Reading...
Play button
Play button
Use LEFT and RIGHT arrow keys to navigate between flashcards;
Use UP and DOWN arrow keys to flip the card;
H to show hint;
A reads text to speech;
815 Cards in this Set
- Front
- Back
- 3rd side (hint)
|
What interface on the Steelhead is typically used for management, data store sync, and server-side out-of-path configurations?
|
Primary
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.19 |
|
|
What are the four main branches of optimization techniques that RiOS uses?
|
Data Streamlining
Transport Streamlining Application Streamlining Management Streamlining |
RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.7
|
|
|
What type of cable would you use to connect the Primary interface of a Steelhead to a switch?
|
Straight-through.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.19 |
|
|
What does SDR stand for?
|
Scalable Data Referencing
|
|
|
|
Can IP addresses be assigned to LAN/WAN interfaces?
|
No, the interfaces are purely L1/L2
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.19 |
|
|
What LAN and WAN interfaces are represented by logical in-path interface inpath1_0
|
LAN1_0 and WAN1_0
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.19 |
|
|
What does Riverbed call the unique integer label that represents a unique data chunk used in for SDR?
|
A reference.
|
|
|
|
When connecting the WAN and LAN interfaces to a router, host, or firewall, what type of cable should be used?
|
Crossover
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.20 |
|
|
What does the LZ in LZ compression stand for?
|
Lempel-Ziv
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.8"
|
|
|
What interface(s) need to be connected in order to use a virtual in-path deployment?
|
WAN interface and Primary interface.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.20 |
|
|
Does the data used for SDR survive a reboot?
|
Yes.
|
|
|
|
What happens to the LAN interface when the virtual in-path option is enabled on a Steelhead?
|
It shuts down automatically.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.20 |
|
|
How does the transaction prediction engine handle the danger of overlapping opens?
|
Transaction prediction is only used when exclusive access is granted to a file. When an oplock is not available, transaction prediction is not used, but scalable data referencing and compression is still used.
|
RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.9
|
|
|
What VLAN tagging protocols are supported by RiOS?
|
802.1q
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.21 |
|
|
What Transport Streamlining technology allows the Steelhead to cut down on the number of three-way handshakes required in order to transfer data across the WAN?
|
Connection Pooling
|
|
|
|
If you give an in-path interface an IP address on a VLAN, what command do you need to run in order to configure the in-path to tag its traffic with that VLAN ID?
|
# in-path interface <interface_name> vlan <vlan_id>
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.21 |
|
|
Is CIFS optimization enabled by default on a Steelhead appliance?
|
Yes.
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.9"
|
|
|
When deploying in-path Steelheads in series, what type of peering rules are necessary on the Steelheads?
|
Peering rules based on peer IP address that prevent the appliances from peering between eachother.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.21 |
|
|
What happens if the number of optimized connections exceeds the limit of your Steelhead model?
|
Connections in excess of the limit will pass through unoptomized
|
|
|
|
If using two physical in-path Steelheads in a serial cluster, which Steelhead is recommended to be master?
|
The LAN-side Steelhead, due to the amount of passthrough traffic from Steelhead to client or server.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.21 |
|
|
What protocol is a public/open variation of the SMB protocol developed by Microsoft?
|
CIFS
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.9"
|
|
|
Is WAN visibility for an optimized connection configured on the client-side or server-side Steelhead?
|
Client-side (where the connection is initiated)
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.22 |
|
|
What is the WAN Bandwidth Rating of a Steelhead appliance?
|
The limit on the rate at which the appliance will push optimized data towards the WAN
|
|
|
|
Does port transparency WAN visibility provide client/server IP or client port visibility?
|
No. It only provides server port visibility.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.21 |
|
|
What may happen if users in two separate locations attempt to obtain an oplock on a CIFS file at the same time?
|
If not all transactions on a file are performed by the same server-side Steelhead, users might receive errors when attempting to open a file.
|
RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.9
|
|
|
Does full transparency WAN visibility preserve VLAN tags?
|
Yes.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.21 |
|
|
Does pass-through traffic apply toward the WAN Bandwidth limit of a Steelhead appliance?
|
No. Only optimized data is counted against the WAN Bandwidth Rating of a Steelhead appliance.
|
|
|
|
What happens to optimized traffic between two Steelhead appliances if the OOB splice connection dies?
|
All optimized connections between the two Steelheads are terminated.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.22 |
|
|
In terms of overlapping opens, what should be done if not all transactions on a specific file are optimized by a Steelhead?
|
Disable overlapping opens optimizations where necessary.
|
RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.9
Steelhead Management Console User's Guide, -------------------------------------------------------------------------------- If a remote user opens a file that is optimized using the overlapping opens feature, and a second user opens the same file, they might receiving an error if the file fails to go through a v3.x or later Steelhead appliance or if it does not go through a Steelhead appliance. If this occurs, disable overlapping opens. |
|
|
What ports and IP addresses are used by default for the OOB splice connection between two Steelheads?
|
The two in-path IP addresses of the Steelheads, and destination port 7800.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.22 -------------------------------------------------------------------------------- By default, optimized traffic hits on an auto-discovery rule using correct addressing WAN transparency. When the first optimized connection between two Steelheads uses correct addressing, the OOB splice connection uses correct addressing as well. By default, this takes place over TCP port 7800. |
|
|
What happens when a Steelhead reaches its WAN Bandwith Rating limit?
|
It begins shaping optimized traffic to its limit. It does NOT start passing through traffic and will continue to optimize new connections.
|
|
|
|
To change the port used by the client-side Steelhead appliance when oobtransparency mode full is configured, what CLI command do you use?
|
in-path peering oobtransparency port <port#>
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.23 |
|
|
Is MAPI optimization enabled by default?
|
Yes.
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.10"
|
|
|
What CLI command will restore a Steelhead to the default setting for OOB transparency mode?
|
in-path peering oobtransparency mode none
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.22 |
|
|
What are the three main deployment modes for a Steelhead appliance?
|
Physical In-Path, Virtual In-Path, and Out-of-Path
|
|
|
|
What CLI command is used to configure a Steelhead to use its own IP address as a source, but the IP and port of the server as the destination of the OOB splice?
|
in-path peering oobtransparency mode destination
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.23 |
|
|
What CLI command is used to configure a Steelhead to use the IP of the client and a predetermined port as the source, and the IP and port of the server as the destination of the OOB splice connection?
|
in-path peering oobtransparency mode full
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.23 |
|
|
What is the difference between Original Auto-Discovery and Enhanced Auto-Discovery, in terms of which peer Steelhead along the connection path they will discover?
|
Original Auto-Discovery discovers the first remote Steelhead along the connection path, while Enhanced Auto-Discovery finds the last remote Steelhead along the connection path.
|
|
|
|
What happens if the device that a PBR router is redirecting to fails, and object tracking or CDP is not being used?
|
The PBR router continues to attempt to send traffic to that destination, and black-holes the traffic.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.23 |
|
|
If MAPI prepopulation is in use, and the client closes Outlook, then opens it and reconnects, is the client reconnected to the existing MAPI prepopulation session?
|
No. No one is ever reconnected to a MAPI prepopulation session.
|
RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.10
|
|
|
When using auto-discovery, what is the name of the TCP option that is placed in the TCP option field of the first SYN packet seen by the client-side Steelhead?
|
probe query
|
|
|
|
What command on a Cisco router will configure PBR to check that the next hop is available before attempting to redirect traffic to that next hop?
|
set ip next-hop verify-availability
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.24 |
|
|
"In simple terms, what does MAPI prepopulation do?"
|
"Keeps the connection open to the server after the client closes the session, and the Steelhead continues to act as if it is the mail client."
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.10"
|
|
|
What four message-types does WCCP use?
|
HERE_I_AM
I_SEE_YOU REDIRECT_ASSIGN REMOVAL_QUERY |
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.25 |
|
|
Do in-path rules apply on the client-side or the server-side Steelhead?
|
client-side
|
|
|
|
What two methods can a Steelhead use to communicate with WCCP routers?
|
Multicast UDP or Unicast UDP
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.25 |
|
|
What WCCP redirection scheme is possible only if the Steelhead appliance is connected to the WCCP router at Layer 2?
|
Layer 2
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.26 |
|
|
What version of NFS is supported for NFS latency optimization?
|
NFS v3
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.11"
|
|
|
Do peering rules apply on the client-side or the server-side Steelhead?
|
server-side
|
|
|
|
What asymmetry type does a "bad RST" entry in the asymmetric routing table indicate?
|
Complete Asymmetry
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.32 |
|
|
Are NFS optimization settings configured globally for all servers/volumes or for specific servers/volumes?
|
Can be configured either way.
|
RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.11
Riverbed Deployment Guide, Chapter 11 -------------------------------------------------------------------------------- You can configure NFS settings globally for all servers and volumes or you can configure NFS settings that are specific to particular servers or volumes. When you configure NFS settings for a server, the settings are applied to all volumes on that server unless you override settings for specific volumes. -------------------------------------------------------------------------------- |
|
|
What asymmetry type does a "bad SYN/ACK" entry in the asymmetric routing table indicate?
|
Server-side asymmetry
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.32 |
|
|
When a server-side Steelhead decides to optimize with a client-side Steelhead, what type of TCP option does it add to the SYN/ACK packet?
|
probe response
|
|
|
|
What asymmetry type does a "no SYN/ACK" entry in the asymmetric routing table indicate?
|
Client-side asymmetry
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.32 |
|
|
Is MS SQL optimization enabled by default?
|
No, but rules that can be used for MS Project Enterprise Edition optimization ship with the unit.
|
RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.11
|
|
|
What port does a connection forwarding neighbor use to notify other neighbors of a connection before sending a SYN+ packet?
|
7850
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.33 |
|
|
In a standard optimized TCP connection between client and server, how many TCP connections are actually used?
|
Three. One between the client and client-side Steelhead, one between the two Steelhead appliances, and one between the server-side Steelhead and the server.
|
|
|
|
On what port does data store synchronization run?
|
7744
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.34 |
|
|
In what format must MS SQL packets be sent in for the Steelhead to perform transaction optimization?
|
TDS (Tabular Data Stream)
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.11"
|
|
|
What series of commands would configure a data store master with a sync peer at x.x.x.x to use port 7777 and a reconnect timer of 45 seconds?
|
datastore sync peer-ip x.x.x.x
datastore sync port 7777 datastore sync reconnect 45 datastore sync master datastore sync enable |
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.34 |
|
|
Does Enhanced Auto-Discovery work in conjunction with older Steelheads running the Original Auto-Discovery protocol?
|
Yes.
|
|
|
|
What interfaces can carry traffic that originates at a Steelhead to some external non-Steelhead device?
|
Primary and AUX
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.34 |
|
|
Is Oracle Forms transaction optimization enabled by default?
|
Yes.
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.11"
|
|
|
What is the point of CIFS prepopulation?
|
To "warm" the Steelhead by allowing it to read data off of a "prepopulation share", to increase the level of optimization.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.34 |
|
|
How many in-path interfaces does a Steelhead appliance support, maximum?
|
Up to ten
|
|
|
|
What three methods are available for authentication of admin and monitor users on a Steelhead?
|
Local
RADIUS TACACS+ |
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.34 |
|
|
"If you wish to enable Oracle Forms optimization, what needs to be done?"
|
"Oracle Forms optimization is enabled by default, but you need an in-path rule set up to begin optimizing Oracle Forms instead of passing the traffic through."
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.11"
|
|
|
Where are all SSL server settings, certificates, and the peering private key held on the Steelhead?
|
In the secure vault.
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.35 |
|
|
When multiple in-path interfaces are used, how does a Steelhead choose which in-path interface is referred to as the "owner" interface of an optimized connection?
|
Determined by which in-path interfaces sees the client SYN packet
|
|
|
|
What is the TCP option attached to a client's SYN packet for auto-discovery, in hexadecimal?
|
0x4C
|
RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.14
|
|
|
What name must by resolvable via DNS in order for CMC auto-registration with the default hostname to function?
|
riverbedcmc
|
Riverbed Certified Solutions Professional (RCSP) Study Guide
Exam 199-01 for RiOS v5.0, p.37 |
|
|
What is the most common reason that auto-discovery fails?
|
An intermediate device strips out the TCP options from the packets
|
|
|
|
"What is the TCP option attached to a client's SYN packet for auto-discovery, in decimal?"
|
76
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.14"
|
|
|
If you cannot configure intermediate devices to avoid stripping TCP options between Steelheads, what is another option?
|
Use fixed-target rules instead of auto-discovery
|
|
|
|
How large is the option attached to the TCP header of the SYN packet by the client-side Steelhead?
|
10 bytes
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.14"
|
|
|
What are the five types of in-path rule actions?
|
Auto, Pass, Fixed-Target, Deny, Discard
|
|
|
|
How large is the option attached to the TCP header of the SYN/ACK packet by the server-side Steelhead?
|
14 bytes
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.14"
|
|
|
What does the “auto” in-path rule do?
|
Client-side Steelhead uses the auto-discovery process to determine if a remote Steelhead is able to optimize the connection
|
|
|
|
What does the “pass” in-path rule do?
|
Passes the SYN packet through the appliance without attempting optimization
|
|
|
|
How large is the default connection pool between auto-discovered Steelhead appliance peers?
|
20
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.15"
|
|
|
What does the “fixed-target” in-path rule do?
|
Skips the auto-discovery process and use a specified remote Steelhead appliance as an optimization peer
|
|
|
|
What is the main purpose of connection pooling?
|
To avoid the TCP handshake on the inner session between two Steelheads.
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.15"
|
|
|
What does the “deny” in-path rule do?
|
Drops the SYN packet and sends a message back to its source
|
|
|
|
What are the five types of in-path rules?
|
"Pass through, fixed-target, auto discover, discard, deny"
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.15-16"
|
|
|
What does the “discard” in-path rule do?
|
Drops the SYN packet silently
|
|
|
|
What physical port on the Steelhead should not be used for anything but management?
|
Auxiliary port
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.18"
|
|
|
What are the only two scenarios in which in-path rules are referenced?
|
When a SYN packet arrives on the LAN interface of a physical in-path deployment, or when a SYN packet arrives on the WAN interface of a virtual in-path deployment
|
|
|
|
Can the primary and AUX ports of a Steelhead share the same network subnet?
|
No.
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.17"
|
|
|
Do in-path rules have any effect on an established, unoptomized connection?
|
No -- in-path rules have no effect on connections that are already established
|
|
|
|
Can the primary and in-path interfaces share the same network subnet?
|
Yes.
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.17"
|
|
|
What are the three default in-path rules that ship with Steelhead appliances?
|
Pass-through rules for Encrypted traffic, Interactive traffic, and Riverbed protocols
|
|
|
|
In a server-side out-of-path deployment, what interface should be used?
|
Primary.
|
RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.17
|
|
|
What are the three types of peering rules?
|
Pass, accept, and auto
|
|
|
|
"If the Steelhead is deployed between two switches, what type of cables should be connected to the LAN and WAN ports of the in-path interface?"
|
Straight-through
|
"RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.18"
|
|
|
What does the “pass” peering rule do?
|
The receiving Steelhead appliance does not respond to the probing Steelhead appliance, and allows the SYN+ packet to continue through the network.
|
|
|
|
What does the “accept” peering rule do?
|
The receiving Steelhead appliance responds to the probing Steelhead appliance and becomes the remote-side Steelhead appliance for the optimized connection.
|
|
|
|
If a four-port bypass card is located in slot 0 of your appliance chassis, what are the physical and in-path interface names?
|
physical: lan0_0, wan0_0, lan0_1, wan0_1
in-path: inpath0_0, inpath0_1 |
RCSP Study Guide (Exam 199-01 for RiOS v5.0), p.18
|
|
|
What does the “auto” peering rule do?
|
If the receiving Steelhead is NOT using enhanced auto-discovery, this has the same effect as the accept peering rule action. If enhanced auto-discovery is enabled, the Steelhead appliance only becomes the optimization peer if it is the last Steelhead in the path to the server.
|
|
|
|
What are the advantages of using peering rules, rather than in-path rules, to prevent two Steelheads from optimizing traffic between eachother?
|
Using peering rules requires less initial configuration, and less on-going maintenance(If the subnets behind either of the Steelheads change)
|
|
|
|
If a packet does not apply to any configured peering rule, what rule is used?
|
The auto-peering rule.
|
|
|
|
What CLI command would create a peering rule at the end of the peering rulebase that would avoid optimizing traffic with another Steelhead at 1.1.1.1?
|
in-path peering rule pass peer 1.1.1.1 rulenum end
|
|
|
|
Does a fixed-target in-path rule require a target Steelhead appliance?
|
Yes.
|
|
|
|
What is the maximum number of target Steelheads that can be placed in a fixed-target in-path rule?
|
Two
|
|
|
|
When should a fixed-target in-path rule be used, and pointed toward a primary address instead of the in-path address of the server-side Steelhead?
|
When the remote (server-side) Steelhead is in out-of-path mode.
|
|
|
|
At what point does a backup Steelhead in a “Master and Backup In-Path Deployment” begin optimizing new connections?
|
When it cannot reach the master Steelhead or the master Steelhead has entered admission control.
|
|
|
|
In a “Master and Backup In-Path Deployment,” what happens to the connections being optimized on the backup Steelhead after the master Steelhead recovers?
|
The backup will continue to optimize connections that were made while the master was down. Until the optimized connections on the backup expire, the master and backup will both perform optimization, but all new connections will be directed to the master Steelhead.
|
|
|
|
Why is “Serial Cluster In-Path Deployment” supported only on higher-end Steelhead appliances?
|
Because the Steelhead closest to the LAN sees the combined LAN bandwidth of all of the Steelhead appliances in the series.
|
|
|
|
Does the OOB connection carry optimized data?
|
No
|
|
|
|
What happens during the 40-45 second delay before a client-side Steelhead registers that the master server-side Steelhead in an out-of-path deployment is unavailable?
|
Connections are passed through unoptimized.
|
|
|
|
In an out-of-path cluster deployment, how does the client-side Steelhead know when the master server-side Steelhead is available again?
|
While using the backup for optimization, the client-side Steelhead attempts to connect to the master server-side Steelhead every 30 seconds. If the connection succeeds, the client-side Steelhead uses the master Steelhead for any new connections. Existing connections remain optimized to the backup Steelhead for their duration.
|
|
|
|
What interface on the Steelhead transfers traffic for datastore synchronization?
|
Either the primary or auxiliary network interface.
|
|
|
|
What are the three main caveats for the master and backup Steelhead when doing Datastore Synchronization?
|
The master and backup must have the same hardware model, be running the same version of RiOS, and be connected via a fast, reliable LAN connection with minimal latency.
|
|
|
|
Does the master in the “Master and Backup Physical In-Path Deployment” need to be the datastore synchronization master?
|
No -- there is no requirement that the master in one role also be the master in the other.
|
|
|
|
Does Virtual Steelhead support fail-to-wire?
|
No.
|
|
|
|
By default, what happens if a Steelhead appliance loses connectivity to a connection forwarding neighbor?
|
It stops attempting to optimize new connections, but still optimizes existing optimized connections.
|
|
|
|
What CLI command can be used to ensure that a Steelhead continues to optimize new connections, regardless of the state of its neighbors?
|
in-path neighbor allow-failure
|
|
|
|
What deployment should be used whenever possible?
|
Physical in-path
|
|
|
|
What command should be used on Cisco switches to minimize the amount of time an interface stops forwarding traffic when the Steelhead transitions to failure mode?
|
spanning-tree portfast
|
|
|
|
What type of rules modify Steelhead appliance behavior when a connection is initiated?
|
in-path rules
|
|
|
|
What type of rules modify Steelhead appliance behavior when the appliance sees auto-discovery tagged packets?
|
peering rules
|
|
|
|
Is datastore synchronization traffic transferred via the in-path interface?
|
No, only via the Primary or Auxiliary interfaces.
|
|
|
|
What are the four options for WAN visibility modes in RiOS v6.0?
|
Correct Addressing, Port Transparency, Full Transparency, and Full Transparency with Reset
|
Riverbed Deployment Guide, p.57
|
|
|
What is “correct addressing” in terms of WAN visibility modes?
|
WAN-side connections use the Steelhead appliance IP address and Steelhead appliance server ports.
|
Riverbed Deployment Guide, p.57
|
|
|
What is “port transparency” in terms of WAN visibility modes?
|
WAN-side connections use Steelhead appliance IP addresses but use TCP server ports that mirror the LAN-side connection.
|
Riverbed Deployment Guide, p.57
|
|
|
What is “full transparency” in terms of WAN visibility modes?
|
WAN-side connections mirror all IP addresses and TCP ports used on the LAN-side connection
|
Riverbed Deployment Guide, p.57
|
|
|
What is “full transparency with reset” in terms of WAN visibility modes?
|
WAN-side connections mirror all IP addresses and TCP ports used on the LAN-side connection, plus adds an additional packet during auto-discovery to aid with integration of stateful network devices on the WAN.
|
Riverbed Deployment Guide, p.57
|
|
|
In correct addressing, what IP addresses and TCP ports will be seen on the Steelhead-to-Steelhead connection?
|
client-side Steelhead IP address and port, server-side Steelhead IP address and port
|
Riverbed Deployment Guide, p.58
|
|
|
What optimization feature works only if you are using correct addressing as your WAN visibility mode?
|
Connection pooling
|
Riverbed Deployment Guide, p.59
|
|
|
What three deployment configurations are not supported by transparent addressing WAN visibility modes?
|
Server-side out-of-path, fixed-target rules, connection pooling
|
Riverbed Deployment Guide, p.59
|
|
|
Is WAN transparency configured on the client or server-side Steelhead?
|
Client-side
|
Riverbed Deployment Guide, p.59
|
|
|
If both port transparency and full transparency are acceptable solutions, which configuration is preferable?
|
Port transparency
|
Riverbed Deployment Guide, p.59
|
|
|
Does port transparency provide server port visibility?
|
Yes
|
Riverbed Deployment Guide, p.60
|
|
|
Does port transparency provide client port visibility?
|
No
|
Riverbed Deployment Guide, p.60
|
|
|
Does port transparency provide client and server IP address visibility?
|
No
|
Riverbed Deployment Guide, p.60
|
|
|
In port transparency, what IP addresses and TCP ports will be seen on the Steelhead-to-Steelhead connection?
|
client-side Steelhead IP and source port, server-side Steelhead IP and destination port used for the client-to-server connection
|
Riverbed Deployment Guide, p.60
|
|
|
In full transparency WAN visibility mode, what IP addresses and TCP ports will be seen on the Steelhead-to-Steelhead connection?
|
client IP address and source port, server IP address and destination port
|
Riverbed Deployment Guide, p.61
|
|
|
In full transparency WAN visibility mode, what IP addresses and TCP ports will be seen on the server-side connection?
|
Client IP address and source port, server IP address and destination port
|
Riverbed Deployment Guide, p.62
|
|
|
What type of connection is established between Steelheads to exchange capabilities and feature information, and to detect failures?
|
Out-of-Band (OOB) connection
|
Riverbed Deployment Guide, p.63
|
|
|
Which Steelhead creates the OOB connection?
|
The Steelhead closest to the initiating side of the optimized connection
|
Riverbed Deployment Guide, p.63
|
|
|
In OOB Connection Destination Transparency, what IP address and TCP port are used for the source and destination of the OOB connection?
|
Client-side Steelhead IP and a random port number are used for the source. The server IP and port number from the first optimized connection are used for the destination.
|
Riverbed Deployment Guide, p.64
|
|
|
What CLI command is used to enable destination mode OOB transparency?
|
in-path peering oobtransparency mode destination
|
Riverbed Deployment Guide, p.64
|
|
|
In OOB connection full transparency, what IP address and TCP port are used for the source and destination of the OOB connection?
|
Client IP address and predetermined port number are used for the source. The server IP address and port number from the first optimized connection are used for the destination.
|
Riverbed Deployment Guide, p.65
------------------------ By default, source port 708 is used for the predetermined source port. |
|
|
What CLI command is used to enable full transparency for the OOB connection?
|
in-path peering oobtransparency mode full
|
Riverbed Deployment Guide, p.65
|
|
|
What CLI command is used to change the port of the full transparency OOB connection?
|
in-path peering oobtransparency port <port_number>
|
Riverbed Deployment Guide, p.65
|
|
|
What CLI command would you use to enable port transparency for a specific http server at 192.168.50.1?
|
in-path rule auto-discover wan-visibility port dstaddr 192.168.50.1/32 dstport 80
|
Riverbed Deployment Guide, p.68
|
|
|
What CLI command would you use to enable full address transparency (WAN visibility mode) globally?
|
in-path rule auto-discover wan-visibility full
|
Riverbed Deployment Guide, p.68
|
|
|
What CLI command would you use to enable full address transparency for a server at 192.168.1.1?
|
in-path rule auto-discover wan-visibility full dstaddr 192.168.1.1/32
|
Riverbed Deployment Guide, p.68
|
|
|
What issues are presented by stateful firewalls in terms of protocol inspections when using full transparency?
|
Stateful firewalls expect to see data in the packets that corresponds to the protocol type, but Steelheads use their own proprietary application protocols. When using transparency, the Steelheads use this protocol over ports that the stateful firewall may expect to see a different protocol on.
|
Riverbed Deployment Guide, p.69
|
|
|
What issues are presented by stateful firewalls in terms of sequence verification when using full transparency?
|
There will be a difference in sequence numbers between the auto-discovery phase and the data transmission phase between the Steelheads, and stateful firewalls may block this communication. Full Transparency with Forward Reset may alleviate this issue.
|
Riverbed Deployment Guide, p.69
|
|
|
What CLI command would you use to enable full address transparency for all servers in the 192.168.0.0/24 network?
|
in-path rule auto-discover wan-visibility full dstaddr 192.168.0.0/24
|
Riverbed Deployment Guide, p.68
|
|
|
What system of QoS is the Riverbed QoS system based on?
|
A patented version of Hierarchical Fair Service Curves (HFSC)
|
"Riverbed Deployment Guide, p.84"
|
|
|
Can Riverbed QoS be applied to pass-through traffic?
|
Yes.
|
"Riverbed Deployment Guide, p.84"
|
|
|
What options do you have to use QoS if QoS is performed on traffic after it passes through the Steelhead and is based only on TCP ports?
|
Port transparency or Full Transparency WAN visibility modes.
|
Riverbed Deployment Guide, p.86
|
|
|
What options do you have to use QoS if QoS is performed on traffic after it passes through the Steelhead and is based on IP addresses?
|
Full address transparency WAN visibility mode.
|
"Riverbed Deployment Guide, p.86"
|
|
|
What changes are necessary on the Steelhead of DSCP/ToS values are added to traffic before the traffic reaches the Steelhead, and enforced after leaving the Steelhead?
|
None. By default, the Steelhead reflects the DSCP/ToS values from the LAN-side to the WAN-side of optimized connections, and does not change the DSCP/ToS values of pass-through connections.
|
Riverbed Deployment Guide, p.87
|
|
|
Can the Steelhead mark or re-mark a packet with a different DSCP or ToS value as it enters the Steelhead?
|
Yes.
|
"Riverbed Deployment Guide, p.87"
|
|
|
Why does Riverbed recommend maintaining a QoS policy on the WAN router even when the Riverbed is enforcing QoS policy?
|
So that if the Riverbed fails, QoS policy will still be enforced.
|
Riverbed Deployment Guide, p.87
|
|
|
What is AFE?
|
AppFlow Engine
|
"Riverbed Deployment Guide, p.89"
|
|
|
What is the main difference between AFE and port-based QoS solutions?
|
AppFlow Engine identifies and differentiates applications based on the content of the packets, not on the port those packets are using.
|
Riverbed Deployment Guide, p.89
|
|
|
Can AFE be used on pass-through traffic?
|
Yes.
|
Riverbed Deployment Guide, p.89
|
|
|
"Is AFE available in basic QoS mode, Advanced QoS mode, or both?"
|
Both.
|
"Riverbed Deployment Guide, p.89"
|
|
|
Can you add to or remove from the six predefined SFQ classes when using Basic mode QoS?
|
No.
|
"Riverbed Deployment Guide, p.91"
|
|
|
Can MX-TCP QoS be used in Basic Mode QoS?
|
No -- MX-TCP requres the mxtcp queue and thus requires Advanced Mode QoS
|
Riverbed Deployment Guide, Chapter 3
-------------------------------------------------------------------------------- Basic QoS does not support anything other than SFQ queue-type. MX-TCP requires mxtcp queue, and Application proxy for Citrix ICA traffic requires packet-order queue. |
|
|
Can Basic Mode QoS use Citrix ICA application priority?
|
No -- Application priority requires the packet-order queue and thus requires Advanced Mode QoS.
|
"Riverbed Deployment Guide, p.91"
|
|
|
Is WAN Oversubscription available in Basic Mode QoS?
|
Yes -- WAN Oversubscription is ONLY available in Basic QoS
|
Riverbed Deployment Guide, p.92
----- WAN oversubscription is used if your network has multiple sites that collectively exceed the WAN bandwidth of the data center. For example, if you have a 45Mbps uplink at the data center and three 20Mbps remote offices. Without WAN oversubscription, the QoS configuration requires the sum of all uplink bandwidths to the remote sites to be less than or equal to the uplink bandwidth at the data center. |
|
|
When using WAN Oversubscription, how do you manually adjust the scale factor?
|
Scale factor is calculated automatically based on WAN link bandwidth and remote link bandwidth -- it cannot be manually adjusted.
|
Riverbed Deployment Guide, p.93
|
|
|
Which QoS mode contains all of the QoS features from pre-RiOS 6.5?
|
Advanced Mode QoS
|
"Riverbed Deployment Guide, p.93"
|
|
|
What two QoS classes are always present on the Steelhead appliance?
|
Root Class and Built-in Default Class
|
"Riverbed Deployment Guide, p.93"
|
|
|
Can the Built-in Default QoS Class be deleted?
|
No.
|
"Riverbed Deployment Guide, p.93"
|
|
|
How is the Root QoS class configured?
|
It is not configured directly. It is created by default when QoS classification and enforcement is enabled on the Steelhead.
|
Riverbed Deployment Guide, p.93
|
|
|
How low can the Built-in Default QoS class' bandwidth be adjusted?
|
0.01%
|
"Riverbed Deployment Guide, p.93"
|
|
|
What is the default bandwidth of the Built-in Default Class for QoS?
|
10%
|
"Riverbed Deployment Guide, p.93"
|
|
|
In what two modes are QoS classes configured?
|
flat mode and hierarchical mode
|
"Riverbed Deployment Guide, p.93"
|
|
|
"In terms of hierarchical-mode QoS classes, what are sibling classes?"
|
Classes that share the same parent class
|
"Riverbed Deployment Guide, p.94"
|
|
|
"In terms of hierarchical-mode QoS classes, what are leaf classes?"
|
Classes at the bottom of the class hierarchy.
|
"Riverbed Deployment Guide, p.94"
|
|
|
In terms of hierarchical-mode QoS classes, what are inner classes?
|
Classes that are neither the root class, nor leaf classes.
|
Riverbed Deployment Guide, p.94
|
|
|
What is the maximum amount of minimum bandwidth that can be assigned to children of the root class?
|
"99.99%, because the Built-in Default Class can only be lowered to 0.01%"
|
"Riverbed Deployment Guide, p.93"
|
|
|
"In hierarchical-mode QoS, can inner classes be specified as targets for traffic?"
|
No -- only leaf classes can be specified as targets for traffic.
|
"Riverbed Deployment Guide, p.94"
|
|
|
In flat-mode QoS, what is the parent class for each defined QoS class?
|
The root class
|
Riverbed Deployment Guide, p.96
|
|
|
Can QoS configuration be done on the fly?
|
No -- Riverbed recommends configuring QoS while QoS functionality is disabled, and only enabling it after you are ready for the changes to take effect.
|
Riverbed Deployment Guide, p.96
|
|
|
In hierarchical mode, how is excess bandwidth over the assigned minimum bandwidth allocated?
|
Based on the relative ratios of assigned guaranteed bandwidth.
|
Riverbed Deployment Guide, p.97
|
|
|
Does Link Share Weight apply to flat QoS, hierarchical QoS, or both?
|
Flat QoS only.
|
Riverbed Deployment Guide, p.97
|
|
|
In Flat-mode QoS, how is excess bandwidth over the assigned minimum bandwidth assigned?
|
Based on the link-share weight of the active QoS classes.
|
Riverbed Deployment Guide, p.97
|
|
|
How is the default Link Share Weight for a QoS class determined?
|
By default, all link share weights are equal.
|
Riverbed Deployment Guide, p.97
|
|
|
What is UBW?
|
Upper Bandwidth
|
Riverbed Deployment Guide, p.97
--------------------- UBW is a QoS class parameter that indicates the maximum allowed bandwidth that a QoS class receives, as a percentage of the parent class guaranteed bandwidth. The UBW limit is applied even if excess bandwidth is available, and must be greater than or equal to the minimum bandwidth guarantee for the class. The smallest value you can assign is 0.01% |
|
|
If excess bandwidth is available, how is it assigned to QoS classes with a specified UBW (which is already being met)?
|
"If a QoS class has an Upper Bandwidth (UBW), the upper bandwidth limit is applied even when there is excess bandwidth available."
|
"Riverbed Deployment Guide, p.97"
|
|
|
What is the smallest value that can be assigned to the UBW for a QoS class?
|
0.01% -- And the amount must be greater than or equal to the minimum bandwidth guarantee for the class.
|
"Riverbed Deployment Guide, p.97"
|
|
|
In terms of QoS classes, what is the purpose of the connection limit?
|
Connection limit is the maximum number of simultaneous optimized connections for the QoS class. When the limit is reached, all new connections are passed through unoptimized.
|
Riverbed Deployment Guide, p.97
|
|
|
In hierarchical mode, how does the connection limit of a parent class affect the number of allowed connections for its child class?
|
It does not. Each child-class connection is limited by the specific limit of that child class.
|
Riverbed Deployment Guide, p.97
|
|
|
Does RiOS support assigning connection limits to QoS classes associated with a QoS rule using AFE?
|
No. The AFE component uses Layer-7 protocol specification, and RiOS cannot honor the class connection limit because the QoS scheduler might subsequently re-classify the traffic flow after applying a more precise match using AFE.
|
Riverbed Deployment Guide, p.97
|
|
|
Does the latency priority of a class affect bandwidth allocation for that class?
|
No -- latency priority describes only the delay sensitivity of a class, not how much bandwidth it is allocated.
|
Riverbed Deployment Guide, p.98
|
|
|
What does SFQ stand for?
|
Stochastic Fairness Queuing
|
"Riverbed Deployment Guide, p.98"
|
|
|
"When using SFQ, what happens when the number of packets in a QoS class outbound queue exceeds the configured queue length?"
|
"Packets are dropped from the queue in round-robin fashion, between the present traffic flows."
|
"Riverbed Deployment Guide, p.98"
|
|
|
What is the default QoS queue type?
|
Stochastic Fairness Queuing (SFQ)
|
"Riverbed Deployment Guide, p.98"
|
|
|
What QoS queue type drops all packets received after the queue length limit is reached?
|
First-in First-out (FIFO)
|
"Riverbed Deployment Guide, p.98"
|
|
|
What QoS queue type should be used with Citrix QoS classes for best performance?
|
Packet order.
|
"Riverbed Deployment Guide, p.98"
|
|
|
Is MX-TCP compatible with AFE?
|
No.
|
"Riverbed Deployment Guide, p.99"
|
|
|
When MX-TCP is configured as the queue parameter for a QoS class, how is link-share weight calculated for that class?
|
The link share weight parameter has no effect on a QoS class configured with MX-TCP.
|
Riverbed Deployment Guide, p.99
|
|
|
"When MX-TCP is configured as the queue parameter for a QoS class, what effect does it have on the UBW for that QoS class?"
|
The upper bandwidth limit has no effect on a QoS class configured with MX-TCP.
|
"Riverbed Deployment Guide, p.99"
|
|
|
"When using hierarchical QoS, can you associate QoS rules with inner classes?"
|
No.
|
"Riverbed Deployment Guide, p.100"
|
|
|
Can you delete the default QoS rule?
|
No. The default QoS rule always exists at the end of the QoS rule list and cannot be deleted.
|
"Riverbed Deployment Guide, p.100"
|
|
|
What QoS class does the default QoS rule assign traffic to?
|
The built-in default QoS class.
|
"Riverbed Deployment Guide, p.100"
|
|
|
"In virtual in-path and out-of-path deployments, what mode should you use for QoS class definitions?"
|
hierarchical
|
"Riverbed Deployment Guide, p.101"
|
|
|
"In virtual in-path and out-of-path deployments, how should you determine the throughput for the connected interface?"
|
"WAN throughput should be set to the total speed of the LAN and WAN interfaces, or to the speed of the local link, whichever number is lower."
|
"Riverbed Deployment Guide, p.101"
|
|
|
What two top-level classes should be created in your hierarchical QoS class definitions when using virtual in-path or server-side out-of-path deployments?
|
A LAN class to classify LAN traffic and a WAN class to classify WAN traffic.
|
"Riverbed Deployment Guide, p.101"
|
|
|
When using an out-of-path deployment and specifying a top-level LAN QoS class, what should you use for the UBW of the class?
|
The LAN link rate.
|
Riverbed Deployment Guide, p.101
|
|
|
In a multi-Steelhead deployment which load balances traffic evenly across two Steelhead appliances, how should you configure the maximum WAN bandwidth on each Steelhead appliance for QoS?
|
Each Steelhead's WAN bandwidth should be one half of the total available WAN bandwidth
|
Riverbed Deployment Guide, p.107
|
|
|
In what version of RiOS was Citrix QoS implemented?
|
RiOS 6.0
|
"Riverbed Deployment Guide, p.108"
|
|
|
What QoS mode should be used in Citrix environments with mixed-mode (interactive and print) traffic?
|
Advanced QoS
|
"Riverbed Deployment Guide, p.108"
|
|
|
How many QoS classes should be created when performing Citrix traffic classification?
|
One class for each Citrix traffic type you want to differentiate, and one default class to catch any Citrix traffic that cannot be classified.
|
Riverbed Deployment Guide, p.108
|
|
|
"In terms of queue-types, what is the main reason for creating a Citrix default QoS class?"
|
"So that you can specify that the Citrix default QoS class uses packet-order queue, since the normal default traffic class uses SFQ instead."
|
"Riverbed Deployment Guide, p.108"
|
|
|
"If you are using purely interactive Citrix traffic, what QoS mode can you use?"
|
Basic Mode -- in mixed-mode Citrix traffic Advanced QoS mode should be used.
|
"Riverbed Deployment Guide, p.109"
|
|
|
In a simple mixed traffic Citrix environment, how many QoS classes should you have?
|
Three: One for interactive traffic, one for non-interactive traffic, and one default class for other Citrix traffic.
|
Riverbed Deployment Guide, p.109
|
|
|
With active FTP, does the client or server determine which port is used for the data connection?
|
The client.
|
Riverbed Deployment Guide, p.114
|
|
|
What source port number is normally used for a data connection in an active FTP data channel?
|
20
|
"Riverbed Deployment Guide, p.114"
|
|
|
"To classify active FTP for QoS, what type of rules should be used to match to a class on the client and server-side Steelheads?"
|
"On the server-side steelhead, QoS rule should match on source port 20. On the client-side Steelhead, rule should match on destination port 20."
|
"Riverbed Deployment Guide, p.114"
|
|
|
"In active FTP, what command does the client send to the server to tell it which port to connect to?"
|
PORT
|
"Riverbed Deployment Guide, p.114"
|
|
|
"In passive FTP, what command does the client send to the server to request passive mode?"
|
PASV
|
"Riverbed Deployment Guide, p.114"
|
|
|
Can you convert QoS policy on a Steelhead from Basic to Advanced QoS?
|
Yes.
|
"Riverbed Deployment Guide, p.122"
|
|
|
Can you convert QoS policy on a Steelhead from Advanced to Basic?
|
No.
|
"Riverbed Deployment Guide, p.122"
|
|
|
What are the six QoS class latency priorities?
|
Real-Time
Interactive Business Critical Normal Priority Low Priority Best Effort |
Riverbed Deployment Guide, March 2011, p.97-98
|
|
|
"In what type of deployment does a Steelhead appliance LAN interface connect to a LAN-side switch, while the WAN-side interface connects to a WAN connecting router?"
|
Physical In-Path
|
"Riverbed Deployment Guide, p.125"
|
|
|
What is the name of the interface consisting of a pair of ports used for in-path deployments?
|
Logical In-Path Interface
|
"Riverbed Deployment Guide, p.126"
|
|
|
Does a logical in-path interface have an IP address?
|
Yes.
|
"Riverbed Deployment Guide, p.126"
|
|
|
What type of interface acts as an independent, two-port bridge with its own IP address?
|
Logical In-Path Interface
|
Riverbed Deployment Guide, p.126
|
|
|
In the simplest physical in-path deployment, how many IP addresses does the Steelhead have?
|
Two: the primary interface IP is used for system management, and the in-path interface is used for optimized data transmission.
|
Riverbed Deployment Guide, p.126
|
|
|
Are Ethernet bypass cards copper or fiber-based Ethernet NICs?
|
They can be either.
|
"Riverbed Deployment Guide, p.126"
|
|
|
Which Steelhead models and in-path NICs support fail-to-wire mode?
|
All of them.
|
"Riverbed Deployment Guide, p.127"
|
|
|
Do all in-path NICs support fail-to-block mode?
|
No, only certain models support fail-to-block mode.
|
Riverbed Deployment Guide, p.127
|
|
|
By default, what notification occurs when a Steelhead appliance transitions to fail-to-wire or fail-to-block mode?
|
The Intercept/Bypass status light becomes active, and Critical appears in the Management Console status bar.
|
Riverbed Deployment Guide, p.127
|
|
|
When a Steelhead goes into fail-to-wire mode, what type of cable does the in-path interface essentially convert to?
|
Crossover cable.
|
Riverbed Deployment Guide, p.127
|
|
|
"Do Steelhead appliances use fail-to-wire or fail-to-block on in-path interfaces, by default?"
|
Fail-to-wire
|
"Riverbed Deployment Guide, p.127"
|
|
|
"When a Steelhead transitions to fail-to-wire mode, do connected devices notice an outage on the link?"
|
Yes -- connected devices momentarily see their links to the Steelhead go down.
|
"Riverbed Deployment Guide, p.127"
|
|
|
"When a Steelhead transitions from fail-to-wire mode back to normal operation, do connected devices notice an outage on the link?"
|
Yes -- connected devices will notice another link state transition.
|
"Riverbed Deployment Guide, p.127"
|
|
|
When a Steelhead transitions from fail-to-wire mode back to normal operation, are established connections optimized?
|
No -- only new connections will be optimized after the transition back to normal operation.
|
Riverbed Deployment Guide, p.127
|
|
|
What Steelhead feature can be used to force all pre-existing connections to be optimized?
|
Kickoff.
|
"Riverbed Deployment Guide, p.128"
|
|
|
"In terms of TCP connectivity, what does the kickoff feature do?"
|
"Resets all active connections, causing them to re-establish and allow the Steelhead to optimize the connections."
|
"Riverbed Deployment Guide, p.128"
|
|
|
"On a Cisco switch, what command can be used to lessen the amount of time that an interface is down after a transition to fail-to-wire mode?"
|
spanning-tree portfast
|
"Riverbed Deployment Guide, p.128"
|
|
|
Do desktop Steelhead models support fail-to-block mode?
|
No.
|
"Riverbed Deployment Guide, p.128"
|
|
|
What command would be used to switch interface inpath0_0 into fail-to-block mode?
|
no interface inpath0_0 fail-to-bypass enable
|
"Riverbed Deployment Guide, p.128"
|
|
|
What command would be used to switch interface inpath0_0 into fail-to-wire mode?
|
interface inpath0_0 fail-to-bypass enable
|
"Riverbed Deployment Guide, p.129"
|
|
|
What command is used to determine if interface inpath0_0 is in fail-to-block or fail-to-wire mode?
|
show interface inpath0_0
|
"Riverbed Deployment Guide, p.129"
|
|
|
Does an in-path interface require an IP address?
|
Yes.
|
"Riverbed Deployment Guide, p.129"
|
|
|
If using correct addressing or port transparency, does the Steelheads in-path IP address need to be reachable by the remote Steelhead?
|
Yes.
|
Riverbed Deployment Guide, p.129
-------------------------------------------------------------------------------- When using correct addressing, or port transparency, the destination IP of the Steelhead-to-Steelhead connection is the in-path IP of the Steelhead. With full transparency, the destination IP of the Steelhead-to-Steelhead connection is the IP address of the server. |
|
|
Can link-state propagation be used on only some of the interfaces of a Steelhead appliance?
|
No. Link state propagation is supported on either all or none of the interfaces of a Steelhead.
|
"Riverbed Deployment Guide, p.130"
|
|
|
"If link-state propagation is enabled, what happens if the WAN-side interface of inpath_0_0 loses link?"
|
The LAN-side link of interface inpath0_0 is disabled.
|
"Riverbed Deployment Guide, p.130"
|
|
|
Does Virtual Steelhead support LSP?
|
No.
|
"Riverbed Deployment Guide, p.130"
|
|
|
What is LSP?
|
Link State Propagation
|
"Riverbed Deployment Guide, p.130"
|
|
|
In RiOS v6.0 is LSP on or off by default?
|
On.
|
"Riverbed Deployment Guide, p.130"
|
|
|
What command is used to enable link state propagation?
|
in-path lsp enable
|
"Riverbed Deployment Guide, p.131"
|
|
|
Does Riverbed recommend relying on auto-sensing the cable type attached to its interfaces?
|
No. The installation might work when the Steelhead is optimizing, but fail if the Steelhead goes to fail-to-wire mode.
|
Riverbed Deployment Guide, p.131
|
|
|
What type of cable is used to connect a Steelhead appliance to another Steelhead appliance?
|
Crossover cable.
|
"Riverbed Deployment Guide, p.131"
|
|
|
What type of cable is used to connect a Steelhead to a router?
|
Crossover cable.
|
"Riverbed Deployment Guide, p.131"
|
|
|
What type of cable is used to connect a Steelhead to a switch?
|
Straight-through cable.
|
"Riverbed Deployment Guide, p.131"
|
|
|
What type of cable is used to connect a Steelhead to a host?
|
Crossover cable.
|
"Riverbed Deployment Guide, p.131"
|
|
|
"If all interfaces in the in-path chain are capable of 1Gbps or higher speeds, what setting does Riverbed recommend for speed/duplex?"
|
Auto-negotiate
|
"Riverbed Deployment Guide, p.132"
|
|
|
If one or more of the ports in the in-path chain are not capable of 1Gbps, what setting does Riverbed recommend for speed/duplex?
|
Manually set 100Mbps/full duplex on all interfaces of the in-path chain.
|
Riverbed Deployment Guide, p.132
-------------------------------------------------------------------------------- If all interfaces in the in-path chain are capable of 1Gbps or higher speeds, auto-negotiation is recommended. If one or more ports in the in-path chain are not capable of 1Gbps, it is recommended to set 100/full manually. |
|
|
When does Riverbed recommend using half-duplex?
|
Never.
|
"Riverbed Deployment Guide, p.132"
|
|
|
"What is a major cause of positive values in the discards, errors, overruns, frame, carrier counts, and collision interface counters?"
|
Duplex misconfiguration on the in-path interfaces
|
"Riverbed Deployment Guide, p.132-133"
|
|
|
What command is used to set the in-path gateway of in-path interface inpath0_0 to 10.0.0.1?
|
ip in-path-gateway inpath0_0 10.0.0.1
|
"Riverbed Deployment Guide, p.135"
|
|
|
What command is used to set the default gateway for the primary port to 10.0.0.1?
|
ip default-gateway 10.0.0.1
|
"Riverbed Deployment Guide, p.135"
|
|
|
"When static routes are combined with simplified routing, which routes take precedence?"
|
The simplified routes.
|
"Riverbed Deployment Guide, p.136"
|
|
|
What CLI command can be used to have static routes take precedence over routes learned via simplified routing?
|
in-path simplified mac-def-gw-only
|
"Riverbed Deployment Guide, p.136"
|
|
|
"In terms of high availability, what is ""admission control""?"
|
"Admission control means the Steelhead appliance has stopped optimizing new connections, due to hitting its connection limit or due to some abnormal condition."
|
"Riverbed Deployment Guide, p.137"
|
|
|
"In in-path redundancy, what happens when the backup Steelhead cannot reach the master?"
|
The backup begins optimizing new connections until the master recovers.
|
"Riverbed Deployment Guide, p.137"
|
|
|
In in-path redundancy, what happens when the master Steelhead recovers from admission control?
|
The master begins optimizing new connections, but connections optimized by the backup continue to be optimized by the backup.
|
Riverbed Deployment Guide, p.137
|
|
|
"In in-path redundancy, what interface is used by default for Steelhead-to-Steelhead communication?"
|
"inpath0_0, or the lowest numbered active in-path interface."
|
"Riverbed Deployment Guide, p.137"
|
|
|
"In in-path redundancy with multiple in-path interfaces, what happens when the lowest active in-path interface fails on the master Steelhead?"
|
"The backup does not attempt to use another interface to contact the master. It assumes that the master is down or in admission control, and begins optimizing connections."
|
"Riverbed Deployment Guide, p.137"
|
|
|
"When configuring failover, what IP address should you configure for the buddy address?"
|
The inpath0_0 interface address
|
"Riverbed Deployment Guide, p.138"
|
|
|
When configuring datastore sync, what IP address should you configure for the peer IP?
|
The Primary or Aux interface address.
|
Riverbed Deployment Guide, p.138
|
|
|
What feature should you use if you have multiple paths to the WAN but use multiple Steelheads to cover these paths?
|
Connection forwarding
|
"Riverbed Deployment Guide, p.142"
|
|
|
Does connection forwarding provide any redundancy?
|
No, connection forwarding is used to make sure packets are processed by the correct Steelhead in a parallel deployment, not to provide redundancy.
|
Riverbed Deployment Guide, p.147
|
|
|
"By default, what happens when one Steelhead in a connection forwarding pair fails?"
|
The neighbor Steelhead stops optimizing new connections until the other Steelhead recovers.
|
"Riverbed Deployment Guide, p.147"
|
|
|
"When configuring connection forwarding, what IP address of the neighbor Steelhead do you use?"
|
The in-path IP address.
|
"Riverbed Deployment Guide, p.148"
|
|
|
What command can be used in connection forwarding to ensure that if a connection forwarding neighbor fails, the remaining Steelhead continues to optimize traffic?
|
in-path neighbor allow-failure
|
Riverbed Deployment Guide, p.149
|
|
|
What type of VLAN tagging does the Steelhead support?
|
802.1Q
|
"Riverbed Deployment Guide, p.153"
|
|
|
Can Steelheads configured as connection forwarding neighbors be deployed on 802.1Q trunk links?
|
Yes.
|
"Riverbed Deployment Guide, p.153"
|
|
|
"If a Steelhead's in-path interface is on a VLAN trunk, and the subnet that the in-path interface IP uses would normally be tagged on that trunk, what is true of the configuration for that in-path interface?"
|
The in-path interface should be configured with the VLAN for that subnet.
|
"Riverbed Deployment Guide, p.153"
|
|
|
What commands are necessary to configure a master Steelhead for in-path redundancy when the in-path interface of the backup is 10.0.1.5?
|
failover buddy addr 10.0.1.5
failover master failover enable |
Riverbed Deployment Guide, March 2011, p.138
|
|
|
What three commands are necessary to configure a datastore master with a peer whose Primary interface IP is 10.0.1.4?
|
datastore sync master
datastore sync peer-ip 10.0.1.4 datastore sync enable |
Riverbed Deployment Guide, March 2011, p.138
|
|
|
What CLI commands are necessary to configure connection forwarding with another Steelhead, called SteelheadB at 10.0.2.3?
|
in-path neighbor enable
in-path neighbor name SteelheadB main-ip 10.0.2.3 |
Riverbed Deployment Guide, March 2011, p.148
|
|
|
What two CLI commands are necessary in order to make sure optimized connections on a VLAN are delivered using the correct VLAN tag?
|
vlan-conn-based
mac-match-vlan |
Riverbed Deployment Guide, p.153
|
|
|
In what type of deployment is a packet redirection mechanism used to direct packets to a Steelhead that is not in the physical path between the client and server?
|
Virtual In-Path
|
"Riverbed Deployment Guide, p.165"
|
|
|
"When using a Layer-4 virtual in-path deployment, how many interfaces of the Steelhead need to be connected to the Layer-4 switch, and what interface is used?"
|
"One, the WAN interface"
|
"Riverbed Deployment Guide, p.166"
|
|
|
"In a virtual in-path deployment, is the LAN interface used?"
|
No.
|
"Riverbed Deployment Guide, p.168"
|
|
|
In relation to flow data exports, what is the main problem with data from a virtual in-path deployment?
|
Because the WAN interface is used for all traffic, it makes it impossible for an administrator to use the interface index to distinguish LAN-to-WAN traffic from WAN-to-LAN traffic.
|
Riverbed Deployment Guide, p.168
------------------- The "fake index" feature can be used to work around this issue, and insert the correct interface index before exporting data to a flow collector. The fake index feature works only for optimized traffic. |
|
|
What Steelhead appliance feature allows an administrator to use the interface index to determine traffic direction on flow data exports from a virtual in-path device?
|
The fake index feature.
|
Riverbed Deployment Guide, p.168
|
|
|
Does the fake index feature work for unoptimized traffic?
|
No. The fake index feature works only for optimized traffic -- not unoptimized or pass-through traffic.
|
"Riverbed Deployment Guide, p.168"
|
|
|
Can the fake index feature be configured via the GUI?
|
No. The fake index feature may only be configured via the CLI.
|
Riverbed Deployment Guide, p.168
----- Using "ip flow-export" commands. |
|
|
What is Riverbed's clustering solution called?
|
Interceptor
|
"Riverbed Deployment Guide, p.169"
|
|
|
Does Interceptor support both fail-to-block and fail-to-wire mode?
|
Yes.
|
"Riverbed Deployment Guide, p.170"
|
|
|
How much total system throughput does the Interceptor IC9350 support?
|
12Gbps
|
"Riverbed Deployment Guide, p.170"
|
|
|
Using an Interceptor IC9350, how many Steelheads can be clustered together?
|
25
|
Riverbed Deployment Guide, p.170
|
|
|
"Using an Interceptor IC9350, how many connections can be handled(redirected) simultaneously?"
|
1 million
|
"Riverbed Deployment Guide, p.170"
|
|
|
What major advantage does an Interceptor have over using WCCP, PBR, or L4 redirection when it comes to pass-through traffic?
|
The Steelhead can notify the Interceptor if future packets for a flow should be redirected or not, saving overhead on pass-through traffic that would otherwise be redirected.
|
Riverbed Deployment Guide, p.171
-------------------------------------------------------------------------------- In Interceptor deployments, Interceptors redirect the few packets at the beginning of a connection so that the Steelhead can perform auto-discovery. The Steelhead signals the Interceptor if future packets for the flow must be redirected. This per-flow mechanism saves the overhead of pass-through traffic being redirected, and saves you the effort of manually mimicking the auto-discovery process through the ongoing maintenance of access-lists. |
|
|
"When using WCCP, what happens when a Steelhead fails that causes a larger burden to be placed on the connection forwarding feature of the existing Steelheads?"
|
"When one of the Steelheads fails, the buckets that WCCP uses to partition the traffic among the remaining Steelheads are recomputed and changed. This means that WCCP will no longer keep traffic flows sticky to their original Steelheads. Connection forwarding is forced to perform this function instead."
|
"Riverbed Deployment Guide, p.171"
|
|
|
How long does it take for a failure to be detected in both a WCCP and an Interceptor deployment?
|
"WCCP takes 30 seconds, Interceptor takes 3 seconds."
|
"Riverbed Deployment Guide, p.171"
|
|
|
What does the 'in-path neighbor multi-interface enable' command do?
|
Allows a newer connection forwarding protocol to be used. Recommended on all new deployments.
|
"Riverbed Deployment Guide, p.174"
|
|
|
"By default, what TCP port is used for connection forwarding?"
|
7850
|
"Riverbed Deployment Guide, p.173"
|
|
|
When using an Interceptor appliance, what happens with traffic that is not being optimized?
|
It is treated as pass-through on the Interceptor, and not redirected to the Steelhead.
|
Riverbed Deployment Guide, p.174
|
|
|
What two methods does an Interceptor use to redirect packets?
|
GRE encapsulation during auto discovery, TCP/IP destination field changes during data transmission.
|
Riverbed Deployment Guide, p.174
|
|
|
How does an Interceptor transfer TCP SYN and SYN/ACK packets to the Steelhead?
|
Using GRE encapsulation, or TCP/IP rewrites.
|
Riverbed Deployment Guide, p.174
|
|
|
When full transparency optimized WAN traffic arrives on an Interceptor's WAN link, how does the Interceptor recognize the traffic?
|
There is an embedded full transparency option in the packet's TCP option list.
|
Riverbed Deployment Guide, p.175
|
|
|
"If a Steelhead that an Interceptor is redirecting to fails, how long does the Interceptor continue to redirect packets to that Steelhead?"
|
Three seconds.
|
"Riverbed Deployment Guide, p.176"
|
|
|
"What command can be used to verify that a Steelhead and Interceptor have the correct connection forwarding information, before beginning to redirect and optimize traffic?"
|
debug validate deployment
|
"Riverbed Deployment Guide, p.176"
|
|
|
How many in-path interfaces can an IC9350 Interceptor have?
|
Ten.
|
"Riverbed Deployment Guide, p.177"
|
|
|
Does an Interceptor in-path interface require an IP address?
|
Yes.
|
"Riverbed Deployment Guide, p.177"
|
|
|
What options do you have for adding an IP to an in-path interface if there is no available IP address on the subnet it resides on?
|
Expand the subnet, create a secondary interface with a new subnet and IP on the router and switch, create a new VLAN interface on the router and switch, and pull the in-path interface IP from the new subnet.
|
Riverbed Deployment Guide, June 2011, p.180
|
|
|
"In regard to ARP behavior, what command is important if you will be running link aggregation on an Interceptor appliance?"
|
no arp filter response
|
"Riverbed Deployment Guide, p.180"
|
|
|
If an Interceptor in-path interface is configured with a VLAN ID, can the Interceptor optimize traffic that is not tagged with that VLAN ID?
|
Yes.
|
Riverbed Deployment Guide, March 2011, p.181
|
|
|
"When an Interceptor redirects 802.1Q encapsulated packets to a Steelhead, does it maintain the 802.1Q header?"
|
"No. Because of this, the Steelhead cannot use in-path or peering rules that are based on the VLAN ID."
|
"Riverbed Deployment Guide, p.181"
|
|
|
Is it supported to use a 802.1Q trunk across the Interceptor if that trunk is meant to separate overlapping IP address space?
|
No. The Interceptor uses the actual IP addresses in the packets to track flows, and cannot separate overlaps in this manner.
|
Riverbed Deployment Guide, p.182
|
|
|
Does the Interceptor appliance support LSP?
|
Yes.
|
"Riverbed Deployment Guide, p.183"
|
|
|
What command is used to enable LSP on an Interceptor appliance?
|
in-path lsp enable
|
"Riverbed Deployment Guide, p.183"
|
|
|
Can a Steelhead be a member of an Interceptor cluster and a WCCP cluster at the same time?
|
No. You cannot use Steelheads in an Interceptor cluster simultaneously with other deployment methods.
|
"Riverbed Deployment Guide, p.184"
|
|
|
What CLI command can be used (on both the Interceptors and the connected Steelheads) in order to set a decimal DSCP value for connections between the Steelheads and Interceptors?
|
in-path neighbor dscp
|
"Riverbed Deployment Guide, p.184"
|
|
|
Can a Steelhead be connected directly to an Interceptor appliance?
|
No.
|
"Riverbed Deployment Guide, p.184"
|
|
|
"When both are options, is it recommended to place the Steelhead on the LAN-side or the WAN-side of the Interceptor?"
|
LAN-side
|
"Riverbed Deployment Guide, p.184"
|
|
|
Why is it recommended to put the Steelhead on the LAN-side of the Interceptor appliance?
|
So Steelhead-to-host traffic does not have to transit the Interceptor appliance.
|
Riverbed Deployment Guide, p.184
-------------------- If the Steelhead is placed on the WAN-side of the Interceptor ( Hosts <--> Interceptor <--> Steelhead <--> WAN ), then all traffic between the Steelhead and the local hosts will need to traverse the Interceptor. If the Steelhead is placed on the LAN-side of the Interceptor ( Hosts/Steelhead <--> Interceptor <--> WAN ), Steelhead-to-host traffic is direct and does not need to traverse the Interceptor. |
|
|
Can the Steelhead and Interceptor in-path IP addresses be on different subnets?
|
Yes.
|
"Riverbed Deployment Guide, p.184"
|
|
|
Does a Steelhead in an Interceptor cluster need any information configured regarding the other Steelheads?
|
No.
|
"Riverbed Deployment Guide, p.186"
|
|
|
Should two Steelheads in an Interceptor cluster be configured as connection forwarding neighbors?
|
No.
|
"Riverbed Deployment Guide, p.186"
|
|
|
In what two ways can multiple Interceptors in the same deployment be configured to interact with each other?
|
"As failover buddies, or as redirect peers."
|
"Riverbed Deployment Guide, p.190"
|
|
|
Should an Interceptor be configured as a failover buddy and as a redirect peer to the same peer appliance?
|
No.
|
Riverbed Deployment Guide, p.190
|
|
|
Via what TCP port do Interceptors communicate with failover buddies and redirect peers by default?
|
TCP 7860
|
"Riverbed Deployment Guide, p.190"
|
|
|
What IP addresses are used for communications which use the Interceptor appliance TCP port?
|
the in-path IP addresses of the communicating Interceptor appliances.
|
"Riverbed Deployment Guide, p.190"
|
|
|
"If an Interceptor's failover buddy becomes unavailable, does the Interceptor continue to redirect packets for existing optimized connections?"
|
Yes.
|
"Riverbed Deployment Guide, p.191"
|
|
|
What is the maximum number of redirect peers supported by an Interceptor appliance?
|
There is no hard limit.
|
"Riverbed Deployment Guide, p.192"
|
|
|
What command determines whether an Interceptor will continue to redirect packets for new connections after its redirect peer fails?
|
redirect allow-failure
|
"Riverbed Deployment Guide, p.192"
|
|
|
"Should Interceptors with multiple in-path interfaces, but only one common in-path interface be deployed as failover buddies or as redirect peers?"
|
"This is an unsupported configuration. Interceptors acting as failover buddies must sit on ALL of the same in-path links, and Interceptors acting as redirect peers must share NONE of their in-path links."
|
"Riverbed Deployment Guide, p.193"
|
|
|
By default, is the 'redirect allow-failure' feature enabled?
|
No, disabled.
|
Riverbed Deployment Guide, p.193
|
|
|
In what three deployment types are Interceptors typically clustered?
|
"Series deployment, Parallel with Fail-to-Block, and Quad Deployment"
|
"Riverbed Deployment Guide, p.196"
|
|
|
Are Interceptor appliances in series deployment configured as failover buddies or redirect peers?
|
Failover buddies.
|
"Riverbed Deployment Guide, p.198"
|
|
|
Do Interceptor appliances in series deployment typically use fail-to-wire or fail-to-block?
|
Fail-to-Wire
|
"Riverbed Deployment Guide, p.198"
|
|
|
Are Interceptor appliances deployed in a parallel with fail-to-block deployment configured as failover buddies or redirect peers?
|
Redirect peers.
|
"Riverbed Deployment Guide, p.200"
|
|
|
Are Interceptor appliances deployed in a quad deployment configured as failover buddies or redirect peers?
|
Both. Each Interceptor will have one failover buddy and two redirect peers.
|
"Riverbed Deployment Guide, p.202"
|
|
|
"In quad deployment, what happens if two Interceptors that were failover buddies fail?"
|
There will still be a path to the WAN without redirection. Remaining Interceptors will continue to redirect packets for optimized connections but not for new connections.
|
"Riverbed Deployment Guide, p.202"
|
|
|
"In a quad deployment, what happens if two Interceptors that were redirect peers fail?"
|
Optimization for existing and new connections will continue.
|
"Riverbed Deployment Guide, p.202"
|
|
|
What command is highly recommended by Riverbed before going live with a quad deployment?
|
debug validate deployment
|
"Riverbed Deployment Guide, p.202"
|
|
|
Can serial Interceptor deployment be used with twelve separate paths to the WAN?
|
"No. Because an Interceptor can only handle ten in-path links, you would need to use a different cluster type."
|
"Riverbed Deployment Guide, p.205"
|
|
|
"If you have more in-path links than can be covered by a single Interceptor, and only want to use two Interceptor appliances, what cluster type is typically used?"
|
parallel with fail to block
|
"Riverbed Deployment Guide, p.206"
|
|
|
What type of Interceptor appliance rules are referenced before a packet even enters the Interceptor software?
|
Hardware Assist Pass-through (HAP) rules
|
"Riverbed Deployment Guide, p.207"
|
|
|
"In Interceptor packet flow, what is checked after HAP rules, but before load balance and in-path rules?"
|
Whether the packet corresponds to a flow that has already been redirected.
|
"Riverbed Deployment Guide, p.208"
|
|
|
What type of traffic should be specified to use HAP?
|
Traffic that you know you never want to be redirected or optimized.
|
"Riverbed Deployment Guide, p.208"
|
|
|
What CLI commands are used to control HAP rules?
|
in-path hw-assist
|
"Riverbed Deployment Guide, p.208"
|
|
|
What is the maximum number of configurable HAP rules?
|
50
|
"Riverbed Deployment Guide, p.208"
|
|
|
What type of rules on an Interceptor appliance determine what action to take when a TCP SYN packet arrives on the LAN interface?
|
in-path rules
|
"Riverbed Deployment Guide, p.208"
|
|
|
What four types of in-path rule actions are available on an Interceptor appliance?
|
"Redirect, pass, deny, discard"
|
"Riverbed Deployment Guide, p.208"
|
|
|
What three pass in-path rules are configured by default on an Interceptor appliance?
|
Pass secure, interactive, and Riverbed protocols (based on destination TCP ports)
|
Riverbed Deployment Guide, p.209
|
|
|
Does the Interceptor appliance have peering rules?
|
No.
|
"Riverbed Deployment Guide, p.209"
|
|
|
What type of Interceptor appliance rules are used to provide the same type of control as the Steelheads' peering rules?
|
Load balance rules.
|
"Riverbed Deployment Guide, p.209"
|
|
|
What two main purposes do Interceptor load balance rules serve?
|
As a filtering mechanism to determine whether traffic is optimized or not, and as a distribution mechanism, specifying which Steelheads optimize particular traffic.
|
Riverbed Deployment Guide, p.209
|
|
|
Do redirect load balance rules need to point to a specific Steelhead?
|
Yes.
|
"Riverbed Deployment Guide, p.209"
|
|
|
What two actions are possible for an Interceptor load balance rule?
|
Pass-through or redirect.
|
"Riverbed Deployment Guide, p.209"
|
|
|
What are the three possibilities for the peer info parameter in an Interceptor load balance rule?
|
"Non-probe, probe-only, and IP address"
|
"Riverbed Deployment Guide, p.209-210"
|
|
|
What does the default load balance rule on an Interceptor do?
|
Redirects traffic to the default pool.
|
"Riverbed Deployment Guide, p.210"
|
|
|
On an Interceptor appliance, which Steelheads are considered to be members of the "default pool"?
|
Steelheads which are not specifically referenced in load balance rules.
|
Riverbed Deployment Guide, p.210
|
|
|
In terms of the default pool on an Interceptor appliance, what happens if all Steelheads are specified in configured load balance rules?
|
The default pool is empty.
|
Riverbed Deployment Guide, p.210
|
|
|
What happens to traffic on an Interceptor appliance if it hits the default rule, but all Steelheads have been specified in manually configured load balance rules?
|
The default pool will be empty, so the traffic will not be redirected, and will not be optimized.
|
Riverbed Deployment Guide, p.210
|
|
|
What happens if the first load balance rule that traffic matches is a redirect rule?
|
"The Interceptor marks all specified Steelheads as candidate Steelheads, and selects a Steelhead to perform optimization based on multiple factors."
|
"Riverbed Deployment Guide, p.210"
|
|
|
How often do Steelheads and Interceptors exchange heartbeat information by default?
|
Every second.
|
"Riverbed Deployment Guide, p.210"
|
|
|
What CLI command on an Interceptor appliance will put a Steelhead into paused mode?
|
in-path neighbor peer name <name> paused
|
"Riverbed Deployment Guide, p.210"
|
|
|
Can a Steelhead in paused mode be considered a candidate Steelhead if it is specified in an applicable load balance rule?
|
No.
|
"Riverbed Deployment Guide, p.210"
|
|
|
"What happens if traffic matches a redirect load balance rule, but the Interceptor determines that the list of candidate Steelheads is empty?"
|
The Interceptor proceeds through the load balance rule base until it finds a matching pass through or redirect list with candidate Steelheads
|
"Riverbed Deployment Guide, p.211"
|
|
|
Where does an Interceptor keep track of peer affinity?
|
By maintaining an in-memory history on past optimized connections.
|
"Riverbed Deployment Guide, p.211"
|
|
|
For connections initiated at the Interceptor site, what values does the Interceptor track for peer affinity?
|
Remote Server IP and TCP port
|
Riverbed Deployment Guide, p.211
|
|
|
For connections initiated at remote locations, what values does the Interceptor track for peer affinity?
|
The internal Steelhead identifier of the remote Steelhead
|
Riverbed Deployment Guide, p.211
|
|
|
Does peer affinity information survive a reboot of the Interceptor appliance?
|
No.
|
"Riverbed Deployment Guide, p.211"
|
|
|
What do you need to do in order to clear all peer affinity information at a site with multiple Interceptors?
|
Stop services on all peer Interceptors, then restart it.
|
Riverbed Deployment Guide, p.211
|
|
|
Do Interceptors share their saved peer affinity information?
|
Yes. All peer Interceptors share this information.
|
"Riverbed Deployment Guide, p.211"
|
|
|
What flag is designed to prevent concentrating all connections on a single Steelhead due to peer affinity?
|
The fair peering flag.
|
"Riverbed Deployment Guide, p.211"
|
|
|
If a Interceptor has no peer affinity information for a connection, what Steelhead does it select out of the list of candidate Steelheads for optimization?
|
The Steelhead with the least number of optimized TCP connections.
|
Riverbed Deployment Guide, p.211
|
|
|
"If all Steelheads in a candidate group have the same number of optimized connections, and there is no peer affinity, which Steelhead will an Interceptor select for optimization?"
|
A different Steelhead from the last time the redirect rule was used.
|
"Riverbed Deployment Guide, p.211"
|
|
|
In general, what does Riverbed recommend as the maximum intra-cluster round trip latency?
|
1ms
|
Riverbed Deployment Guide, p.212
|
|
|
"In an Interceptor setup, where should security or monitoring devices NOT be placed?"
|
Between Interceptors and cluster Steelheads
|
"Riverbed Deployment Guide, p.213"
|
|
|
Should multi-interface support be configured in Interceptor deployments where a single in-path interface is used?
|
Yes.
|
"Riverbed Deployment Guide, p.213"
|
|
|
What CLI command should be used with Interceptors to ensure the fastest possible response to failed or unreachable cluster Steelheads?
|
in-path neighbor heartbeat enable
|
"Riverbed Deployment Guide, p.213"
|
|
|
What informational CLI command can be used on cluster Interceptors to ensure that they have connected to the cluster Steelheads?
|
show in-path neighbor peers
|
"Riverbed Deployment Guide, p.216"
|
|
|
"In parallel fail-to-block clusters, what informational CLI command can be used on the cluster Interceptors to ensure that they have connected to the other cluster Interceptors?"
|
show redirect peers
|
"Riverbed Deployment Guide, p.216"
|
|
|
By default, what TCP port is used for connection forwarding?
|
7850
|
Riverbed Deployment Guide, p.173
|
|
|
"When using an Interceptor appliance, what happens with traffic that is not being optimized?"
|
"It is treated as pass-through on the Interceptor, and not redirected to the Steelhead."
|
"Riverbed Deployment Guide, p.174"
|
|
|
What two methods (for traffic forwarding) does an Interceptor use to redirect packets?
|
GRE encapsulation during auto discovery, TCP/IP destination field changes during data transmission.
|
"Riverbed Deployment Guide, p.174"
|
|
|
"When full transparency optimized WAN traffic arrives on an Interceptor's WAN link, how does the Interceptor recognize the traffic?"
|
There is an embedded full transparency option in the packet's TCP option list.
|
"Riverbed Deployment Guide, p.175"
|
|
|
In regard to ARP behavior, what command is important if you will be running link aggregation on an Interceptor appliance?
|
no arp filter response
|
Riverbed Deployment Guide, p.180
-------- When working with aggregated links, each in-path interface will have its own IP address, even though the connected device doing the link aggregation will believe the two in-path interfaces to be a single entity. The "no arp filter response" command ensures that the Interceptor responds to ARP requests for in-path IP addresses regardless of which interface receives the ARP request. For example, if the router sends an ARP request for the address of inpath0_0, but the request arrives on inpath0_1, the Interceptor will still respond. |
|
|
When both are options, is it recommended to place the Steelhead on the LAN-side or the WAN-side of the Interceptor?
|
LAN-side
|
Riverbed Deployment Guide, p.184
|
|
|
In what two ways can multiple Interceptors in the same deployment be configured ti interact with each other?
|
"As failover buddies, or as redirect peers."
|
"Riverbed Deployment Guide, p.190"
|
|
|
Via what port do Interceptors communicate with failover buddies and redirect peers by default?
|
TCP 7860
|
"Riverbed Deployment Guide, p.190"
|
|
|
What IP addresses are used for communications which use the Interceptor appliance port?
|
the in-path IP addresses of the communicating Interceptor appliances.
|
"Riverbed Deployment Guide, p.190"
|
|
|
If an Interceptor's failover buddy becomes unavailable, does the Interceptor continue to redirect packets for existing optimized connections?
|
Yes.
|
Riverbed Deployment Guide, p.191
|
|
|
What is the main difference in physical deployment between Interceptors acting as failover buddies and Interceptors acting as redirect peers?
|
Failover buddies are located directly on the same in-path links, and redirect peers do not have any common in-path links.
|
Riverbed Deployment Guide, p.193
|
|
|
"By default, is the 'redirect allow-failure' feature enabled?"
|
"No, disabled."
|
"Riverbed Deployment Guide, p.193"
|
|
|
In a quad deployment, what happens if two Interceptors that were redirect peers fail?
|
Optimization for existing and new connections will continue.
|
Riverbed Deployment Guide, p.202
|
|
|
If you have more in-path links than can be covered by a single Interceptor, what cluster type is typically used?"
|
parallel with fail to block
|
Riverbed Deployment Guide, p.206
----------------------- An Interceptor can have up to ten in-path interfaces. If you had eleven paths to the WAN that you wanted the Interceptor to cover, you would need two Interceptors in parallel with fail-to-block mode configured as redirect peers. |
|
|
What three methods does an Interceptor appliance use to control when traffic is redirected?
|
In-path rules, load balance rules, and hardware assist pass-through (HAP) rules
|
Riverbed Deployment Guide, p.206
|
|
|
With a Steelhead at its default SMB signing configuration, is traffic from clients to member servers and domain controllers always signed or never signed?
|
The default is to use SMB signing on Domain Controllers, and not on member servers.
|
|
|
|
How can you push policy to multiple Steelhead Mobile devices at the same time?
|
Using GIDs
|
|
|
|
What type of CMC policy is used to manage features such as the data store, in-path rules, SSL settings, etc.
|
Optimization Policy
|
|
|
|
What type of CMC policy is used to manage features such as asymmetric routing, DNS settings, host settings, QoS settings, etc?
|
Networking Policy
|
|
|
|
What type of CMC policy is used to manage settings such as encryption, authentication, and user permissions?
|
Security Policy
|
|
|
|
What type of CMC policy is used to organize and manage features such as alarms, announcements, email notifications, log settings, etc?
|
System Settings Policy
|
|
|
|
What Steelhead Mobile policy contains optimization-specific settings, such as in-path and fixed-target rules?
|
acceleration policy
|
|
|
|
What Riverbed ports must the server-side (In front of the Steelhead and Mobile Controller) firewall have open in order for Steelhead Mobile to function?
|
7800 and 7870
|
Riverbed Deployment Guide, March 2011, Chapter 17
|
|
|
What executable files must be allowed to run for Steelhead Mobile to function?
|
rbtdebug.exe
rbtmon.exe rbtsport.exe rbtlogger.exe shmobile.exe |
|
|
|
If all of your applications are actually slower after installing an in-path Steelhead appliance, what is the most likely cause?
|
Duplex mismatch.
|
|
|
|
If traffic from a branch office to your office is being optimized, but traffic from your office to the branch office is not being optimized, what is the most likely cause?
|
Network Asymmetry
|
Riverbed Deployment Guide, March 2011, Chapter 20
-------------- If SYN packets that traverse from one side of the network are optimized but SYN packets that traverse from the opposite side of the network are passed-through unoptimized, it is a symptom of network asymmetry. |
|
|
If network connections fail on their first attempt, but succeed on subsequent attempts, what is the most likely cause?
|
Packet ricochet
|
|
|
|
What are the default SMB Signing settings for Client/Workstations, Member Servers, and Domain Controllers?
|
Client/Workstation: Enabled ON, Required OFF
Member Server: Enabled OFF, Required OFF Domain Controller: Enabled ON, Required ON |
|
|
|
If a client with SMB signing OFF attempts to connect to a server with SMB signing REQUIRED, what is the result?
|
Cannot establish session.
|
|
|
|
If a client with SMB signing ON but NOT REQUIRED attempts to connect to a server with SMB signing OFF, what is the result?
|
Signing is disabled, and full optimization is used.
|
|
|
|
If a client with SMB signing ON but NOT REQUIRED attempts to connect to a server with SMB signing REQUIRED, what is the result?
|
Signing is enabled, and only bandwidth optimization can be used.
|
|
|
|
If a client with SMB signing ON but NOT REQUIRED attempts to connect to a server with SMB signing ON but NOT REQUIRED, what is the result?
|
Signing is enabled, and only bandwidth optimization can be used.
|
|
|
|
Do Steelhead appliances support WCCPv1 or WCCPv2?
|
WCCPv2
|
"Riverbed Deployment Guide, p.217"
|
|
|
Does using WCCP require any Cisco equipment?
|
"Yes, a Cisco router or switch is required."
|
"Riverbed Deployment Guide, p.218"
|
|
|
What is a major disadvantage of WCCP if your network does not support placing the Steelheads and the Cisco router or switch in a common subnet?
|
GRE encapsulation is required for forwarding packets.
|
"Riverbed Deployment Guide, p.219"
|
|
|
How many WCCP routers can be in a WCCP service group?
|
32
|
"Riverbed Deployment Guide, p.219"
|
|
|
How many WCCP clients can be in a WCCP service group?
|
32
|
"Riverbed Deployment Guide, p.219"
|
|
|
"In regards to WCCP, what are the devices that RECEIVE redirected traffic called?"
|
WCCP Clients
|
"Riverbed Deployment Guide, p.219"
|
|
|
Is a WCCP service group transmitted across the WAN?
|
No.
|
"Riverbed Deployment Guide, p.219"
|
|
|
What service group numbers does Riverbed recommend using?
|
61 and 62
|
"Riverbed Deployment Guide, p.219"
|
|
|
What two assignment methods does WCCP utilize?
|
Hash assignment and Mask assignment
|
"Riverbed Deployment Guide, p.220"
|
|
|
Which WCCP assignment method uses the most CPU?
|
Hash assignment.
|
"Riverbed Deployment Guide, p.220"
|
|
|
"If you want a Steelhead to be used as a backup in case the other Steelhead fails, what weight should you give that Steelhead in its WCCP service group?"
|
0
|
"Riverbed Deployment Guide, p.220"
|
|
|
If a Steelhead has a WCCP weight of zero, what must be true in order for that Steelhead to receive traffic?
|
It must either be the only active Steelhead in the group, or all the other Steelheads in the group must have a weight of 0.
|
Riverbed Deployment Guide, p.220
|
|
|
How many bits can WCCP mask assignment use?
|
Up to seven.
|
"Riverbed Deployment Guide, p.221"
|
|
|
What is true in regard to WCCP assignment methods on the Catalyst 4500 and Catalyst 3750 platforms?
|
These platforms only support the mask assignment method.
|
"Riverbed Deployment Guide, p.221"
|
|
|
What two methods does WCCP support for transmitting packets between the router/switch and the Steelhead appliance?
|
"GRE encapsulation, and L2"
|
"Riverbed Deployment Guide, p.222"
|
|
|
"Of the two WCCP redirection methods, which is typically preferred and why?"
|
"L2, because it requires fewer resources."
|
"Riverbed Deployment Guide, p.222"
|
|
|
What CLI command can be used to automatically change the MSS for connections to 1432 bytes in RiOS 6.0 and earlier?
|
in-path module wccp adjust-mss enable
|
"Riverbed Deployment Guide, p.222"
|
|
|
What is the difference between the route-no-gre and sticky-no-gre options of the wccp override-return command?
|
route-no-gre uses the Steelhead routing table to determine next-hop and sticky-no-gre determines next hop based on what router forwarded the original packet.
|
"Riverbed Deployment Guide, p.222"
|
|
|
When using wccp override-return configuration, what rule of thumb should be true of the next hop router?
|
It should not attempt to direct traffic back to the Steelhead, so a WCCP loop is not created.
|
Riverbed Deployment Guide, p.223
-------------------------------------------------------------------------------- What does "wccp override-return" do? Normally, the Steelhead returns traffic to the WCCP router in the same manner in which the traffic was redirected to the Steelhead in the first place. Using the wccp override-return commands, you can tweak this configuration to either return traffic based on the Steelhead routing table, or return traffic to whatever router forwarded the GRE packet (without using GRE to re-encapsulate the return traffic.) It is important to not configure override-return in a way that will cause a WCCP router to simply redirect the traffic back to the Steelhead. |
|
|
How often do a Steelhead appliance and WCCP router exchange Here I am and I See You messages?
|
Every 10 seconds.
|
"Riverbed Deployment Guide, p.224"
|
|
|
How many Here I Am/I See You messages does a WCCP router miss before declaring a WCCP client failed?
|
Three
|
"Riverbed Deployment Guide, p.224"
|
|
|
What happens to WCCP assignment buckets when a WCCP client is declared failed?
|
Buckets are recalculated and redistributed between remaining WCCP clients.
|
"Riverbed Deployment Guide, p.224"
|
|
|
What was changed in regards to the wccp service group command in RiOS 6.1 and later?
|
"The interface is now a required parameter, wccp interface <interface> service group"
|
"Riverbed Deployment Guide, p.224"
|
|
|
What Cisco CLI command is recommended as best practice on the router interface connected to the Steelhead wan0_0 interface?
|
ip wccp redirect exclude
|
Riverbed Deployment Guide, p.227
-------------------------------------------------------------------------------- This commend configures the router to never redirect packets arriving on this interface, even if they are later sent out an interface doing outbound redirection. |
|
|
What CLI command would be used to add the Steelhead to WCCP service group 61 with a router at 10.0.1.1?
|
wccp interface inpath0_0 service-group 61 routers 10.0.1.1
|
"Riverbed Deployment Guide, p.229"
|
|
|
"If a Steelhead appliance has two interfaces in a WCCP service group, and each of those interfaces has a weight of 100, what will the effective weight of each interface be?"
|
50
|
"Riverbed Deployment Guide, p.242"
|
|
|
What are the valid weight values for an interface in a WCCP service group?
|
0 - 65535
|
"Riverbed Deployment Guide, p.242"
|
|
|
"If you have created access-list 101 on a Cisco router, and want traffic matching that access-list to be redirected by WCCP service group 61, what CLI command would you use?"
|
ip wccp 61 redirect-list 101
|
"Riverbed Deployment Guide, p.246"
|
|
|
How many bits does mask assignment use?
|
Up to seven.
|
"Riverbed Deployment Guide, p.249"
|
|
|
"If you have eight Steelhead interfaces in a service group, and are using mask assignment, how many bits should you use for the mask assignment?"
|
"Enough to create 8 buckets, or three (2^3=8)"
|
"Riverbed Deployment Guide, p.249"
|
|
|
When determining bucket allocations for a WCCP service group, how does weight affect the number of buckets allocated to each Steelhead interface?
|
The higher the weight, the more buckets are allocated to the Steelhead appliance interface.
|
Riverbed Deployment Guide, p.249
|
|
|
"If there are more buckets available for WCCP load balancing than Steelhead appliance WCCP clients, how are the excess buckets distributed?"
|
They are all assigned to the Steelhead appliance interface with the highest IP address.
|
"Riverbed Deployment Guide, p.249"
|
|
|
"If you have three Steelhead appliance interfaces of equal weight in a WCCP service group using three bits for mask assignment, how many buckets are assigned to each Steelhead appliance interface?"
|
"four buckets to the interface with the highest IP address, and two buckets to each of the other interfaces."
|
"Riverbed Deployment Guide, p.249-250"
|
|
|
What command can be used on a Cisco router to verify overall WCCP configuration?
|
show ip wccp
|
"Riverbed Deployment Guide, p.251"
|
|
|
What command can be used on a Cisco router to show detailed information about WCCP service group 61?
|
show ip wccp 61 detail
|
"Riverbed Deployment Guide, p.252"
|
|
|
On a Steelhead appliance, what command is used to enable or disable WCCP?
|
wccp enable
or no wccp enable |
Riverbed Deployment Guide, p.239
|
|
|
When using PBR, what happens to a packet if it does not match a defined policy?
|
It is routed based on the routing table of the appliance.
|
Riverbed Deployment Guide, p.255
|
|
|
"When using PBR for virtual in-path configurations, what Steelhead appliance port is cabled and used to receive the redirected traffic?"
|
WAN port
|
"Riverbed Deployment Guide, p.255"
|
|
|
What protocol can be implemented with PBR to ensure that traffic is not black holed if the device PBR is redirecting to fails?
|
Cisco Discovery Protocol (CDP)
|
"Riverbed Deployment Guide, p.256"
|
|
|
"If using CDP with PBR, where does CDP need to be enabled?"
|
On both the router and the Steelhead.
|
"Riverbed Deployment Guide, p.256"
|
|
|
What CLI command is used on the Steelhead appliance to enable CDP?
|
in-path cdp enable
|
"Riverbed Deployment Guide, p.256"
|
|
|
"What happens if a switch or L2 device is located between the PBR-enabled router and the Steelhead appliance, in terms of CDP frames?"
|
"CDP frames cannot reach the router, and the router assumes that the Steelhead is not operational."
|
"Riverbed Deployment Guide, p.256"
|
|
|
What command can be used on a Cisco router to enable CDP failover?
|
set ip next-hop verify-availability
|
"Riverbed Deployment Guide, p.257"
|
|
|
How many cables are attached to the Steelhead in a PBR deployment (utilizing one in-path interface)?
|
"Two -- one to the Primary interface for management, and one to the wan0_0 interface for redirected traffic."
|
"Riverbed Deployment Guide, p.257"
|
|
|
What is an alternative to CDP that allows a Cisco router to use a variety of methods to determine Steelhead appliance health?
|
Object Tracking
|
"Riverbed Deployment Guide, p.256"
|
|
|
Do Out-of-Path deployments utilize PBR or WCCP?
|
Neither use used in an out-of-path deployment.
|
"Riverbed Deployment Guide, p.279"
|
|
|
"In an out-of-path deployment, what Steelhead appliance interface should be connected to the network?"
|
Only the Primary interface.
|
"Riverbed Deployment Guide, p.279"
|
|
|
What type of traffic redirection is utilized in an out-of-path deployment?
|
None.
|
Riverbed Deployment Guide, p.279
Meaning, what type of device is necessary in order to redirect traffic to the Steelhead for optimization. |
|
|
What type of in-path rules are required for an out-of-path Steelhead deployment?
|
fixed-target in-path rules.
|
"Riverbed Deployment Guide, p.279"
|
|
|
When behind an out-of-path Steelhead, what client IP addresses does the server see?
|
It sees the address of the Primary interface on the Steelhead as the client IP.
|
Riverbed Deployment Guide, p.279
|
|
|
"In out-of-path deployments, how is server side redundancy achieved?"
|
"By setting up two server-side Steelheads, and specifying both of their IP addresses in the fixed-target in-path rule on the client side."
|
"Riverbed Deployment Guide, p.279"
|
|
|
"If both target Steelheads of a fixed-target in-path rule are unavailable, does the client-side Steelhead search its rule for another matching in-path rule?"
|
"No, it simply passes the traffic through unoptimized."
|
"Riverbed Deployment Guide, p.279"
|
|
|
"In an out-of-path deployment, are connections initiated from the site with the out-of-path Steelhead optimized?"
|
No.
|
"Riverbed Deployment Guide, p.280"
|
|
|
What is SMB signed traffic?
|
SMB traffic in which the client and server cryptographically sign each protocol datagram exchanged in a CIFS/SMB session.
|
Riverbed Deployment Guide, p.284
|
|
|
What is an oplock, in regard to CIFS?
|
Client requests access to a shared file and requests to be notified by the server when they are the only client accessing the file, or accessing it with other clients that can perform only reads.
|
Riverbed Deployment Guide, p.285
|
|
|
What is an oplock break?
|
Oplock breaks are when servers notify clients that additional clients are requesting access to a file, so that operations that have been performed locally by the client can be synchronized back to the server before granting access to additional clients.
|
Riverbed Deployment Guide, p.285
|
|
|
What are the three types of oplocks?
|
Batch, exclusive, and level 2
|
Riverbed Deployment Guide, p.286
|
|
|
What is a batch oplock?
|
Generally used by command line applications that repeatedly open many of the same files over and over. Most often used in batch or scripting command sets.
|
Riverbed Deployment Guide, p.286
|
|
|
What is an exclusive oplock?
|
Oplock granted to a client if the file is not already opened by any other client. This means the client has sole access to the file, so it is safe to cache all changes to the file. The client only sends back changes when the file closes or the server requests them.
|
Riverbed Deployment Guide, p.286
|
|
|
What is a level 2 oplock?
|
Type of oplock that is never requested by a client directly. A client that holds an exclusive oplock may receive a downgrade to a level 2 oplock at any time from the server, indicating that some additional client has accessed the file but has not yet performed any write operations on the file.
|
Riverbed Deployment Guide, p.286
|
|
|
Are oplocks and file locks synonymous?
|
No. File locks control access to files, while oplocks notify clients about the state of concurrency for a file.
|
Riverbed Deployment Guide, p.286
|
|
|
What two modes of writing data are supported in CIFS environments?
|
Write-through and write-back
|
Riverbed Deployment Guide, June 2011, p.302
|
|
|
What CIFS data writing style has generally faster performance?
|
Write-back
|
Riverbed Deployment Guide, June 2011, p.303
|
|
|
When the CIFS Security Signatures feature is used, is the data sent across the network encrypted?
|
Not necessarily. Security signatures are meant to validate origin, not to protect against snooping.
|
Riverbed Deployment Guide, June 2011, p.303
|
|
|
What are the three possible settings for CIFS security signatures on both the client and server?
|
Disabled, Enabled, Required
|
Riverbed Deployment Guide, June 2011, p.303
|
|
|
If both a CIFS client and a CIFS server have security signatures set to "enabled", is the connection between the two signed (Without Riverbed interference)?
|
Yes.
|
Riverbed Deployment Guide, June 2011, p.303
|
|
|
If a CIFS client with security signatures required attempts to connect to a CIFS server with security signatures disabled, what happens?
|
The connection will not be established.
|
Riverbed Deployment Guide, June 2011, p.303
|
|
|
If a CIFS client with signatures enabled attempts to connect to a CIFS server with signatures enabled, through a Steelhead using the "Optimize Connections with Security Signatures (that do not require signing)" feature, what happens?
|
The Steelhead alters the negotiation so that instead of using a signed connection, the two devices use an unsigned connection.
|
Riverbed Deployment Guide, June 2011, p.303
|
|
|
If you want CIFS connections to be always signed between the clients and client-side Steelhead, between the Steelhead appliances, and between the server-side Steelhead and server, what do you need to do in terms of Steelhead configuration?
|
Join the server-side Steelhead appliance to the Windows Domain.
|
Riverbed Deployment Guide, June 2011, p.303
|
|
|
On what two ports is the RiOS CIFS optimization module designed to intercept?
|
TCP ports 445 and 139
|
Riverbed Deployment Guide, June 2011, p.304
|
|
|
What is the most common type of latency optimization performed on CIFS connections?
|
To look for file opens where exclusive opportunistic locks have been granted, and then initiate read-ahead operations on the file data.
|
Riverbed Deployment Guide, June 2011, p.304
|
|
|
What type of CIFS optimization does a Steelhead perform in regard to write optimization on write-through transactions?
|
If the client application has a lock, the Steelhead will acknowledge writes to the application before receiving acknowledgements from the server.
|
Riverbed Deployment Guide, June 2011, p.304
|
|
|
If a CIFS client with signatures required attempts to connect to a CIFS server with signatures enabled, through a Steelhead using the "Optimize Connections with Security Signatures (that do not require signing)" feature, what happens?
|
The connection is prevented.
|
Riverbed Deployment Guide, June 2011, p.304
|
|
|
What CIFS optimization feature allows client write buffers to be used more dynamically in order to smooth out bursty traffic during server-side congestion?
|
Dynamic Write Throttling
|
Riverbed Deployment Guide, March 2011, p.289
-------------------------------------------------------------------------------- When there is congestion on the server side of the optimized connection, Dynamic Write Throttling provides feedback to the client side, allowing the write buffers to be used more dynamically to smooth out any traffic bursts. Riverbed recommends enabling Dynamic Write Throttling because it prevents clients from buffering too much file-write data. |
|
|
What CIFS optimization feature can be enabled on the client-side Steelhead in order to force clients and servers to communicate using SMBv1?
|
SMBv1 Backward Compatibility
|
Riverbed Deployment Guide, June 2011, p.305
|
|
|
Why would you want to force clients and servers to use SMBv1 rather than SMBv2?
|
Because SMBv1 can be optimized better by RiOS
|
Riverbed Deployment Guide, June 2011, p.305
|
|
|
What CIFS optimization feature enables the CIFS module to understand application-specific file locking protocols used for Microsoft Office documents?
|
Applock Optimization
|
Riverbed Deployment Guide, June 2011, p.305
|
|
|
What CIFS optimization feature enables better performance with applications that perform multiple simultaneous opens on the same file?
|
Overlapping Open Optimization
|
Riverbed Deployment Guide, June 2011, p.305
|
|
|
What CLI command can be used to enable the fast directory browsing CIFS optimization on RiOS 6.1 and later?
|
protocol cifs ext-dir-cache enable
|
Riverbed Deployment Guide, June 2011, p.306
|
|
|
What two forms of MAPI exist?
|
extended and simple
|
Riverbed Deployment Guide, June 2011, p.307
|
|
|
On what port does RiOS intercept an EPM conversation between the Outlook client and the Exchange server?
|
TCP port 135
|
Riverbed Deployment Guide, June 2011, p.308
|
|
|
If an optimized Outlook client connection is configured for correct addressing, to what port does the Steelhead change the port that the EPM service sends to the Outlook client for MAPI connections by default?
|
7830
|
Riverbed Deployment Guide, June 2011, Chapter 11
-------------------------------------------------------------------------------- RiOS intercepts and optimizes the EPM (end point mapper) conversation between the Outlook client and Exchange server on TCP port 135. For Outlook client connections that are configured for correct addressing, the client-side Steelhead appliance alters the port that the EPM service sends to the Outlook client for MAPI connections (default is port 7830). For port or full transparency addressing modes, no changes are made to the reported MAPI port, and the Outlook client connects to whatever port EPM assigns to MAPI. RiOS intercepts and optimizes subsequent connections made to the MAPI port, and performs MAPI specific optimization on them. -------------------------------------------------------------------------------- |
|
|
If an optimized Outlook client connection is configured for either port or full transparency, what changes are made to the requested MAPI port?
|
No changes are made -- the client connects to whatever port EPM assigns to MAPI.
|
Riverbed Deployment Guide, June 2011, p.308
|
|
|
What CLI command can be used to ensure that in-path and pass-through rules are applied to MAPI data channels, and not just the original MAPI connection?
|
in-path probe-mapi-data
|
Riverbed Deployment Guide, March 2011, p.293
-------------------------------------------------------------------------------- Explanation: Because Riverbed sees the initial End Point Mapper (EPM) connection between Outlook client and Exchange server, it knows what port is assigned to MAPI by EPM. This takes place only if EPM connections on port 135 are optimized -- if they are pass-through, MAPI specific optimized connections are also not used. After RiOS learns the MAPI port for an Exchange server, RiOS no longer goes through auto-discovery for connections to the Exchange server IP and MAPI port. Because of this, pass-through or other in-path rules may not function as expected. "in-path probe-mapi-data" is the setting disables this behavior, and always performs auto-discovery, instead of automatically optimizing MAPI connections. |
|
|
What is the standard port used by a Steelhead appliance for NSPI optimization?
|
7840
|
Riverbed Deployment Guide, March 2011, p.293
|
|
|
Is the "MAPI with Exchange 2000" optimization setting enabled by default?
|
Yes.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
In regards to optimizing Exchange traffic what is true of the dependencies of the setting for "MAPI Exchange 2007+ Optimization"?
|
In order to use MAPI optimization for Exchange, you need to enable optimization for previous versions. So, for Exchange 2007+ optimization, you would also need to enable optimization for Exchange 2000 and Exchange 2003.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
Where does the Steelhead save user credentials used for MAPI-Prepopulation?
|
No user credentials are used or saved by the Steelhead when performing MAPI prepopulation.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What happens to an existing MAPI-Prepopulation session if a user initiated the original prepopulation session starts a new Outlook session?
|
The prepopulation session terminates. If the user is coming from a different location than behind the Steelhead with the existing prepopulation session, the session does not terminate, but will eventually time out per the configuration setting.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What CLI command is necessary in order to optimize encrypted MAPI traffic between Outlook and the Exchange server?
|
protocol mapi encrypted enable
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
When MAPI Admission Control Limits are not being used, in what two ways can admission control affect Outlook connections?
|
If the Outlook client currently has existing connections being optimized, when the client tries to establish a new connection, the new connection fails because it is using a context unknown to the Exchange server.
If the Outlook client's connections are all being passed through, and the Steelhead leaves admission control, new optimized connections will fail because new connections will be intercepted and remapped to a different context than what the Exchange Server understands. |
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
When using MAPI Admission Control Limits, what happens to new Outlook connections when a Steelhead goes into admission control and the Outlook client already has existing connections open?
|
Any additional connections will also be optimized, so they do not fail for not matching an existing context.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
When using MAPI Admission Control Limits, what happens to new Outlook connections when a Steelhead comes out of admission control and the Outlook client already had established unoptimized connections to the Exchange server?
|
New connections will not be optimized, unless the client closes all connections completely and then restarts them.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What happens to MAPI prepopulation connections when the MAPI Admission Control limit is reached?
|
Existing prepopulation connections are closed and no new prepopulation connections are established.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
By default, what is the value of the MAPI admission control limit compared to the general admission control limit?
|
85%
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What two commands are necessary to enable MAPI admission control via the CLI, and set the MAPI admission control limit to 70% of the general admission control limit?
|
admission control mapi enable
admission control mapi threshold 70 |
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
In serial clustered client-side Steelheads, how do you configure MAPI admission control?
|
MAPI admission control does not work with serial clustered client-side Steelhead appliances.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
In terms of probe-mapi-data configuration, when is MAPI admission control not supported?
|
When full transparency or port transparency is being used, or port remap is disabled.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
If using OA to connect to the Exchange server via HTTP using regular MAPI, how many times is the connection encrypted?
|
Never.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
If using OA to connect to the Exchange server via HTTP using encrypted MAPI, how many times is the connection encrypted?
|
Once.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
If using OA to connect to the Exchange server via HTTPS using regular MAPI, how many times is the connection encrypted?
|
Once.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
If using OA to connect to the Exchange server via HTTPS using encrypted MAPI, how many times is the connection encrypted?
|
Twice.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
How many domains can a Steelhead join?
|
Only one.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What two modes does the Steelhead use to obtain cryptographic information necessary to optimize SMB signed or encrypted MAPI traffic?
|
Delegation mode, or Transparent mode
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What mode of optimization for SMB signed or encrypted MAPI traffic uses Kerberos authentication between the server-side Steelhead and the servers, and NTLM between the client-side and server-side Steelheads?
|
Delegation mode
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What mode of optimization for SMB signed or encrypted MAPI traffic uses NTLM end-to-end between the client-side and server-side Steelhead, and the server-side Steelhead and the server?
|
Transparent mode.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What mode of optimization for SMB signed or encrypted MAPI traffic is generally recommended by Riverbed?
|
Transparent mode.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What mode of optimization for SMB signed or encrypted MAPI traffic does not support Windows 7 clients with default authentication settings, Windows 2k8 R2 clients with NTLM disabled, servers in domains with NTLM disabled, or Vista SP2 clients when optimizing encrypted MAPI?
|
Transparent mode.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What is the most common cause of errors when attempting to join a Steelhead to a domain?
|
A clock that is not synchronized.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What CLI command can be used to view the list of configured one-way domains?
|
show protocol domain-auth oneway-trust
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What CLI command can be used to remove a domain from the Steelhead configuration?
|
no protocol domain-auth oneway-trust dns-name <server>
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What mode of optimization for SMB signed or encrypted MAPI traffic requires the creation of a special user account in the Windows domain?
|
Delegation mode.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What are the two most common types of requests sent to a web server?
|
GET and POST requests
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
Is HTTP strip compression enabled by default?
|
Yes.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What HTTP optimization method increases the amount of LAN-side traffic?
|
Strip compression -- with this option enabled, the server no longer sends compressed traffic.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What HTTP optimization method should be enabled if the HTTP server does not issue cookies?
|
Insert cookie
|
Riverbed Deployment Guide, March 2011, p.324
-------------------------------------------------------------------------------- The HTTP optimization module relies on cookies to distinguish between different users. If the server does not support cookies, the HTTP optimization module inserts its own cookie so that it can distinguish between different users. Enable this option only if the server does not issue its own cookies. |
|
|
What do cookies inserted by the HTTP optimization module start with?
|
rbt-http=
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What HTTP optimization method does not function if the HTTP server does not support keep-alive?
|
Insert Keep-Alive
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What HTTP optimization method is used to generate relationships between object requests and the base HTML page that referenced them?
|
URL Learning
|
Riverbed Deployment Guide, March 2011, Ch.11
----- With URL Learning, the Steelhead keeps a database of objects referenced from original URLs, and when the Steelhead appliance sees that URL later, it immediately sends requests for all of the objects referenced by that URL, saving round trips for the client brows.er |
|
|
What HTTP optimization method is similar to URL Learning, but does not remember which objects are referenced based on the URL request. Instead, this method relies on the actual tags within the HTML page
|
Parse-and-prefetch
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What protocol benefits the most from Connection Pooling?
|
HTTP
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
In terms of the URL Learning, Parse and Prefetch, and OPT settings, what are the recommended values for Internet-bound traffic?
|
URL Learning OFF, Parse-and-Prefetch OFF, OPT ON
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
In what three modes can Oracle Forms optimization be configured in?
|
Native, HTTP, and HTTPS
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
Is NFS optimization supported in an out-of-path deployment?
|
No.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
What versions of NFS can Steelhead optimize?
|
NFSv3
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
In what form of FTP data communication does the server initiate the data connection on a port specified by the client?
|
Active FTP
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
In what form of FTP data communication does the client initiate the data connection on a port specified by the server?
|
Passive FTP
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
When creating in-path rules for FTP traffic, how do you specify the data ports that will be used for active/passive FTP?
|
You don't need to. You must only specify destination port 21, which automatically includes optimization for the data channels, whether active or passive is used.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
For active-mode FTP, where should pass-through in-path rules be created, if you don't want FTP data connections to be optimized?
|
On the server-side Steelhead, because the source of the data connection is the FTP server in active mode.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
If you find that your FTP data connection is closing prematurely, how do you adjust the manual delay, and on which Steelhead should this be done?
|
protocol ftp delay-close-sec <time-in-seconds>, on the server-side Steelhead.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
Does Steelhead Mobile optimize active FTP?
|
No. Steelhead Mobile Client only optimizes connections originating from the client.
|
Riverbed Deployment Guide, March 2011, Ch.11
|
|
|
Prior to RiOS 6.0, when using Riverbed SSL acceleration, between what two entities does the initial SSL message exchange take place?
|
Between the client web browser and the server-side Steelhead.
|
Riverbed Deployment Guide, March 2011, Ch.12
|
|
|
In order to optimize SSL traffic after rebooting a Steelhead, what additional step is necessary?
|
Unlock the secure vault with the correct password.
|
Riverbed Deployment Guide, March 2011, Ch.12
|
|
|
Are CRLs used by default on the Steelhead?
|
No. (REVIEW)
|
Riverbed Deployment Guide, March 2011, Ch.12
|
|
|
What CLI command can be used to view CRL alarm status?
|
show stats alarm crl_error
|
Riverbed Deployment Guide, March 2011, Ch.12
|
|
|
If you want to size a Steelhead primarily for backup transfers to a remote site, and these backups are normally about 500 GB, with a 5-hour window each night for backups over a WAN link with a 1Mbps capacity, how much data reduction will be necessary?
|
500 GB / 5 hours * 8 bits * 1000 / 3600 sec. = 222Mbps required throughput; you would need 222x throughput, which is probably not possible and would require resizing the WAN link.
|
Riverbed Deployment Guide, March 2011, Ch.13
|
|
|
In data protection scenarios, what is the recommended setting for Steelhead appliance WAN buffers?
|
At least 2x BDP, in bytes.
|
Riverbed Deployment Guide, March 2011, Ch.13
|
|
|
How would you determine the recommended send/receive WAN buffer size if using a 50Mbps link with 60ms of latency for data protection?
|
First, determine BDP: 50Mb/s * 1000000b/Mb * .06s / 8 (bytes/bit) = 375,000 ; Then multply by two: 375,000*2 = 750,000 Byte buffer size.
|
Riverbed Deployment Guide, March 2011, Ch.13
|
|
|
How would you determine the packet queue-size on a WAN-side router if using a 50Mbps link with 60ms of latency assuming 1500 Byte packets?
|
First, determine BDP: 50Mbps * 1,000,000b/Mb * .06sec / 8 B/b = 375,000; Then divide the BDP in bytes by the packet size: 375,000 bytes / 1500 byte packets = 250 packets
|
Riverbed Deployment Guide, March 2011, Ch.13
|
|
|
How would you set the send and receive buffers on a Steelhead to 750000 using the CLI?
|
protocol connection wan send def-buf-size 750000
and protocol connection wan receive def-buf-size 750000 |
Riverbed Deployment Guide, March 2011, Ch.13
|
|
|
What CLI command can be used to configure the traffic ports that FCIP traffic will appear on?
|
protocol fcip ports <port-list>
|
Riverbed Deployment Guide, March 2011, Ch.13
|
|
|
What compression level is generally recommended for data replication?
|
1
|
Riverbed Deployment Guide, March 2011, Ch.13
|
|
|
What is the Steelhead terminology for its integrated virtual file server that allows you to store copies of files on the Steelhead with Windows file access?
|
Proxy File Services (PFS)
|
Riverbed Deployment Guide, March 2011, Ch.14
|
|
|
Are v2.x PFS shares upgraded automatically when you upgrade Steelhead appliance software?
|
No. PFS shares must be upgraded manually.
|
Riverbed Deployment Guide, March 2011, Ch.14
|
|
|
In v3.x PFS shares, do you need to install the RCU utility on a separate Windows host?
|
No. In v3.x and up, the RCU is not necessary and all RCU functionality has moved to the Steelhead itself.
|
Riverbed Deployment Guide, March 2011, Ch.14
|
|
|
What two access modes are possible when using PFS on the Steelhead?
|
Domain mode and Local Workgroup Mode
|
Riverbed Deployment Guide, March 2011, Ch.14
|
|
|
If you do not want the Steelhead to be a member of a domain, what PFS mode should you use?
|
Local Workgroup Mode
|
Riverbed Deployment Guide, March 2011, Ch.14
|
|
|
When using PFS, what file is created on the origin server to keep track of which Steelhead appliance owns the share?
|
._rbt_share_lock.txt
|
Riverbed Deployment Guide, March 2011, Ch.14
|
|
|
Can HS-TCP and Satellite Optimization be enabled on the Steelhead at the same time?
|
No.
|
Riverbed Deployment Guide, March 2011, Ch.15
|
|
|
What CLI command would be used to set satellite optimization mode to "Always"?
|
tcp sat-opt bw-est mode always
|
Riverbed Deployment Guide, March 2011, Ch.15
|
|
|
What CLI command can you use to check the settings of satellite optimization?
|
show tcp sat-opt settings
|
Riverbed Deployment Guide, March 2011, Ch.15
|
|
|
What five types of policies are available on a CMC?
|
Optimization policy, System Settings policy, Networking policy, Security policy, Branch services policy
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
In what two ways are specific policies assigned to Steelhead appliances in a group?
|
Inherited from a policy assignment in a parent group, or assigned and applied directly to Steelhead appliances in a group
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
When installing a CMC in an environment that already has Steelheads deployed, and group hierarchy is relatively flat, what is the best practice to create a policy on the CMC?
|
Create policy by importing Steelhead appliance settings, then modify the policy.
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
What CMC option, under Steelhead appliance properties, will ensure that the CMC does not modify the specified Steelhead appliance?
|
"Enable Branch Managed"
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
If CMC automatic registration is not working, what CLI command can be used to verify if autoregistration is enabled on the Steelhead?
|
show cmc
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
If the 'cmc hostname' command indicates that the hostname is correct, but autoregistration is not working, what CLI command can be used to check the nameservers on the Steelhead?
|
show host
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
What is the default CMC hostname, in regards to CMC autoregistration?
|
riverbedcmc
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
In what format do Steelhead appliance configurations such as SSL private keys and datastore encryption keys remain encrypted on the disk of the CMC?
|
AES-256
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
What happens if the CMC secure vault password is changed?
|
The secure vault will no longer unlock automatically at startup.
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
What configuration is necessary to enable the CMC to automatically unlock the Steelhead's secure vault when the Steelhead is rebooted?
|
Configure the secure vault password through the CMC change Secure Vault Password page.
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
In what situations does the CMC unlock the secure vault of a Steelhead?
|
When policy is pushed, network connectivity between Steelhead and CMC is restored, or the Steelhead is rebooted.
|
Riverbed Deployment Guide, March 2011, Ch.16
--------------- If the Secure Vault password on a Steelhead has been changed from the default, the password needs to be confiigured through the "CMC Change Secure Vault Password" page. |
|
|
What step is necessary on the CMC in order to fetch licenses from the Steelhead?
|
The "Fetch Appliance Configuration" button must be used.
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
Are RSP packages transferred from the CMC upon policy push?
|
No. The RSP package transfer should be scheduled during maintenance periods.
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
Does Virtual Steelhead support RSP?
|
No.
|
Riverbed Deployment Guide, March 2011, Ch.16
Virtual Steelhead Installation Guide v1.0, p.12 ------- Virtual Steelhead does not support: Riverbed Services Platform (RSP) Proxy File Service (PFS) Fail-to-Wire Hardware reports such as Disk Status Hardware-based alerts and notifications, such as RAID alarms |
|
|
Does Virtual Steelhead support PFS?
|
No
|
Riverbed Deployment Guide, March 2011, Ch.16
|
|
|
What incoming port must be allowed by client-side firewall software on a user's PC when using Steelhead Mobile?
|
7801
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
What processes must be allowed to run on the Steelhead Mobile PC?
|
rbtdebug.exe
rbtmon.exe rbtsport.exe rbtlogger.exe shmobile.exe |
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
What port is used to communicate between the Steelhead Mobile optimization software and the PC's TCP/IP kernel?
|
7801
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
What port is used to communicate between the Steelhead Mobile client and the remote Steelhead appliance, by default?
|
7800
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
If configuring Steelhead Mobile to establish optimized connections with server-side out-of-path Steelheads, what port must be open?
|
7810
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
What port is used by Steelhead Mobile to send statistics to Steelhead Mobile Controller?
|
7870
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
What ports are used between the Steelhead Mobile Controller and Steelhead Mobile clients for Mobile Client software upgrades?
|
80 and 443
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
What ports are used between the Steelhead Mobile Controller and Steelhead Mobile clients for uploads of sysdumps and tcpdump?
|
80 and 443
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
What is adapter-based location awareness?
|
Configuration of Steelhead Mobile Client that only optimizes traffic over specified adapters, for example only optimize over VPN adapters and not over LAN adapters.
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
What is Latency Detection Location Awareness?
|
Steelhead Mobile Client configuration that enables the clients to optimize data only if latency to the closest Steelhead appliance is greater than the threshold value.
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
What is the default threshold value for latency detection location awareness?
|
10ms
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
In what policy is the latency detection location awareness feature configured?
|
The acceleration policy.
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
What is true of fixed-target rules and location awareness?
|
Location awareness does not function when using fixed-target rules, since it relies on the probing function of auto-discovery.
|
Riverbed Deployment Guide, March 2011, Ch.17
|
|
|
Does per-command authorization work with the Web GUI?
|
No, per-command authorization works only with the CLI.
|
Riverbed Deployment Guide, March 2011, Ch.19
|
|
|
What CLI command can be used to show the average and maximum number of connections on the Steelhead for a given timeframe?
|
show stats connection <timeframe>
|
Riverbed Deployment Guide, March 2011, Ch.19
|
|
|
What is the minimum number of additional allowed connections (over the connection limit) for a Steelhead before admission control is triggered?
|
10
|
Riverbed Deployment Guide, March 2011, Ch.19
|
|
|
In terms of NetFlow, what is an Exporter?
|
A device configured to export raw flow data.
|
Riverbed Deployment Guide, March 2011, Ch.19
|
|
|
In terms of NetFlow, what is a Collector?
|
A device designed to aggregate the exported flow data, a Cascade appliance for example.
|
Riverbed Deployment Guide, March 2011, Ch.19
|
|
|
What Steelhead CLI command can be used to limit the number of alarms generated over a given period of time?
|
stats alarm <alarm-name> rate-limit count <threshold> <count>
|
Riverbed Deployment Guide, March 2011, Ch.19
|
|
|
What is the number one cause of poor performance issues with Steelhead deployments?
|
Duplex mismatches
|
Riverbed Deployment Guide, March 2011, Ch.20
|
|
|
If your network requires that clients have continuous access to some files, even in the event of a network disruption over the WAN, what solution might you use?
|
PFS
|
Riverbed Deployment Guide, March 2011, Ch.20
|
|
|
If you notice that you have an unknown Steelhead appliance listed in the current connections list, what can you do to prevent peering with that appliance?
|
Create a pass-through peering rule for the remote and local subnets.
|
Riverbed Deployment Guide, March 2011, Ch.20
|
|
|
What is a common cause of application access over the network not speeding up after implementing a Steelhead, while certain operations such as dragging and dropping speed up greately?
|
Old antivirus software (review)
|
Riverbed Deployment Guide, March 2011, Ch.20
|
|
|
What is the most common solution for packet ricochet?
|
Simplified routing.
|
Riverbed Deployment Guide, March 2011, Ch.20
|
|
|
What uses more CPU on the router, WCCP mask assignment or WCCP hash assignment?
|
Hash assignment.
|
Riverbed Deployment Guide, March 2011, Ch.20
|
|
|
What uses more CPU on the router, WCCP inbound redirection or WCCP outbound redirection?
|
outbound redirection, because the router has to use CPU cycles consulting the routing table before handling the traffic for WCCP redirection.
|
Riverbed Deployment Guide, March 2011, Ch.20
|
|
|
If copying files to a server via FTP is much faster than copying the same files to the same server via CIFS, what is a common cause?
|
SMB signing
|
Riverbed Deployment Guide, March 2011, Ch.20
-------------------------------------------------------------------------------- Because copying files via FTP is not slowed, the possibility of other network problems such as duplex mismatch is ruled out. |
|
|
What does the following error indicate: error=SMB_SHUTDOWN_ERR_SEC_SIG_ENABLED
|
SMB signing may be preventing optimization for a file share. Consider using AD to disable SMB signing for this resource.
|
Riverbed Deployment Guide, March 2011, Ch.20
|
|
|
What command can be used to display HS-TCP settings?
|
show tcp highspeed
|
Riverbed Deployment Guide, March 2011, Ch.20
|
|
|
What CLI command is used to enable HS-TCP?
|
tcp highspeed enable
|
Riverbed Deployment Guide, March 2011, Ch.20
|
|
|
In what deployment type(s) is QoS supported?
|
All deployment types.
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part III
Riverbed Deployment Guide, March 2011, p.102 ----- In RiOS 5.0, QoS was only supported in Physical In-Path deployments. However, in RiOS 6.x and higher, QoS is supported in all deployment types. |
|
|
What options are available for each QoS class?
|
latency priority, guaranteed bandwidth, Upper bandwidth, connection limit, and queue type
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part III
|
|
|
What are the five QoS priorities?
|
real-time, interactive, business critical, normal, and low
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part III
|
|
|
What is important to remember abount naming conventions in regard to the PFS share and origin-server share?
|
The share names cannot contain Unicode characters.
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part III
|
|
|
What is the major advantage of v3.x PFS shares vs. v2.x PFS shares?
|
v3.x PFS shares do not require the RCU service running on a Windows server.
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part III
|
|
|
On which interface of the Steelhead are NetFlow statistics collected?
|
On the ingress interface.
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part III
|
|
|
What encryption methods are supported for IPSec between Steelheads in 3.x?
|
DES or Null
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part III
|
|
|
What are the eight logging levels on a Steelhead?
|
Emergency, Alert, Critical, Error, Warning, Notice, Info, and Debug
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part IV
|
|
|
What CLI command is used to view system dump files on the Steelhead?
|
show files debug-dump
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part IV
|
|
|
What CLI command is used to create a system dump file?
|
debug generate dump
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part IV
|
|
|
What CLI command is used to upload a system dump to a remote host?
|
file debug-dump upload <filename> <url>
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part IV
|
|
|
What CLI command is used to enable the Steelhead service?
|
service enable
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part IV
|
|
|
What CLI command is used to inable in-path support?
|
in-path enable
|
RCSP Study Guide, Exam 199-01 for RiOS v5.0, Part IV
|
|
|
What versions of ESX(i) does Virtual Steelhead run on?
|
v4.0 or v4.1
|
Virtual Steelhead Installation Guide, Chapter 1
|
|
|
Does Virtual Steelhead support RSP packages?
|
No.
|
Virtual Steelhead Installation Guide, Chapter 1
|
|
|
Does Virtual Steelhead support disk status reports?
|
No.
|
Virtual Steelhead Installation Guide, Chapter 1
|
|
|
How many virtual CPUs are supported by ESX 4.0?
|
Eight.
|
Virtual Steelhead Installation Guide, Chapter 1
|
|
|
How many interfaces are supported in ESX 4.0?
|
Ten.
|
Virtual Steelhead Installation Guide, Chapter 1
|
|
|
When using Virtual Steelhead, for optimal performance, at least how fast should your LAN/WAN links be?
|
1 Gbps
|
Virtual Steelhead Installation Guide, Chapter 1
-------------------------------------------------------------------------------- For optimal performance, connect the LAN/WAN virtual interfaces to physical interfaces that are capable of at least 1 Gbps. |
|
|
When using Virtual Steelhead, how should you configure sharing of physical NICs?
|
NICs should not be shared when using Virtual Steelhead
|
Virtual Steelhead Installation Guide, Chapter 1
|
|
|
What CPU/memory overhead should be assumed for virtualization when moving from physical Steelheads to Virtual Steelheads?
|
5%
|
Virtual Steelhead Installation Guide, Chapter 1
|
|
|
What steps are necessary to install a Virtual Steelhead model other than model V250L?
|
Install V250L first, then upgrade it to a higher model.
|
Virtual Steelhead Installation Guide, Chapter 2
|
|
|
What do you need to purchase from Riverbed before you can add licenses to a Virtual Steelhead?
|
A token.
|
Virtual Steelhead Installation Guide, Chapter 2
|
|
|
Is it possible to downgrade from one model of Virtual Steelhead to a lower model?
|
No.
|
Virtual Steelhead Installation Guide, Chapter 2
|
|
|
When upgrading from a V1050L to a V1050M Virtual Steelhead, what components will need to be changed after the upgrade?
|
The license. (REVIEW)
|
Virtual Steelhead Installation Guide, Chapter 2
|
|
|
When upgrading from a V250L to a V550M Virtual Steelhead, what components may need to be changed?
|
Hardware modifications will be necessary on the VM, for example, an additional CPU, more memory, and additional disk space may be necessary. License will also need to be changed.
|
Virtual Steelhead Installation Guide, Chapter 2
|
|
|
What verson of VMWare server does RSP use?
|
VMWare Server v2.0
|
RSP User's Guide, Chapter 1
|
|
|
How many RSP services run at once on a Steelhead (maximum)?
|
Five.
|
RSP User's Guide, Chapter 1
|
|
|
Is there a 64-bit version of the RSP installation image?
|
Yes.
|
RSP User's Guide, Chapter 1
|
|
|
What tasks must be completed before installing an RSP package?
|
Install the RSP installation image and start the RSP service.
|
RSP User's Guide, Chapter 1
|
|
|
How many VNIs can a single RSP package have?
|
Up to ten.
|
RSP User's Guide, Chapter 1
|
|
|
What two rules are provided by RSP by default?
|
LAN-to-WAN rule, and WAN-to-LAN rule
|
RSP User's Guide, Chapter 1
|
|
|
What two watchdogs does RSP use?
|
Ping watchdog and Heartbeat watchdog
|
RSP User's Guide, Chapter 1
|
|
|
How much additional memory on the Steelhead is required by RSP?
|
At least 2 GB of additional memory.
|
RSP User's Guide, Chapter 2
|
|
|
When using the 'rsp package fetch' CLI command, what three protocols are supported to transfer the package?
|
FTP, SCP, and HTTP
|
RSP User's Guide, Chapter 2
Riverbed CLI Reference Manual, June 2011, p.456 -------------------------------------------------------------------------------- "rsp package fetch" is used to download the RSP package. |
|
|
What protocol must be used to fetch an RSP package greater than 2GB?
|
FTP or SCP
|
RSP User's Guide, Chapter 2
|
|
|
What CLI command will set slot priority for RSP slots?
|
rsp slot <slot-name> priority <priority-level>
|
RSP User's Guide, Chapter 2
|
|
|
What three priorities can you specify when choosing the priority for RSP slots?
|
high, normal, and low
|
RSP User's Guide, Chapter 2
|
|
|
What should you do before renaming an RSP slot?
|
Make sure that the slot is empty.
|
RSP User's Guide, Chapter 2
|
|
|
What should you do before uninstalling an RSP package from a slot?
|
Make sure that the slot is disabled.
|
RSP User's Guide, Chapter 2
|
|
|
What CLI commands would you use to disable slot "testslot" and then uninstall the package from that slot?
|
no rsp slot testslot enable ; rsp slot testslot uninstall confirm
|
RSP User's Guide, Chapter 2
|
|
|
When you use the 'rsp package delete <package-name>' command, what happens to the slot that the RSP package was installed in?
|
Nothing. The package remains installed in that slot.
|
RSP User's Guide, Chapter 2
|
|
|
What CLI command can be used to obtain the slot URL of a RSP slot?
|
show rsp slot <slot-name>
|
RSP User's Guide, Chapter 2
|
|
|
What CLI command can be used to verify your system meets RSP requirements?
|
show rsp
|
RSP User's Guide, Chapter 2
--------- Example: bravo-sh185 (config) # show rsp Supported: Yes Installed: No Enabled: No Disk Space: 3.21 GB used / 50.93 GB free / 54.14 GB total Memory: 0 MB used / 2048 MB free / 2048 MB total |
|
|
What two forms of monitoring are supported by RSP watchdog?
|
Ping monitoring, and heartbeat monitoring.
|
RSP User's Guide, Chapter 2
|
|
|
What CLI command would set up the ping watchdog to ping an RSP in slot testslot every 15 seconds?
|
rsp slot testslot watchdog ping interval 15
|
RSP User's Guide, Chapter 2
|
|
|
What CLI command would set up the ping watchdog to ping an RSP in slot "testslot" at IP 1.1.1.1?
|
rsp slot testslot watchdog ping ip 1.1.1.1
|
RSP User's Guide, Chapter 2
-------------------------------------------------------------------------------- The rsp slot <slot-name> command prefix is used to modify configuration of the RSP parameters on a specific RSP slot. watchdog ping ip <ip-address> is the specific configuration that needs to be enabled on the slot in order to configure the ping watchdog. |
|
|
What CLI command would set up the ping watchdog to wait 25 seconds for a ping response from an RSP in slot testslot before assuming a VM has failed?
|
rsp slot testslot watchdog ping timeout 25
|
RSP User's Guide, Chapter 2
|
|
|
What CLI command would enable the heartbeat watchdog to monitor an RSP at slot testslot?
|
rsp slot testslot watchdog heartbeat enable
|
RSP User's Guide, Chapter 2
|
|
|
What CLI command would enable reboot-on-fail for an RSP in slot 1?
|
rsp slot 1 watchdog slot-reboot enable
|
RSP User's Guide, Chapter 2
|
|
|
What CLI command would configure a 60 second startup grace period for the RSP in slot 1?
|
rsp slot 1 watchdog startup grace-period 60
|
RSP User's Guide, Chapter 2
|
|
|
What CLI command would configure fail-to-block on an RSP in slot 1?
|
rsp slot 1 watchdog block
|
RSP User's Guide, Chapter 2
|
|
|
Which Steelhead models do not support Windows Server 2008 R2 on RSP since they do not incorporate Virtual Technology (VT) support?
|
250, 550, and 1U xx20 models.
|
RSP User's Guide, Chapter 2
|
|
|
If SMB signing is enabled, or an oplock is lost what happens to CIFS optimization?
|
It is disabled automatically.
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
Is CIFS overlapping open optimization enabled by default?
|
No.
|
RCSP Prep 5.0 Powerpoint: General Knowledge
Riverbed Deployment Guide, March 2011, Chapter 11. -------------------------------------------------------------------------------- This feature enables better performance with applications that perform multiple, simultaneous opens on the same file (for example, some CAD applications). Simultaneous opens cause all clients to lose oplocks on the opened files. Use Overlapping Open Optimization for applications or CIFS clients that do not request oplocks when opening a file. By default, this setting is disabled. You should enable this option only for the specific applications or environments where a client requests multiple opens or do not request oplocks. -------------------------------------------------------------------------------- |
|
|
What two file extensions are in the "Do Not Optimize the Following Extensions" list for CIFS optimization, by default?
|
LDB and MDB
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
When dealing with MAPI optimization, is Kerberos a supported authentication scheme?
|
No.
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
For how long are optimized MAPI connections held open after client exit, by default?
|
96 hours?
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
Does MAPI prepopulation require additional Client Access Licenses (CALs)?
|
No, it uses existing credentials and holds existing connections open.
|
RCSP Prep 5.0 Powerpoint: General Knowledge
Riverbed Deployment Guide, March 2011, p.294 -------------------------------------------------------------------------------- MAPI-Prepopulation does not use any additional Client Access Licenses (CALs). The Steelhead appliance holds open an existing unauthenticated MAPI connection after Outlook is shut down. No user credentials are used or saved by the Steelhead appliance when performing prepopulation. |
|
|
In order for MS-SQL optimization to function, in what format must the MS-SQL packets be carred?
|
TDS
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
What is port 7744?
|
Datastore sync port
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
What is port 7800?
|
In-path port
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
What is port 7801?
|
NAT (TCP Proxy) port
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
What is port 7810?
|
Out-of-path (SSOoP) port
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
What is port 7820?
|
Failover (Serial cluster) port
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
What is port 7830?
|
MAPI Exchange 2003 port
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
What is port 7840?
|
Exchange Director NSPI port
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
What is port 7850?
|
TCP connection forwarding (neighbor) port
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
What is port 7860?
|
Interceptor Appliance port
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
What is port 7870?
|
Steelhead mobile port.
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
What four optimization policies can be configured in auto-discover and pass-through peering rules?
|
Normal, SDR-only, Compression-only, and None
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
How many in-path interfaces can a 1U Steelhead have?
|
Four.
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
How many in-path interfaces can a 3U Steelhead have?
|
Ten.
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
How many in-path interfaces can a desktop Steelhead have?
|
One.
|
RCSP Prep 5.0 Powerpoint: General Knowledge
|
|
|
For WCCP deployments, is "redirect in" or "redirect out" recommended?
|
redirect in
|
RCSP Prep 5.0 Powerpoint: Logical In-Path Configurations
|
|
|
What commands are necessary on the sending and receiving Steelheads in order to manually synchronize the datastore?
|
Receiving: # datastore receive port x
Sending: # datastore send addr x.x.x.x port x |
RCSP Prep 5.0 Powerpoint: High Availability
|
|
|
By default, how long does an entry remain in the asymmetric routing table?
|
24 hours.
|
RCSP Prep 5.0 Powerpoint: Verifying the Installation
|
|
|
Can you remove "local" from the authentication methods list?
|
No.
|
RCSP Prep 5.0 Powerpoint: Verifying the Installation
|
|
|
On what Steelhead should a QoS rule for passive FTP be placed, and what port should it specify?
|
Client-side Steelhead, destination port 20.
|
RCSP Prep 5.0 Powerpoint: Features
|
|
|
On what Steelhead should a QoS rule for active FTP be placed, and what port should it specify?
|
Server-side Steelhead, source port 20
|
RCSP Prep 5.0 Powerpoint: Features
|
|
|
What version of NetFlow is supported by the Steelhead?
|
Version 5
|
RCSP Prep 5.0 Powerpoint: Features
|
|
|
On what interface is NetFlow data collected?
|
The ingress interface.
|
RCSP Prep 5.0 Powerpoint: Features
|
|
|
Does NetFlow use TCP or UDP?
|
UDP.
|
RCSP Prep 5.0 Powerpoint: Features
|
|
|
By default, after how long does the Steelhead export NetFlow statistics on an active flow?
|
30 minutes.
|
RCSP Prep 5.0 Powerpoint: Features
|
|
|
By default, after how long does the Steelhead export NetFlow statistics on an inactive flow?
|
15 seconds.
|
RCSP Prep 5.0 Powerpoint: Features
|
|
|
By default, after how long does the Steelhead export NetFlow statistics on flow that receives a FIN or RST?
|
Immediately.
|
RCSP Prep 5.0 Powerpoint: Features
|
|
|
Can pass-through data be encrypted at the Steelhead using IPSec?
|
No, only optimized data.
|
RCSP Prep 5.0 Powerpoint: Features
|
|
|
What information is necessary to register a Steelhead with the CMC?
|
Appliance serial number and username/password of admin account on appliance.
|
RCSP Prep 5.0 Powerpoint: CMC Overview
|
|
|
If using defaults, what name must be DNS resolvable by the Steelhead for CMC auto-configuration to work?
|
riverbedcmc
|
RCSP Prep 5.0 Powerpoint: CMC Overview
|
|
|
What are the two most common causes of connectivity issues with fail-to-wire deployments?
|
Incorrect cabling, or speed mismatches on the LAN/WAN interfaces.
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What is the most common issue when a loss of connectivity over 45 seconds occurs after transitioning to fail-to-wire mode?
|
Spanning tree protocol is blocking the port.
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What is the likely cause if you cannot ping the in-path IP address of a Steelhead on a trunk link?
|
Steelhead in-path interface is not configured with the proper VLAN.
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What is the likely cause if traffic is optimized in one direction but not in the other direction?
|
WAN/LAN ports are switched.
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What is the most likely cause if auto-discovery is not functioning?
|
TCP options are being stripped.
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What do messages like this: "[intercept/localkernel/icore.c:1463] nat_check: SYN packet for already natted connection 192.168.73.15:1611 -> 192.168.208.12:80 ==> 192.168.72.9:7801" normally indicate?
|
Packet Ricochet
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What is the SMB signing default for domain controllers and member servers?
|
OFF for member servers, ON for domain controllers
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will restart optimization?
|
restart
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
Riverbed CLI Reference Manual, June 2011, p.124 -------------------------------------------------------------------------------- Furthermore, "restart clean" will restart the optimization service and clear the data store. |
|
|
What CLI command will reboot the Steelhead?
|
reload
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will restart optimization and clear the segstore?
|
restart clean
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will shutdown the Steelhead?
|
reload halt
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will show the version of RiOS software?
|
show version
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will display the RiOS boot image?
|
show bootvar
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will display available RiOS images?
|
show images
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will display information about interface inpath0_0?
|
show interfaces inpath0_0
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will display HS-TCP settings?
|
show tcp highspeed
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will clear all statistic counters?
|
stats clear-all
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will clear the hardware-related error log?
|
clear hardware error-log
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will display IPSec connections?
|
show ip security
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command gives health, uptime, model, and version information?
|
show info
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will set the local logging level?
|
logging local <x>
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What CLI command will set the syslog trap level?
|
logging trap <x>
|
RCSP Prep 5.0 Powerpoint: Steelhead Troubleshooting
|
|
|
What port must be open for local loopback in order for Steelhead Mobile to function?
|
7801
|
RCSP Prep 5.0 Powerpoint: Steelhead Mobile
|
|
|
Where are traces from the rbtdebug.exe command stored by default?
|
C:\Documents and Settings\All Users\Application Data\Riverbed\Steelhead_mobile\log\trace
|
RCSP Prep 5.0 Powerpoint: Steelhead Mobile
|
|
|
What settings are controlled by endpoint policy in Steelhead Mobile?
|
Endpoint-specific information such as datastore size, and mobile controller IPs for that client to use
|
RCSP Prep 5.0 Powerpoint: Sample Questions
|
|
|
Using QoS on the Steelhead provides service to traffic in what direction?
|
egress
|
RCSA-W Blueprint
|
|
|
In what two scenarios are in-path rules referenced?
|
When a SYN packet arrives on the LAN interface of a physical in-path deployment, or when a SYN packet arrives on the WAN interface of a virtual in-path deployment.
|
Steelhead Management Console User's Guide v6.1.2, Chapter 2
|
|
|
How many peers per Steelhead appliance are supported? (Maximum)
|
20,000
|
Steelhead Management Console User's Guide v6.1.2, Chapter 2
|
|
|
What datastore encryption types are available?
|
None, AES_128, AES_192, AES_256.
|
Steelhead Management Console User's Guide v6.1.2, Chapter 2
|
|
|
Over what port(s) can datastore synchronization take place?
|
Primary or auxiliary only.
|
Steelhead Management Console User's Guide v6.1.2, Chapter 2
|
|
|
What are the default values for the WAN send and receive buffers?
|
262140
|
Steelhead Management Console User's Guide v6.1.2, Chapter 2
|
|
|
What two datastore replacement policies are available?
|
FIFO, or Riverbed LRU
|
Steelhead Management Console User's Guide v6.1.2, Chapter 2
|
|
|
What is the default datastore replacement policy?
|
Riverbed LRU -- replace the least recently used data in the datastore.
|
Steelhead Management Console User's Guide v6.1.2, Chapter 2
|
|
|
Can datastore synchronization be used when SDR-M is chosen for the Adaptive Data Streamlining mode?
|
No -- SDR-M performs data reduction entirely in memory, so there is no datastore to sync.
|
Steelhead Management Console User's Guide v6.1.2, Chapter 2
|
|
|
When using SDR-M, why isn't the "Clear the Datastore" option available?
|
SDR-M does not use the datastore disk.
|
Steelhead Management Console User's Guide v6.1.2, Chapter 2
|
|
|
What versions of Windows are supported by domain security on RiOS 6.1 in both native and mixed modes?
|
Windows 2000, Windows 2003 R2, Windows 2008, Windows 2008 R2
|
Steelhead Management Console User's Guide v6.1.2, Chapter 2
|
|
|
What type of encryption does the secure vault use?
|
AES-256
|
Steelhead Management Console User's Guide v6.1.2, Chapter 8
|
|
|
What is the new name for the Deployment ID/DID?
|
Group ID or GID
|
Steelhead Mobile Controller User's Guide v3.1, Chapter 1
|
|
|
Where is the Mobile Client datastore saved, by default?
|
%ALLUSERSAPPDATA%\Riverbed\Steelhead_mobile\Datastore
|
Steelhead Mobile Controller User's Guide v3.1, Chapter 1
|
|
|
Where is the Mobile Client install directory, by default?
|
%PROGRAMFILES%\Riverbed\Steelhead Mobile
|
Steelhead Mobile Controller User's Guide v3.1, Chapter 1
|
|
|
What type of mobile client policy contains in-path rules and optimization settings?
|
Acceleration policy
|
Steelhead Mobile Controller User's Guide v3.1, Chapter 3
|
|
|
What policy is assigned to endpoint clients if they are not assigned a different policy?
|
Initial policy
|
Steelhead Mobile Controller User's Guide v3.1, Chapter 3
|
|
|
What type of mobile client policy contains computer-specific software settings, such as data store size, and the Mobile Controller that the client connects to?
|
Endpoint policy
|
Steelhead Mobile Controller User's Guide v3.1, Chapter 3
|
|
|
What ports must be opened by your network firewall in order for Steelhead Mobile to function?
|
22, 80, 443, 7800, and 7870
|
Steelhead Mobile Controller User's Guide v3.1, Chapter 5
|
|
|
What command will reset a Steelhead to its factory defaults?
|
reset factory reload
|
Riverbed Solution 1781
|
|
|
What command will give a list of archived log files?
|
show log files
|
Riverbed CLI Reference Manual, Chapter 3
|
|
|
What command will display the current Steelhead log file?
|
show log
|
Riverbed CLI Reference Manual, Chapter 3
|
|
|
If the VPN tunnel used by your remote Steelhead Mobile clients is using ESP encapsulation, what type of pass-through rule do you need on the branch Steelhead to prevent optimization of the VPN tunnel?
|
You do not need one -- the Steelhead will not attempt to optimize the ESP traffic.
|
Riverbed Deployment Guide, March 2011, Chapter 17
|
|
|
If the VPN tunnel used by your remote Steelhead Mobile clients is using NAT traversal or TCP encapsulation, what type of pass-through rule do you need on the branch Steelhead to prevent optimization of the VPN tunnel?
|
A pass-through rule to prevent optimizing the port number used by the VPN traffic.
|
Riverbed Deployment Guide, March 2011, Chapter 17
|
|
|
What port is required for Steelhead Mobile local communication but will not leave the PC?
|
7801
|
Riverbed Deployment Guide, March 2011, Chapter 17
|
|
|
What ports are used between Steelhead Mobile Controllers and Steelhead Mobile Clients to perform Mobile Client software upgrades?
|
80/443
|
Riverbed Deployment Guide, March 2011, Chapter 17
|
|
|
If using two Mobile Controllers in a high availability configuration, what caveat is true of the signing CA certificates on the devices?
|
They must be identical.
|
Riverbed Deployment Guide, March 2011, Chapter 17
|
|
|
Briefly, what is the purpose of the Location Awareness feature of Steelhead Mobile?
|
To allow Steelhead Mobile Clients to detect when they are in a branch office with a Steelhead appliance.
|
Riverbed Deployment Guide, March 2011, Chapter 17
|
|
|
If you are using a remote access VPN solution which implements an Ethernet adapter driver to encrypt traffic, what Location Awareness method will probably work for you?
|
Adapter-Based Location Awareness
|
Riverbed Deployment Guide, March 2011, Chapter 17
|
|
|
If your Steelhead Mobile configuration uses fixed-target rules, what type of Location Awareness do you need to use?
|
Location awareness does not function with fixed-target rules, because it depends on the probing functionality of auto-discovery.
|
Riverbed Deployment Guide, March 2011, Chapter 17
|
|
|
For branch warming to occur, what type of location awareness must you use?
|
Latency-Based
|
Riverbed Deployment Guide, March 2011, Chapter 17
|
|
|
In the Steelhead Mobile connection list, what color will be used for the connection status icon if branch warming is working properly?
|
Blue.
|
Riverbed Deployment Guide, March 2011, p.462
-------------------------------------------------------------------------------- Blue indicates that branch warming is enabled, and that the Steelhead Mobile and server-side Steelhead appliance are optimizing data and sharing segments with the client-side Steelhead. Yellow indicates that the connection is optimized by the Steelhead Mobile but branch warming is not enabled. Green indicates that the connection is optimized but the Steelhead Mobile is not optimizing the data. Instead, the connection is optimized by the client-side Steelhead. The Steelhead Mobile will receive cold performance when it is outside the branch. Gray indicates that the connection is pass-through. |
|
|
What type of license keys are necessary for a Steelhead appliance that will be peering with a Steelhead Mobile client for SSL optimization?
|
Enhanced Cryptography license keys.
|
Riverbed Deployment Guide, March 2011, Chapter 17
-------------------------------------------------------------------------------- Enhanced Cryptography license keys are required for every Steelhead appliance that peers with a Mobile Client / Mobile Controller when performing Steelhead Mobile SSL optimization |
|
|
What port do WCCP routers use to communicate?
|
UDP 2048
|
|
|
|
Does WCCP support multicast?
|
Yes. WCCP protocol messages can be exchanged via a multicast group.
|
Riverbed Deployment Guide, March 2011, p.244
|
|
|
Does WCCP support multiple routers?
|
Yes. Up to 32 WCCP routers can be in a service group together.
|
Riverbed Deployment Guide, March 2011, p.219
|
|
|
How do you downgrade a Virtual Steelhead appliance?
|
You cannot downgrade a Virtual Steelhead appliance.
|
Virtual Steelhead Installation Guide v1.0, p.37
|
|
|
If you move to a new Steelhead model, how do you copy the datastore?
|
Datastore cannot be copied between Steelhead appliances of different models.
|
Riverbed Deployment Guide, March 2011, p.51
|
|
|
What virtualization platform does SMC-VE run on?
|
RSP
|
Riverbed Solution Number 49882
|
|
|
What is the maximum number of buckets used for WCCP mask assignment?
|
Mask assignment uses up to seven bits, for a maximum of 128 buckets (2^7=128)
|
Riverbed Deployment Guide, March 2011, p.249
|
|
|
What is the default setting for the order in which authentication policy is applied?
|
remote-first
|
Riverbed CLI Reference Manual, June 2011, p.157
|
|
|
Does WCCP support redirection on inbound traffic, outbound traffic, or both?
|
Both.
|
Riverbed Deployment Guide, March 2011, p.531
|
|
|
How do you set up datastore synchronization between two different Steelhead models?
|
This is not supported. Steelhead models must be the same in order to perform datastore synchronization.
|
Riverbed Deployment Guide, March 2011, p.51
|
|
|
What type of environments is SRDF appripriate for?
|
EMC's Symmetrix Remote Data Facility with DMX and VMAX storage arrays, when traffic is originated from GigE (RE ports)
|
|
|
|
At what time does the CMC perform backups of connected Steelhead appliances automatically, by default?
|
1:00AM
|
Riverbed Deployment Guide, March 2011, p.435
|
|
|
Can you view Connection History reports on the CMC?
|
Yes.
|
Central Management Console User's Guide v6.1, p.164
|
|
|
Can you view Bandwidth Optimization reports on the CMC?
|
Yes.
|
Central Management Console User's Guide v6.1, p.157
|
|
|
If you are using full or port transparency for your WAN visibility mode, what changes are made to the TCP packet to differentiate the optimized traffic from standard TCP traffic?
|
A TCP option field is added to the packet headers of optimized traffic.
|
Riverbed Deployment Guide, March 2011, p.59
-------------------------------------------------------------------------------- "When you use full or port transparency, Steelhead appliances add a TCP option field to the packet headers of optimized traffic. This TCP option field is sent between the Steelhead appliances. For transparency to work, this option must not be stripped off by intermediate network devices." |
|
|
What is the difference between the "show configuration" and "show configuration full" commands?
|
"show configuration full" displays entire device configuration, including all commands to set default settings. "show configuration" only displays the commands that set parameters to non-default values.
|
|
|
|
What command will disable the "lines 1-23" page prompts in the CLI?
|
no cli session paging enable
|
|
|
|
What CLI command will download a software image from a remote FTP server at ftp.image.com/image
|
image fetch ftp://ftp.image.com/image <local-filename>
|
Riverbed CLI Reference Manual, June 2011, p.122
|
|
|
Generally speaking, what five steps are necessary to upgrade a Steelhead from the CLI?
|
1) Fetch image from remote server.
2) Configure system to boot from different partition. 3) Reboot system 4) Perform image install 5) Write memory |
|
|
|
What command will install a new RiOS image called versionX to partition 1?
|
image install versionX 1
|
Riverbed CLI Reference Manual, June 2011, p.123
|
|
|
What command will configure the Steelhead to boot from partition 2 at next reload?
|
boot system 2
|
Riverbed CLI Reference Manual, June 2011, p.210
|
|
|
Does the "boot system 1" command take effect immediately?
|
No, a "reload" will need to be performed to force the system to boot from the partition specified in the "boot system" command.
|
|
|
|
What CLI command will show a list of saved TCP dump files?
|
show files tcpdump
|
Riverbed CLI Reference Manual, June 2011, p.140
|
|
|
What command will reboot the Steelhead and delete all information from the datastore?
|
reload clean
|
Riverbed CLI Reference Manual, June 2011, p.124
|
|
|
What command will display a list of generated sysdump files?
|
show files debug-dump
|
Riverbed CLI Reference Manual, June 2011, p.139
|
|
|
What command will display the content of a sysdump file called "debuggo"
|
show files debug-dump debuggo
|
Riverbed CLI Reference Manual, June 2011, p.139
|
|
|
What command would be used to change the Netflow active session export timer back to its default of 30 minutes?
|
ip flow-setting active_to 1800
|
Riverbed CLI Reference Manual, June 2011, p.272
|
|
|
What CLI command will return a Steelhead appliance to its factory defaults without performing a reboot?
|
reset factory
|
|
|
|
What field in a Netflow v5 flow record is used to determine if flow export information has been lost?
|
flow_sequence
|
|
|
|
What action should you take when you receive the following message:
[mapiserver.WARN] 23355{10.35.181.145:1742 10.1.10.110.141.47:1809} Resetting |
Nothing. This message is harmless.
|
Riverbed Solution Number: 1548
|
|
|
What CLI command will change the port used for Correct Addressing optimized traffic from its default to 8800?
|
service default-port 8800
|
Riverbed CLI Reference Manual, June 2011, p.214
|
|
|
What CLI command would you use to configure a connection forwarding scenario so that it takes about 33 seconds to detect a neighbor failure?
|
in-path neighbor keepalive interval 11
|
Three keepalives must be missed before a neighbor is deemed as "down".
|
|
|
By default, how many half-open connections per source IP address before additional connections from that source are passed through unoptimized?
|
4096
|
Central Management Console User's Guide v6.1, p.236
|
|
|
In the event of a Steelhead appliance crash, where in the file system are core files located?
|
/var/opt/tms/snapshots
|
Riverbed Solution Number: 374
|
|
|
Can a Steelhead belong to more than one group on the CMC?
|
Yes.
|
|
|
|
What tcpdump switch is used to write raw packets to file, rather than parsing and printing them out?
|
-w
|
|
|
|
What tcpdump switch is used to print the link-level header on each dump line?
|
-e
|
|
|
|
What command can be used to generate a fake TCP SYN packet, and is used to verify that a server-side Steelhead can be auto-discovered by the client-side Steelhead?
|
tproxytrace -i <inpath-interface> <server-ip>:<server-port>
|
|
|
|
What is the name of the default CMC group that all Steelhead appliances belong to, by default?
|
all
|
|
|
|
By default, on what ports will HTTP optimization be performed?
|
80 and 8080
|
|
|
|
What tcpdump switch will print each packet in hex?
|
-x
|
|
|
|
What command can be used to flood ping between a Steelhead appliance and a server to help check for duplex mismatches?
|
ping -f -I <in-path-ip> -s 1400 <client-ip>
|
|
|
|
What is the name of the TACACS+ local user service?
|
rbt-exec
|
|
|
|
What CLI command can be used to restart the configuration wizard?
|
configuration jump-start
|
|
|
|
What is indicated by the following log?
Log: Sep 13 20:59:16 gen-sh102 kernel: [intercept.WARN] it appears as though probes from 10.11.111.19 to 10.11.25.23 are being filtered. Passing through connections between these two hosts. |
Multi-SYN Retransmit
|
|
|
|
In Virtual In-Path environments, what is the default WCCP weight based on?
|
Steelhead appliance model.
|
|
|
|
What CLI command can be used to revert the active configuration to the last saved configuration?
|
configuration revert saved
|
|
|
|
For Sharepoint traffic in your enterprise, what are the recommended HTTP optimization settings for URL learning, Parse and Prefetch, and OPT?
|
URL Learning OFF
Parse and Prefetch ON OPT ON |
|
|
|
For SAP/Netweaver traffic in your enterprise, what are the recommended HTTP optimization settings for URL learning, Parse and Prefetch, and OPT?
|
URL Learning OFF
Parse and Prefetch OFF OPT ON |
|
|
|
For Microsoft CRM traffic in your enterprise, what are the recommended HTTP optimization settings for URL learning, Parse and Prefetch, and OPT?
|
URL Learning ON
Parse and Prefetch OFF OPT ON |
|
|
|
For Agile traffic in your enterprise, what are the recommended HTTP optimization settings for URL learning, Parse and Prefetch, and OPT?
|
URL Learning OFF
Parse and Prefetch OFF OPT ON |
|
|
|
For Pivotal CRM traffic in your enterprise, what are the recommended HTTP optimization settings for URL learning, Parse and Prefetch, and OPT?
|
URL Learning OFF
Parse and Prefetch ON OPT ON |
|
|
|
What are the full binary values for the seven CS classes?
|
CS1 = 001000
CS2 = 010000 CS3 = 011000 CS4 = 100000 CS5 = 101000 CS6 = 110000 CS7 = 111000 |
|
|
|
What is the decimal value for QoS class CS3?
|
24.
|
|
|
|
What CLI command can be used to avoid using GRE encapsulation for the traffic return path from the Steelhead?
|
wccp override-return route-no-gre
wccp override-return sticky-no-gre |
Riverbed Deployment Guide, p.222
|
|
|
What is the decimal value of DSCP class CS3?
|
24
|
|
|
|
What is the binary value of DSCP class CS3?
|
011 000
|
|
|
|
What is the decimal value of DSCP class AF42?
|
36
|
|
|
|
What is the binary value of DSCP class AF42?
|
100 100
|
|
|
|
What is the decimal value of DSCP class EF?
|
46
|
|
|
|
What is the binary value of DSCP class EF?
|
101 110
|
|
