "icmp", "udp", or "tcp." •...
Page 164: Admin Commands
C H A P T E R 5 HP Traffic Director Server Appliances User Guide Admin The SA8220’s admin commands (see below) specify the server port where the Graphical User Interface is accessed and verify the current Commands port. Command Description config admin info Displays the current Graphical User Interface (GUI) port...
Page 165 C H A P T E R 5 File Management Commands Command Description Displays a list of saved configuration files Retrieves a configuration file from a TFTP server. Because the TFTP protocol has no user-logon or validation, sites that support it typically enforce some file access restrictions.
Page 166 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description restore-verbose Same as restore but displays every line as it is restored restore-verbose {filename} NOTE: Username commands are not valid in where filename is the name of the configuration file to be configuration files, that is, restored (the default file name is default.cfg ).
Page 167: Cli Commands
C H A P T E R 5 CLI Commands The Command Line Interface commands are described below. Commands Command Description config Changes the prompt to the CLI config branch. config config cli delete Deletes the specified user. config cli delete <username> config cli info Shows all current CLI settings at this level.
Page 168 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config cli prompt Changes the root level prompt. config cli prompt <prompt> where prompt is the new prompt name. The default prompt is an abbreviation of the product’s name, such as "HP SA8220."...
Page 169 C H A P T E R 5 CLI Commands Command Description config cli username Add, change, or delete the logon entry or password. The default user name, "admin" cannot be deleted. NOTE: Username To add or update a user: commands are not valid in config cli username <name>...
Page 170: Irv Commands
C H A P T E R 5 HP Traffic Director Server Appliances User Guide The Intelligent Resource Verification (IRV) commands. are described below. Commands Command Description config irv Changes to the config/irv branch config irv config irv info Displays the current ping interval config irv info config irv ping-interval Sets the IRV ping interval...
Page 171 C H A P T E R 5 GUI Commands Command Description config gui info Displays current Graphical User Interface (GUI) configuration information config gui info config gui response- Specifies the interval in seconds the GUI waits for a response from timeout the SA8220 before it times out.
Page 172: Routing Commands
C H A P T E R 5 HP Traffic Director Server Appliances User Guide Routing The Routing Commands (described below) are used both in route failover mode and in serial failover mode. In serial failover mode, Commands they advertise routes to the VIPs. NOTE: Latency exists in This is critical for VIPs that are not in the same subnet as the SA8220.
Page 173 C H A P T E R 5 Routing Commands Command Description config route ospf-dead Changes the duration of the OSPF router dead interval. The router dead interval is the number of seconds the SA8220’s OSPF neighbors should wait before assuming that this OSPF SA8220 is down.
Page 174 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config route protocol Specifies the desired routing protocol. config route protocol [rip | ospf | disable] where: • rip enables Routing Information Protocol (RIP) on the SA8220 •...
Page 175: Policy Group Commands
C H A P T E R 5 Policy Group Commands Policy Group The Policy Group commands are described below. Policy Group names must adhere to the following conventions: Commands • From 1 to 25 characters in length • Any alphanumeric character •...
Page 176 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup Enables throttling of services to meet specified response times. throttle config policygroup <policy-name> throttle [enable | disable] NOTE: When throttling is activated, requests to where: eligible servers in lower-...
Page 177 C H A P T E R 5 Policy Group Commands Command Description config policygroup Changes the load balancing algorithm. The default algorithm is service balancing "load." config policygroup <policy-name> service <service-name> balancing [robin | load] where: • policy-name is the name of an existing Policy Group •...
Page 178 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup Disables the specified service. service disable config policygroup <policy-name> service <service-name> disable where: • policy-name is the name of an existing policy group •...
Page 179 C H A P T E R 5 Policy Group Commands Command Description config policygroup Sets the name used in the HeaderNameField of the HTTP headers service header-name inserted when header or header-certificate are enabled, on a per-service basis. policy- name> service config policygroup <...
Page 180 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup Sets the priority level of the specified service. service priority config policygroup <policy-name> service <service-name> priority <level> where: • policy-name is the name of an existing Policy Group •...
Page 181 C H A P T E R 5 Policy Group Commands Command Description config policygroup Creates a new server. service server create config policygroup <policy-name> service <service-name> server create <server-name> NOTE: The server name where: and port must be unique. •...
Page 182 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup Expressions allow the SA8220 to parse requests at the levels of service server port path name, file type, and filename and direct them to the expression create appropriate server.
Page 183 C H A P T E R 5 Policy Group Commands Command Description config policygroup Deletes the named expression. The expression may be designated service server port either by its own specification or by entering its index as displayed expression delete by the expression info command.
Page 184 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup Enables or disables HTTP error detection on the named server. service server port http When HTTP error detection is enabled, requests that generate HTTP errors 401-405 and 500-503 are rerouted (transparently to the client), to the next available server.
Page 185 C H A P T E R 5 Policy Group Commands Command Description config policygroup Enables or disables Multi-hop Source Address Preservation service server port msap (MSAP) on the named server. config policygroup <policy-name> service <service-name> server <server-name> port <port> msap [enable | disable] where: •...
Page 186 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup The SA8220 can be configured to maintain a session’s state so that service sticky serial requests from a single client are allocated to the same server. This is called "sticky port"...
Page 187: System Commands
C H A P T E R 5 System Commands System The System commands are described below. Commands Command Description config sys Changes the prompt to the config/sys branch config sys config sys autoboot Enables or disables the Autoboot function. If Autoboot is enabled, the SA8220 prompts you to press a key during restart to enter the Boot Monitor command line interface.
Page 188 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config sys id Sets the unit identifier. The SA8220 is shipped pre-configured with the unit’s serial number in this field. This command can change the identifier if the site requires alternate asset tracking information.
Page 189 C H A P T E R 5 System Commands Command Description config sys software Deletes old versions of SA8220 software from local storage. It can delete be used to free local storage to install a version update or product upgrade.
Page 190 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config sys software Specifies the multi-site software level. The parameters are used to ms-software show all installed multi-site agents, enable a multi-site agent, delete a multi-site agent, or install a new multi-site agent.
Page 191: Security Commands
C H A P T E R 5 Security Commands Security The Security commands are described below. Commands Command Description config sys security Determines whether the access control list is enabled or disabled. custom access-control Access control lists are configured with the commands acl add ( ip or netmask ) and acl delete ( ip or netmask ).
Page 192 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config sys security Switches to custom security settings menu custom config sys security custom config sys security Enables or disables IP forwarding. If IP forwarding is enabled, the custom forwarding servers connected to the second interface of the SA8220 are directly accessible by their IP addresses.
Page 193 C H A P T E R 5 Security Commands Command Description config sys security Enables or disables administration using telnet. custom telnet config sys security custom telnet [enable | disable] Disabled by default. config sys security info Displays the current state of the security system config sys security Specifies the security mode.
Page 194: Snmp Commands
C H A P T E R 5 HP Traffic Director Server Appliances User Guide SNMP The SNMP commands are described below. Commands Command Description config sys snmp Specifies community strings that the SA8220 will accept on community create incoming SNMP requests. Up to 10 community strings can be created.
Page 195 C H A P T E R 5 SNMP Commands Command Description config sys snmp info Displays information about the SNMP port, sysContact , sysName , and sysLocation . config sys snmp info config sys snmp port Specifies the port where the SA8220 receives SNMP requests. config sys snmp port <#>...
Page 196 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config sys snmp trap Specifies the host to which SA8220 sends SNMP traps. Up to 10 create community trap receivers can be created. By default the trap receiver list is empty, that is, no traps are sent.
Page 197: Ssl Commands (Sa8200/Sa8220 Only)
C H A P T E R 5 SSL Commands (SA8200/SA8220 only) The Secure Transactions (SSL) commands unique to the SA8220. are described below. Commands (SA8200/ SA8220 only) Command Description config policygroup Creates a certificate. A private key must be created prior to using service key certificate this command.
Page 198 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup Deletes a certificate. service key certificate delete config policygroup <policy-name> service <service-name> key certificate delete where: • policy-name is the name of a policy group •...
Page 199 C H A P T E R 5 SSL Commands (SA8200/SA8220 only) Command Description config policygroup Imports an existing certificate. We recommend you copy the service key certificate certificate (a block of ASCII text) from a server’s console window, import then paste it into the SA8220’s console window when prompted.
Page 200 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup Adds the PEM-encoded client certificate to the HTTP header of service key client-ca requests sent to the servers. The SSL session ID will also be sent. header-certificate The config policygroup service header-names command may be used to configure the header names field for the client certificate...
Page 201 C H A P T E R 5 SSL Commands (SA8200/SA8220 only) Command Description config policygroup Imports a CRL from a server. service key client-ca revocation import config policygroup <policy-name> service <service-name> key client-ca revocation [import] where: • policy-name is the name of a policy group •...
Page 202 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup Sets the mode to disable or enable. service key client-ca revocation mode config policygroup <policy-name> service <service-name> key client-ca revocation [mode] <disable | enable> NOTE: When mode is disabled, the presence of a where:...
Page 203 C H A P T E R 5 SSL Commands (SA8200/SA8220 only) Command Description config policygroup Retrieves the CRL. service key client-ca revocation url config policygroup <policy-name> service <service-name> key client-ca revocation <url> {user <username> password <password> | <none>} NOTE: If refresh is set to a where: non-zero value, and the •...
Page 204 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup Deletes a private key. service key delete config policygroup <policy-name> service <service-name> key delete NOTE: key delete deletes the certificate, where: signing request, and private •...
Page 205 C H A P T E R 5 SSL Commands (SA8200/SA8220 only) Command Description config policygroup Imports an existing private key. For example, you can copy the service key import key (a block of ASCII text) from a server’s console window, then paste it into the SA8220’s console window, or the private key may be copied via ftp.
Page 206 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup Creates a signing request. Signing requests are used to obtain service key signrequest certificates from a Certificate Authority. Once created, the signing create request is exported and emailed to the Certificate Authority, who will mail you a certificate for you to import into the SA8220.
Page 207 C H A P T E R 5 SSL Commands (SA8200/SA8220 only) Command Description config policygroup Deletes a signing request. service key signrequest delete config policygroup <policy-name> service <service-name> key signrequest delete where: • policy-name is the name of a policy group •...
Page 208 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config policygroup Specifies a cipher suite for each type of service. service key suite config policygroup <policy-name> service <service-name> key suite [ all | high | medium | low | export | <custom>...
Page 209 C H A P T E R 5 SSL Commands (SA8200/SA8220 only) Command Description config ssl dn Sets the Distinguished Name (DN) configuration. This information will be incorporated into new certificate or signing requests unless otherwise specified. NOTE: A unique DN should be specified when config ssl dn {name <name>...
Page 210 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config ssl suite Configures the Cipher Suite the client is permitted to negotiate in the SSL handshake phase. The value applies to all SSL-enabled services.
Page 211: Logging Commands
C H A P T E R 5 Logging Commands Logging The Logging commands are described below. Commands Command Description config logging info Displays current logging configuration settings. config logging sys Displays system-level logging configuration. config logging output Log file viewing and configurations. config logging sys info Displays the current system logging mask settings and available logging mask.
Page 212 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description config logging output Sets the maximum log file size. Range is 1024-600000. logsize config logging output Allows review of the log file. An option filter value can be viewlog indicated to remove the logging mask from the log file upon review.
Page 213: Show Commands
C H A P T E R 5 Show Commands Show The Show commands are described below. Commands Command Description show admin info Displays the port used for communication with the GUI show admin info show cli info Displays the CLI configuration show cli info show cli users Displays the list of users...
Page 214 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description show policygroup To display configuration for ALL services in the specified policy service info group: show policygroup <policy-name> service info where is the name of the policy group whose policy-name service information you want to view To display configuration for a SPECIFIED service:...
Page 215 C H A P T E R 5 Show Commands Command Description show policygroup Displays signing request information key sign-request info (SA8200/SA8220 only) show policygroup <policy-name> service <service-name> key sign-request info • is the name of the policy group policy-name •...
Page 216 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description show policygroup Displays configured server ports service server port info show policygroup <policy-name> service <service-name> server <server-name> port info where: • is the name of the policy group policy-name •...
Page 217 C H A P T E R 5 Show Commands Command Description show stats info Displays the SA8220’s statistics show stats info NOTE: Statistics for open connections in RICH and SSL modes (on the SA8220 and the SA7220) are not available.
Page 218 C H A P T E R 5 HP Traffic Director Server Appliances User Guide Command Description show sys software info Displays a list of installed software images, their image index, product, version, and build numbers show sys software info show sys software ms- Displays all current installed multi-site software versions software info...
Page 219: Chapter 6: Scenarios
Scenarios This chapter covers the topics shown below: NOTE: For ease of • Scenario 1: Load Balancing a Web Site with Two Servers and reading, all models are the SA8220 in Inline Mode referred to as the SA8220 • Scenario 2: Load Balancing Servers with Source Address throughout this Preservation document.
Page 220: E-Commerce Appliance Scenarios
C H A P T E R 6 HP Traffic Director Server Appliances User Guide e-Commerce Appliance Scenarios This chapter contains five scenarios that demonstrate the HP e- Commerce Traffic Director Server Appliance SA8200/SA8220s, the HP Traffic Director Server Appliance SA7200/7220s operation using “real world”...
Page 221: Prerequisites For Scenario 1
C H A P T E R 6 e-Commerce Appliance Scenarios In Dual NIC mode, the SA8220 uses two Ethernet ports. One is connected to the router or switch on which client requests arrive, and the other is connected to the server-side subnet. By contrast, Single NIC mode refers to configurations in which the SA8220 communicates with the router or switch and the servers via a single Ethernet port.
Page 222 C H A P T E R 6 HP Traffic Director Server Appliances User Guide Specify failover method (disabled, serial, route): [disabled] ---> Enable Autoboot (yes,no) [no] ---> monitor>dns Would you like to configure DNS (yes,no)? [no] --->yes Enter Domain name (‘-’ to cancel) --->...
Page 223 C H A P T E R 6 e-Commerce Appliance Scenarios Current active configuration ------------------------------ Product: HP_SA8220 Version: Patch Level: Build Current time: Thu Oct 5 11:55:49 PDT 2000 Hostname: SA8220 -------------- Network side NIC: IP Address: 10.6.2.99 Netmask: 255.255.255.0 MAC address: 0:90:27:f6:f6:22 ---------------...
Page 224 C H A P T E R 6 HP Traffic Director Server Appliances User Guide Password: HP SA8220 e-Commerce Director command line interface Copyright (c) 2001 Hewlett-Packard Company All Rights Reserved. Please wait .. HP SA8220# Create a Policy Group 1.
Page 225 C H A P T E R 6 e-Commerce Appliance Scenarios Add Servers to the HTTP Service 1. To add server “serv1.acme.com” to the HTTP service, type this command: HP SA8220/config/policygroup/gold/service/http# server create serv1.acme.com port 80 Server serv1.acme.com port 80 has been created. This command tells the SA8220 that serv1.acme.com can fulfill requests arriving at 30.1.1.201 on port 80.
Page 226: Scenario 2: Load Balancing Servers With Source Address Preservation
C H A P T E R 6 HP Traffic Director Server Appliances User Guide Scenario 2: In its default operating mode, the SA8220 alters source and destination packet addresses so that fulfillment servers see only the Load SA8220’s address. However, under some circumstances, Balancing administrators may want to preserve incoming clients’...
Page 227: Prerequisites For Scenario 2
C H A P T E R 6 e-Commerce Appliance Scenarios Prerequisites for Scenario 2 NOTE: For each • At least one Web server fulfillment, the server’s • One client default gateway must be set to the SA8220’s real • One SA8220 must be physically installed on the network, and its IP address.
Page 228 C H A P T E R 6 HP Traffic Director Server Appliances User Guide 2. To move the prompt to the level of the specific service, type this command: HP SA8220/config/policygroup/saptest#service sap Add Servers to the SAP Service 1. To add the server “serv1” to the SAP service, type this command: HP SA8220/config/policygroup/saptest/service/ sap#server create serv1.prime.com port 80 Server serv1.prime.com port 80 has been created.
Page 229: Scenario 3: Routing Outbound Data Away From The Sa8220 For Opr
C H A P T E R 6 e-Commerce Appliance Scenarios Scenario 3: You can configure the SA8220 to direct outbound data from the fulfillment servers to bypass the SA8220. Most requests to servers Routing elicit a disproportionate amount of return data. Under some Outbound Data circumstances, it is desirable to avoid routing such volumes of content through the SA8220 as it returns to the client.
Page 230: Prerequisites For Scenario 3
C H A P T E R 6 HP Traffic Director Server Appliances User Guide Prerequisites for Scenario 3 Equipment • At least one Web server with an installed loopback adapter (for example, UNIX* or Windows* or NT*) • One SA8220 physically installed on the network, with its Boot Monitor and routing protocol configurations completed (please see the “Getting Started Guide”).
Page 231 C H A P T E R 6 e-Commerce Appliance Scenarios Add HTTP Service and VIP 1. To add HTTP service (with a virtual IP address of 10.1.1.201 on port 80) to policy group oprtest, type this command: HP SA8220/config/policygroup/oprtest# service create OPR vip 30.1.1.201 port 80 This command creates a new service on the SA8220, using the HTTP protocol, at IP address 30.1.1.201, listening on TCP port...
Page 232: Scenario 4: Content Routing (Sa7220 And Sa8200/Sa8220 Only)
C H A P T E R 6 HP Traffic Director Server Appliances User Guide Scenario 4: Because the SA8220 can differentiate servers according to their content, it can apportion requests based on the type of content Content requested. For example, an administrator might choose to run the Routing most processor-intensive processes (such as CGI scripts) on the most powerful servers while placing the less processor-bound files on...
Page 233: Prerequisites For Scenario 4
C H A P T E R 6 e-Commerce Appliance Scenarios Client Client Broker Broker S erver S erver S YN S YN Get UR L Get UR L S YN S YN Get UR L Get UR L Data Flow Diagram for Scenario 4 Prerequisites for Scenario 4 •...
Page 234 C H A P T E R 6 HP Traffic Director Server Appliances User Guide Create a Policy Group 1. To create a policy group, first move the prompt to the policy group level by typing this command: HP SA8220#config policygroup 2.
Page 235 C H A P T E R 6 e-Commerce Appliance Scenarios 2. To move the prompt to the server level, type this command: HP SA8220/config/policygroup/richtest/service/ rich#server serv1.prime.com port 80 Add Expressions to serv1’s Configuration 1. Finish the configuration by adding expressions to server Serv1.com to differentiate content by typing these commands: HP SA8220/config/policygroup/richtest/service/ rich/server/serv1.prime.com/port/80#expression...
Page 236 C H A P T E R 6 HP Traffic Director Server Appliances User Guide 4. To move the prompt, type this command: HP SA8220/config/policygroup/richtest/service/ rich/server#serv2.prime.com port 80 Add an Expression to serv2’s Configuration 1. Now add an expression to differentiate serv2’s content from that of serv1 by typing this command.
Page 237 C H A P T E R 6 e-Commerce Appliance Scenarios When configuring routing on the SA8220, always match the router’s configuration. The SA8220 can be programmed to use RIP v1, RIP v2 or OSPF. For example: HP SA8220#config route HP SA8220/config/route#info Route configuration: ----------------------------...
Page 238: Scenario 5: Using Ssl Acceleration (Sa8200/Sa8220 Only)
C H A P T E R 6 HP Traffic Director Server Appliances User Guide Scenario 5: We now build upon Scenario 4 by adding a Layer 7 service using the SA8220’s SSL acceleration capabilities. As discussed earlier, the Using SSL SA8220 can off load SSL processing from the web server, providing Acceleration dramatically improved performance.
Page 239: Procedure For Scenario 5
C H A P T E R 6 e-Commerce Appliance Scenarios Procedure for Scenario 5 Using this procedure, you will add an SSL enabled service called “SSL” to the previously defined “Richtest” policy group. 1. Telnet to the SA8220 and log on as the administrator ( admin The Command Line prompt appears, as shown below: HP SA8220#...
Page 240: Scenario 6: Using Crls (Sa8200/Sa8220 Only)
C H A P T E R 6 HP Traffic Director Server Appliances User Guide 6. To create a certificate, type these commands: HP SA8220/config/policygroup/richtest/service/ SSL# key certificate create Certificate created (Expires in 30 days). The service is SSL enabled. Define the servers to start processing.
Page 241 C H A P T E R 6 e-Commerce Appliance Scenarios Procedure for Scenario 6 Using this procedure, you will configure the SA8220 to use a CRL. 1. Telnet to the SA8220 and log on as the administrator ( admin The Command Line prompt appears, as shown below: SA8220 2.
Page 242 C H A P T E R 6 HP Traffic Director Server Appliances User Guide 5. Paste in the certificate. After approximately 30 seconds, you will see: -----BEGIN CERTIFICATE----- MIIDdDCCAt2gAwIBAgIBADANBgkqhkiG9w0BAQQFADCBiTEL MAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExEjAQ BgNVBAcTCVNhbiBEaWVnbzEOMAwGA1UEChMFSW50ZWwxDTAL BgNVBAsTBEVOR1IxGjAYBgNVBAMTEUFuZHJlYXMgQVVUSE9S SVRZMRYwFAYJKoZIhvcNAQkBFgdhQGUuYy5kMB4XDTAwMTAx NzEwNTI1M1oXDTAxMTAxNzEwNTI1M1owgYkxCzAJBgNVBAYT AlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRIwEAYDVQQHEwlT YW4gRGllZ28xDjAMBgNVBAoTBUludGVsMQ0wCwYDVQQLEwRF TkdSMRowGAYDVQQDExFBbmRyZWFzIEFVVEhPUklUWTEWMBQG CSqGSIb3DQEJARYHYUBlLmMuZDCBnzANBgkqhkiG9w0BAQEF AAOBjQAwgYkCgYEAwbizLs+d5+wLBcmTob9kc0uhuPUiMt7x RzMNu6cNKZjC5hZnM0Gfp063s7HftllVYpbwyNu1UxQBNYfG 27vd95rCNe4XDy34j0HB4LMmmHRVn3HxiypWQZhmBlmSeBJz kkLV4Y62IoGcypqnfLbEF+VoYdQ8cprHkpFIAPuCkCAwEAAa...
Page 243 C H A P T E R 6 e-Commerce Appliance Scenarios 7. To give the SA8220 the download address for the CRL, type the following command: <policygroup/richtest/service/SSL/key/client-ca/ revocation# url ftp://10.1.2.64/Certsrv/myCA.crl user john password smith where john is your username and smith is your password.
Page 244 C H A P T E R 6 HP Traffic Director Server Appliances User Guide 10. To enable the CRL feature for the SA8220, type the following command: <policygroup/richtest/service/SSL/key/client-ca/ revocation# <policygroup/richtest/service/SSL/key/client-ca/ revocation# mode enable You will see: Mode changed to enable <policygroup/richtest/service/SSL/key/client-ca/ revocation#...
Page 245: Chapter 7: Snmp Support
SNMP Support This chapter covers the topics shown below: NOTE: For ease of • Standards Compliance reading, all models are • HP MIBTree referred to as the SA8220 throughout this • Trap Summary document. Unless noted • Displaying SNMP Parameters otherwise, all SA8220 references refer to all •...
Page 246: Using Snmp
C H A P T E R 7 HP Traffic Director Server Appliances User Guide Using SNMP The HP e-Commerce Traffic Director Server Appliance SA8200/ SA8220s and the HP Traffic Director Server Appliance SA7200/ SA7220s include a fully compliant, embedded Simple Network Management Protocol (SNMP) agent that supports SNMPv1 and SNMPv2c requests.
Page 247: Hp Mib Tree
C H A P T E R 7 Using SNMP HP MIB Tree Refer to the figure below (HP’s MIB tree) for a better understanding of this section. HP’s MIB Tree All HP enterprise MIBs and MIB objects are defined under the management branch of the HP tree.
Page 248: Supported Mibs
C H A P T E R 7 HP Traffic Director Server Appliances User Guide Supported MIBs Management Information Base-II (MIB-II) HP Enterprise MIBs: hpserver-header.my hpbroker-mib.my hpl7-broker-mib.my hpssl-acceleration-mib.my hpuser-mib.my Where to find MIB Files Electronic copies of the HP MIB files used by the SA8220 are shipped with the product on CD-ROM and are available from HP’s web site: http://www.hp.com/serverappliances/support/...
Page 249 C H A P T E R 7 Using SNMP hpbroker-mib.my hpbroker-mib.my defines objects and traps for Layer 4 load balancing. hp broker-mib.my also contains objects and traps related to server availability, the SA8220’s CPU utilization, and its operational status. The hp broker-mib.my objects and traps are discussed below.
Page 250 C H A P T E R 7 HP Traffic Director Server Appliances User Guide Trap thresholds for server connection count can be configured so that a trap is sent if the connection count reaches a specified value. The serverConnCntAlert and serverConnCntNormal traps and applicable thresholds work similarly for server response time.
Page 251 C H A P T E R 7 Using SNMP Trap thresholds for service connection can be configured such that if the connection/second rate reaches a value, a trap is sent. The serviceCpsAlert and serviceCpsNormal trap and applicable thresholds work similarly for service response time. Broker Connection Count, Connections/Second and CPU Utilization brokerConnCnt is the number of established TCP connections used for load balancing.
Page 252 C H A P T E R 7 HP Traffic Director Server Appliances User Guide The traps redundantBrokerUp and redundantBrokerDown are sent to alert the administrator of any changes in the availability of the redundant Director. hpl7-broker-mib.my NOTE: This MIB is not hpl7-broker_mib.my defines objects and traps for Layer 7 load available on the SA7200.
Page 253 C H A P T E R 7 Using SNMP sequence until the HTTP request is fulfilled. If the HTTP request is fulfilled, the client sees a successful completion of the request. Otherwise, the client receives a 503 error from the Director. http606Redirects is the number of times during the hour that the Director redirected a request to a server.
Page 254: Trap Summary
C H A P T E R 7 HP Traffic Director Server Appliances User Guide sslConnProcessed is the number of SSL connections handled by the SA8220 during the hour. sslTraffic indicates whether or not SSL traffic exceeded maximum capacity at least once during the 1-hour period. This object starts with the value "ok"...
Page 255: Displaying Snmp Parameters
C H A P T E R 7 Using SNMP brokerCpsNormal brokerConnCntAlert brokerConnCntNormal brokerCpuUtilAlert brokerCpuUtilNormal operationStateChanged redundantBrokerDown redundantBrokerUp hpl7-broker-mib.my NOTE: This MIB is not available on the SA7200. httpErrsToClientAlert http606ErrsToClientAlert hpssl-acceleration-mib.my NOTE: This MIB is available only on the sslTrafficOverflowAlert SA8200/SA8220.
Page 256 C H A P T E R 7 HP Traffic Director Server Appliances User Guide The following CLI commands are used to display and configure SNMP community strings. These parameters are also configurable in the Administration-SNMP tab of the Web-based GUI interface. config sys snmp community info config sys snmp community create <string>...
Page 257: Configuring Trap Parameters
C H A P T E R 7 Using SNMP Configuring Use the following CLI commands to display and configure SNMP trap parameters: Trap Parameters config sys snmp trap info config sys snmp trap port <port> config sys snmp trap create <ip address> community <community>...
Page 258 C H A P T E R 7 HP Traffic Director Server Appliances User Guide Notes...
Page 259: Chapter 8: Software Updates
Software Updates This chapter covers the following topics: NOTE: For ease of • Upgrading or Updating Your System Software reading, all models are • Downloading and Installing the Software referred to as the SA8220 throughout this document. Unless noted otherwise, all SA8220 references refer to all models.
Page 260: Updating Your System Software
C H A P T E R 8 HP Traffic Director Server Appliances User Guide Updating Your System Software Your HP e-Commerce Traffic Director Server Appliance SA8200/ SA8220 is shipped with the latest system software installed. After initial installation and setup, you may be eligible for, or choose to purchase, a software version update or product upgrade.
Page 261: Downloading And Installing The Software
C H A P T E R 8 Downloading and Installing the Software Downloading and Installing the Software The process for downloading and installing the software is the same whether the image is a version update, product upgrade, or patch. After the install file is on an ftp server, use the GUI or the CLI to download and install it onto the SA8220.
Page 262: Rebooting With The New Image And Verifying Installation
C H A P T E R 8 HP Traffic Director Server Appliances User Guide Rebooting with As an added security feature, you must be connected to the serial console throughout this section. the New Image After the image has been downloaded and installed, it can be verified and Verifying by way of the CLI command, show sys software info .
Page 263: Upgrading Under Serial Cable Failover Configuration
C H A P T E R 8 Downloading and Installing the Software Upgrading Upgrading software versions on two SA8220s (System A and System B) configured for serial cable failover presents a special case. This Under Serial procedure ensures minimum downtime during upgrade. Cable Failover 1.
Page 264 C H A P T E R 8 HP Traffic Director Server Appliances User Guide 11. At the prompt, type the new password. This password must also consist of 8 to 128 characters. 12. If desired, type the following command in System B’s CLI to enable autoboot: config sys autoboot enable...
Page 265: Appendix A: Security Configuration
Security Configuration Recommended Security Configuration This section describes configuration options to enhance the level of protection of your system. For more details, please see “Command Line Interface” in Chapter 5. 1. If you have not already done so, change the admin password by typing the config cli username command.
Page 266 A P P E N D I X A HP Traffic Director Server Appliances User Guide 3. With custom mode access, control lists can be used to further enhance administration security by restricting management functionality to either your IP or subnet. Type the commands as shown below: config sys security custom access-control enabled...
Page 267: Appendix B: Ssl Configuration
SSL Configuration Obtaining Keys and Certificates NOTE: This chapter Keys and certificates are necessary for the successful operation of the applies to the SA8200/ SA8220 for e-Commerce traffic processing. There are three ways to SA8220 only. The SA8220 obtain them: comes with default keys •...
Page 268: Copying And Pasting Keys And Certificates
A P P E N D I X B HP Traffic Director Server Appliances User Guide Copying and Copying and pasting is an integral part of the next several procedures. Below are steps required to perform these tasks using Pasting Keys HyperTerminal*.
Page 269: Obtaining A Certificate From Verisign Or Another Ca
A P P E N D I X B Obtaining Keys and Certificates Obtaining a Use the policy manager key create command to create your key and the key signrequest create command to create a signing Certificate request to be sent to Verisign or another CA for authentication. The from Verisign CA will return the certificate, but there may be a delay of 1-5 days.
Page 270: Importing Keys Into The Sa8220
A P P E N D I X B HP Traffic Director Server Appliances User Guide Importing The recommended method for importing an existing key is to copy the key (a block of ASCII text) from your backup SA8200 key file, Keys into the then paste it into the SA8220’s console window when prompted.
Page 271: Importing Certificates Into The Sa8220
A P P E N D I X B Obtaining Keys and Certificates Importing The recommended method for importing an existing certificate is to copy the certificate (a block of ASCII text) from your certificate Certificates server console window, then paste it into the SA8220’s console into the window when prompted.
Page 272: Creating A New Key/Certificate On The Sa8220
A P P E N D I X B HP Traffic Director Server Appliances User Guide Creating a new Use the policy manager key create and key create certificate commands to create new keys and certificates for Key/Certificate SA8220 operation. This procedure can be used when there are no on the SA8220 existing keys and certificates on the server.
Page 273: Using Global Site Certificates
A P P E N D I X B Obtaining Keys and Certificates Using Global Overview Site The export versions of Internet Explorer and Netscape Communicator initiate an SSL connection to the SSL server to use Certificates 40-bit encryption, even though the browser is capable of 128-bit encryption.
Page 274 A P P E N D I X B HP Traffic Director Server Appliances User Guide NOTE: There must be no An example of a certificate is shown below: white space before, between, or after -----BEGIN CERTIFICATE----- MIIFZTCCBM6gAwIBAgIQCTN2wvQH2CK+rgZKcTrNBzANBgkq certificates, and the hkiG9w0BAQQFADCBujEfMB0GA1UEChMWVmVyaVNpZ24gVHJ1 “Begin...”...
Page 275: Generating A Client Ca
A P P E N D I X B Generating a Client CA Generating a Client CA NOTE: To acquire a This procedure shows how to generate a client CA using OpenSSL: copy of OpenSSL* for 1. Create a working directory where all the keys and certificates your environment, access will be stored.
Page 276: Generating A Crl
A P P E N D I X B HP Traffic Director Server Appliances User Guide Generating a CRL NOTE: To acquire a This procedure shows how to generate a Certificate Revocation List copy of OpenSSL for your (CRL) using OpenSSL: environment, access the 1.
Page 277: Revoking A Certificate
A P P E N D I X B Revoking a Certificate 12. Combine the clientkey1.pem and cert.pem files into one file by typing this command: cat clientkey1.pem cert.pem > all.pem 13. Convert to p12 format by typing this command: openssl pkcs12 -export -in all.pem -out <file>.p12 -name “MY NAME”...
Page 278 A P P E N D I X B HP Traffic Director Server Appliances User Guide The table below provides ciphers supported by the SA8220. Notice that the export version of the software supports only the ciphers marked “E” in the Profile column. Cipher Name Proto- Authen-...
Page 279: Http Header Information
A P P E N D I X B HTTP Header Information HTTP Header Information NOTE: Only the The SA8220 includes the client IP address and current encryption SOURCE_IP parameter information in the HTTP request sent to the server. This information is supported by the is provided below.
Page 280 A P P E N D I X B HP Traffic Director Server Appliances User Guide Notes...
Page 281: Appendix C: Failover Method Dependencies
Failover Method Dependencies Failover Modes NOTE: For ease of The failover modes are described below. reading, all models are referred to as the SA8220 Failover Description throughout this Mode document. Unless noted otherwise, all SA8220 Disabled No failover method is selected references refer to all models.
Page 282 A P P E N D I X C HP Traffic Director Server Appliances User Guide The table below illustrates feature availability under different failover modes. Failover Feature Single Dual Interface Dual Dual Interface Mode Interface Interface with “inside” with with and “outside”...
Page 283 A P P E N D I X C Failover Modes Failover Feature Single Dual Interface Dual Dual Interface Mode Interface Interface with “inside” with with and “outside” “outside” “outside” routers (3) router router Serial VIP ARPing Same subnet, Same subnet, only Cable only on on “outside”...
Page 284 A P P E N D I X C HP Traffic Director Server Appliances User Guide Notes...
Page 285: Appendix D: Configuring Out-Of-Path Return
Configuring Out-of- Path Return Configure OPR for Windows* 2000* Set the 1. From the Start menu, click Settings. Loopback 2. Open the Control Panel, as shown in the following figure. NOTE: For ease of reading, all models are referred to as the SA8220 throughout this document.
Page 286 A P P E N D I X D HP Traffic Director Server Appliances User Guide Windows 2000 Control Panel 3. Double-click Add/Remove Hardware. 4. The Add/Remove Hardware Wizard appears, as show below.
Page 287 A P P E N D I X D Configure OPR for Windows* 2000* Add/Remove Hardware Wizard 5. Click Next to bring up the Choose a Hardware Task screen, as shown in the next figure.
Page 288 A P P E N D I X D HP Traffic Director Server Appliances User Guide Choose a Hardware Task Screen 6. Select Add/Troubleshoot a device. 7. Click Next to bring up a Devices list, as shown in the following figure.
Page 289 A P P E N D I X D Configure OPR for Windows* 2000* Devices List 8. Highlight Add a new device. 9. Click Next to bring up the Find New Hardware screen, as shown in the next figure.
Page 290 A P P E N D I X D HP Traffic Director Server Appliances User Guide Find New Hardware Screen 10. Select No to search for new hardware. 11. Click Next to bring up the Hardware Type screen, as shown in the next figure.
Page 291 A P P E N D I X D Configure OPR for Windows* 2000* Hardware Type Screen 12. Click Network Adapters. 13. Click Next to bring up the Select Network Adapter screen, as shown in figure.
Page 292 A P P E N D I X D HP Traffic Director Server Appliances User Guide Select Network Adapter Screen 14. Under Manufacturers, scroll down to Microsoft. 15. Under Network Adapter, select Microsoft Loopback Adapter. 16. Click Next to bring up the Start Hardware Installation screen, as shown in the next figure.
Page 293 A P P E N D I X D Configure OPR for Windows* 2000* Start Hardware Installation Screen 17. Click Next to bring up the Completing the Add/Remove Hardware Wizard screen, as shown below.
Page 294 A P P E N D I X D HP Traffic Director Server Appliances User Guide Completing the Add/Remove Hardware Wizard Screen 18. Click Finish. 19. To configure the Loopback, open the Control Panel, as shown in the next figure.
Page 295 A P P E N D I X D Configure OPR for Windows* 2000* Windows 2000 Control Panel 20. Double-click the Network and Dial-up Connections icon to bring up the next screen, shown in the next figure.
Page 296 A P P E N D I X D HP Traffic Director Server Appliances User Guide Network and Dial-up Connections Screen 21. Highlight Local Area Connection 2 (the Loopback Adapter). 22. From the menu bar, select File | Properties to bring up the Properties screen, as shown in the next figure.
Page 297 A P P E N D I X D Configure OPR for Windows* 2000* Location Area Connection 2 Properties Screen 23. Scroll down to Internet Protocol (TCP/IP), as shown in the next figure, and double-click.
Page 298 A P P E N D I X D HP Traffic Director Server Appliances User Guide Select Internet Protocol (TCP/IP) 24. The Internet Protocol (TCP/IP) Properties screen appears, as shown in the next figure...
Page 299 A P P E N D I X D Configure OPR for Windows* 2000* Internet Protocol (TCP/IP) Properties Screen 25. In the IP address field, type the Virtual IP (VIP) address of the SA8220. 26. In the Subnet Mask field, type the subnet mask appropriate for your environment.
Page 300: Configure Opr For Windows* Nt
A P P E N D I X D HP Traffic Director Server Appliances User Guide Configure OPR for Windows* NT* Set the 1. From the Start menu, click on Settings, then open the Control Panel. Loopback 2. The Control Panel appears, as shown below. NOTE: OPR is not available for SSL- enabled services.
Page 301 A P P E N D I X D Configure OPR for Windows* NT* Network Adapter Setting 4. Click the Adapters tab. 5. Click Add. The Select Network Adapter dialog appears, as shown in the next figure.
Page 302 A P P E N D I X D HP Traffic Director Server Appliances User Guide Choosing the MS Loopback Adapter 6. From the Network Adapter list, select MS Loopback Adapter and click OK. The MS Loopback Adapter Card Setup dialog appears, as shown in the next figure.
Page 303 A P P E N D I X D Configure OPR for Windows* NT* 7. Choose the default Frame Type (802.3) and click OK. If the necessary files are not found on your system, the Windows NT Setup dialog appears, as shown in the next figure. Copying Windows NT Files 8.
Page 304 A P P E N D I X D HP Traffic Director Server Appliances User Guide MS Loopback Adapter Installed 9. Click the Protocols tab. The protocol settings appear, as shown in the next figure.
Page 305 A P P E N D I X D Configure OPR for Windows* NT* Protocol Settings 10. From the Network Protocols list, click TCP/IP Protocol. 11. Click Properties..The Microsoft TCP/IP Properties dialog appears, as shown in the next figure.
Page 306 A P P E N D I X D HP Traffic Director Server Appliances User Guide Setting the TCP/IP Properties 12. From the Adapter pull-down menu, select the MS Loopback Adapter. 13. Click Specify an IP address. 14. In the IP address field, type the Virtual IP (VIP) address of the SA8220.
Page 307: Run A Web Service On The Loopback Interface Using Iis 3.0
A P P E N D I X D Configure OPR for Windows* NT* Run a Web Service on the Loopback Interface Using IIS 3.0 NOTE: If you cannot 1. From the Start menu, click Programs and then Microsoft find Microsoft Internet Internet Server (Common) to run the Internet Service Manager.
Page 308: Run A Web Service On The Loopback Interface Using Iis 4.0
A P P E N D I X D HP Traffic Director Server Appliances User Guide Run a Web Service on the Loopback Interface Using IIS 4.0 NOTE: If you cannot 1. From the Start menu, click Programs, click Windows NT 4.0 find Internet Service Option Pack, and then click Microsoft Internet Information Manager, you do not have...
Page 309: Configuring Opr For Apache Web Server On A Unix* Machine
A P P E N D I X D Configuring OPR for Apache Web Server on a UNIX* machine Configuring OPR for Apache Web Server on a UNIX* machine This section reproduces the commands required to configure Out-of- Path Return for an Apache Web Server on a UNIX* machine. ifconfig lo0 add <vip>...
Page 310 A P P E N D I X D HP Traffic Director Server Appliances User Guide Notes...
Page 311: Appendix E: Diagnostics And Troubleshooting
Diagnostics and Troubleshooting Running Diagnostics NOTE: For ease of This section describes the available diagnostic information and in- reading, all models are field diagnostics. referred to as the SA8220 throughout this document. Unless noted otherwise, all SA8220 references refer to all models.
Page 312: Diagnostic Leds
A P P E N D I X E HP Traffic Director Server Appliances User Guide Diagnostic The front panel’s LEDs provide information generated by the boot- time power-on-self-test (POST) and application restart sequences. LEDs There are four LEDs on the front panel, as shown below. Power Power Status...
Page 313: Boot-Time Led Diagnostics
A P P E N D I X E Running Diagnostics Boot-time LED Diagnostics The front panel’s Status, Act 1 and Act 2 LEDs display the transition through a sequence of codes at boot time indicating the SA8220’s progress through the boot process. If the boot process aborts, terminates, or hangs before the SA8220 is online and functional, the state of the LEDs can help in diagnosing the problem.
Page 314: Run Time Errors
A P P E N D I X E HP Traffic Director Server Appliances User Guide Activity LEDs The table below describes the run time behavior of the Activity LEDs (Act 1, Act 2). Act 1 Act 2 Condition No NIC activity Slow blink 1 —...
Page 315: Troubleshooting
A P P E N D I X E Troubleshooting Troubleshooting This section contains descriptions of possible difficulties followed by possible causes and suggestions for solutions. The table below contains the troubleshooting guide for the HP e- Commerce Traffic Director Server Appliance SA8200/SA8220, the HP Traffic Director Server Appliance SA7200/SA7220.
Page 316 A P P E N D I X E HP Traffic Director Server Appliances User Guide Problem Possible Cause Solution Slow client response Hostname/IP address Add the hostname/real IP address of the from a web server resolution on the server SA8220 to the HOSTS file on the server to through the SA8220 may be misconfigured...
Page 317 A P P E N D I X E Troubleshooting Problem Possible Cause Solution Telnet connection to DNS resolution is The client machine’s host name must be DNS- resolvable by the SA8220 . If DNS is not used, incomplete. CLI on offline use the config sys hosts add command at the SA8220 in serial CLI to add the client’s hostname to the...
Page 318 A P P E N D I X E HP Traffic Director Server Appliances User Guide Problem Possible Cause Solution Client getting Proxy servers inhibit use Some ISPs use proxy servers to load balance of sticky src-ip option. client sessions. When the sticky src-ip option timeout or “service is enabled and the client’s session is switched to not found”...
Page 319: Appendix F: Cleaning The Dust Filter
Cleaning the Dust Filter Background NOTE: For ease of The HP e-Commerce Traffic Director Server Appliance SA8200/ reading, all models are SA8220s and HP Traffic Director Server Appliance SA7200/ referred to as the SA8220 SA7220s each have a dust filter element mounted behind the front throughout this grille and in front of the dual intake fans.
Page 320: Dust Filter Cleaning Procedure
A P P E N D I X F HP Traffic Director Server Appliances User Guide Dust Filter Cleaning Procedure To clean the dust filter, follow the steps below: 1. Remove the two Phillips screws that secure the metal grille on the left side of the SA8220’s front panel.
Page 321: Regulatory Information
Regulatory Information Taiwan Class A EMI Statement VCCI Class A (Japan)
Page 322: Vcci Statement
R E G U L A T O R Y HP Traffic Director Server Appliances User Guide VCCI Statement Class A ITE This is a Class A product based on the standard of the Voluntary Control Council for Interference by Information Technology Equipment (VCCI).
Page 323: Fcc Part 15 Compliance Statement
R E G U L A T O R Y FCC Part 15 Compliance Statement FCC Part 15 Compliance Statement This product has been tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interference when the equipment is operated in a commercial environment.
Page 324: Canada Compliance Statement (Industry Canada)
R E G U L A T O R Y HP Traffic Director Server Appliances User Guide Canada Compliance Statement (Industry Canada) Cet appareil numérique respecte les limites bruits radioélectriques applicables aux appareils numériques de Classe A prescrites dans la norme sur le matériel brouilleur: "Appareils Numériques", NMB-003 édictée par le Ministre Canadien des Communications.
Page 325: Warning
R E G U L A T O R Y WARNING WARNING The system is designed to operate in a typical office environment. Choose a site that is: • Clean and free of airborne particles (other than normal room dust). •...
Page 326: Avertissement
R E G U L A T O R Y HP Traffic Director Server Appliances User Guide AVERTISSEMENT Le système a été conçu pour fonctionner dans un cadre de travail normal. L’emplacement choisi doit être: • Propre et dépourvu de poussière en suspension (sauf la poussière normale).
Page 327: Warnung
R E G U L A T O R Y WARNUNG WARNUNG Das System wurde für den Betrieb in einer normalen Büroumgebung entwickelt. Der entwickelt. Der Standort sollte: • sauber und staubfrei sein (Hausstaub ausgenommen); • gut gelüftet und keinen Heizquellen ausgesetzt sein (einschließlich direkter Sonneneinstrahlung);...
Page 328: Avvertenza
R E G U L A T O R Y HP Traffic Director Server Appliances User Guide AVVERTENZA Il sistema è progettato per funzionare in un ambiente di lavoro tipico. Scegliere una postazione che sia: • Pulita e libera da particelle in sospensione (a parte la normale polvere presente nell’ambiente).
Page 329: Advertencias
R E G U L A T O R Y ADVERTENCIAS ADVERTENCIAS El sistema está diseñado para funcionar en un entorno de trabajo normal. Escoja un lugar: • Limpio y libre de partículas en suspensión (salvo el polvo normal). • Bien ventilado y alejado de fuentes de calor, incluida la luz solar directa.
Page 330: Wichtige Sicherheitshinweise
R E G U L A T O R Y HP Traffic Director Server Appliances User Guide Wichtige Sicherheitshinweise 1. Bitte lesen Sie sich diese Hinweise sorgfältig durch. 2. Heben Sie diese Anleitung für den spätern Gebrauch auf. 3. Vor jedem Reinigen ist das Gerät vom Stromnetz zu trennen. Vervenden Sie keine Flüssig- oder Aerosolreiniger.
Page 331 R E G U L A T O R Y Wichtige Sicherheitshinweise 15. Wenn folgende Situationen auftreten ist das Gerät vom Stromnetz zu trennen und von einerqualifizierten Servicestelle zu überprüfen: a. Netzkabel oder Netzstecker sint beschädigt. b. Flüssigkeit ist in das Gerät eingedrungen. c.
Page 332 R E G U L A T O R Y HP Traffic Director Server Appliances User Guide Notes...
Page 333: Software License Agreements
Software License Agreements ATTENTION: USE OF THE SOFTWARE IS SUBJECT TO THE HP SOFTWARE LICENSE TERMS SET FORTH BELOW. USING THE SOFTWARE INDICATES YOUR ACCEPTANCE OF THESE LICENSE TERMS. IF YOU DO NOT ACCEPT THESE LICENSE TERMS, YOU MAY RETURN THE SOFTWARE FOR A FULL REFUND.
Page 334 S O F T W A R E HP Traffic Director Server Appliances User Guide Ownership. The Software is owned and copyrighted by HP or its third party suppliers. Your license confers no title or ownership and is not a sale of any rights in the Software, its documentation or the media on which they are recorded or printed.
Page 335 S O F T W A R E HP Traffic Director Server Appliances User Guide whichever is applicable. You have only those rights provided for such Software and any accompanying documentation by the applicable FAR or DFARS clause or the HP standard software agreement for the product involved.
Page 336 S O F T W A R E HP Traffic Director Server Appliances User Guide Notes...
Page 337: Support Services
Glossary This section defines terms and acronyms used throughout the HP Traffic Director Server Appliances User Guide. Certificate A digitally-signed token in an SSL-encrypted transaction containing information including the issuer (Certificate Authority that issued the certificate), the organization that owns the certificate, public key, the validity period for the certificate, and the hostname.
Page 338: Europe
G L O S S A R Y HP Traffic Director Server Appliances User Guide Domain Name Server. A mechanism used in the Internet for translating the names of host machines into addresses. Eligible Server A server in a lower priority service’s server pool. Fulfillment Server A server that stores content and runs applications to respond to user requests...
Page 339: Asia
G L O S S A R Y HP Traffic Director Server Appliances User Guide Management Information Base. A repository of characteristics and parameters managed in a network device, such as a NIC, hub, switch, or router. MSAP Multi-Hop Source Address Preservation. MSAP allows requests to pass through two cascaded SA8220s in different geographical areas.
Page 340: Latin America
G L O S S A R Y HP Traffic Director Server Appliances User Guide Source Address Preservation. A SA8220 option which, when enabled, allows server logs to reflect the true IP addresses of requesting clients. Service A service is an IP application paired with a port number. For example: “HTTP:80.”...
Page 341: Glossary
Support Services Support for your SA8220 U.S. and For hardware service and telephone support, contact: • An HP-authorized reseller Canada • HP Customer Support Center at 1-800-633-3600...
Page 342 S U P P O R T HP Traffic Director Server Appliances User Guide Europe For hardware service and telephone support, contact: • An HP-authorized reseller • One of the following HP Customer Support Centers : Country and Number Austria – 0660 6386 Belgium (Dutch) –...
Page 343 S U P P O R T HP Traffic Director Server Appliances User Guide Asia For hardware service and telephone support, contact an HP- authorized reseller or one of these support centers: Country and Number Australia – 03-8877-8000 Hong Kong – 800-96-2598 India –...
Page 344 S U P P O R T HP Traffic Director Server Appliances User Guide Latin America For hardware service and telephone support, contact an HP- authorized reseller or one of these support centers: Country and Number Argentina – (541) 4778-8380 Brazil –...
Page 345 Index Numerics 606 error detection 79 balance strategy 75 response time round robin 76 admin commands 137, 152 boot monitor commands config admin info 137 autoboot 44 config admin port 137 boot 44 administration screen delete 48 CLI tab 99 dhcp 49 GUI tab 97 dns 49...
Page 346 I N D E X HP Traffic Director Server Appliances User Guide settime 54 config policygroup 12, 23, 24, 25, setup 57 26, 28, 32, 139, 142, 212, static_routes 58 version 58 config route 139 boot monitor interface 42 config ssl 143 accessing 43 config sys 140 interrupting 43...
Page 347 I N D E X HP Traffic Director Server Appliances User Guide client does not support cipher suite 20 command line interface (see CLI factory defaults commands) resetting 112 configuration file failover copying 109 configuration 33 deleting 109 method dependencies 269 restoring 108 modes 269 retrieving and sending 114...
Page 348 I N D E X HP Traffic Director Server Appliances User Guide arp 137 services 72 back 137 statistical screen 128 box 137 tools screen 115 ether 137 topology screen 63 exit 137 trace command 123 force-rwa 137 traceroute command 127 halt 137 help 137 history 137...
Page 349 I N D E X HP Traffic Director Server Appliances User Guide Layer 4 MIBs HOT services 13 broker connection count 239 service 238 connections/second 239 VIP 12 CPU Utilization 239 Layer 7 hpbroker-mib.my 237, 242 hp17-broker-mib.my 240 hpl7-broker-mib.my 240 RICH expressions 25 hpssl-acceleration-mib.my 241 RICH services 13...
Page 350 I N D E X HP Traffic Director Server Appliances User Guide packet and error count 119 SAP 24, 214, 215 packets adding servers 216 dup-syn interval 31 secure shell support 96, 134 ping 118, 237 setting 99 pipes 135 Secure Sockets Layer (see SSL) policy group commands 139, 163 security 253...
Page 351 I N D E X HP Traffic Director Server Appliances User Guide services 12, 72 SSL 261 deleting 76 acceleration 226, 228 HOT services 13 commands 142, 185 HOT TCP 72 config policygroup 142 RICH services 13, 32 config ssl 143 RICH_HTTP 72 monitor table 241 VIP 12...
Page 352 I N D E X HP Traffic Director Server Appliances User Guide topology screen elements 65 policy manager 67 troubleshooting 303 upgrade failover configuration 251 system software 248 VIP 73, 215, 238 adding 212, 219, 222 Web Service loopback interface 295, 296...

This manual is also suitable for:

Sa8200 Sa8220 Sa7200 Sa7220

HP P4522A - Traffic Management Server Sa8220 User Manual

Chapter 1: Introduction

Chapter 2: Theory of Operations

Chapter 3: Boot Monitor

Chapter 4: Graphical User Interface

Chapter 5: Command Line Interface

Chapter 6: Scenarios

Chapter 7: SNMP Support

Chapter 8: Software Updates

Appendix A: Security Configuration

Appendix B: SSL Configuration

Appendix C: Failover Method Dependencies

Appendix D: Configuring Out-Of-Path Return

Appendix E: Diagnostics and Troubleshooting

Appendix F: Cleaning the Dust Filter

Regulatory Information

Software License Agreements

Support Services

Glossary

Quick Links

Troubleshooting

Related Manuals for HP P4522A - Traffic Management Server Sa8220

Summary of Contents for HP P4522A - Traffic Management Server Sa8220