VMware SD-WAN by VeloCloud 3.3 管理指南

需积分: 11 130 浏览量更新于2024-07-16 1 收藏 24.08MB PDF 举报

"velocloud-admin-guide-33.pdf 是VMware SD-WAN by VeloCloud的3.3版本管理指南，提供给管理员开始使用该技术的指导。文档可在VMware官方网站上找到最新的技术文档。" 本文档主要涵盖了以下知识点： 1. **VeloCloud新特性** (What's New in VeloCloud Version 3.3?) - 在这一章节中，用户可以了解到VeloCloud 3.3版本相对于之前版本的新功能和改进。具体的新特性包括但不限于性能提升、新功能添加、用户体验优化等，但具体内容需参考文档原文。 2. **目标读者** (Who Should Read This Document) - 本指南适合那些负责部署、管理和维护VMware SD-WAN by VeloCloud解决方案的网络管理员、IT专业人员以及对此技术感兴趣的人员。 3. **VeloCloud概述** (VeloCloud Overview) - 解释了VeloCloud解决方案的基本组件，包括硬件设备、软件服务等。 - 描述了VeloCloud的主要功能和能力，如智能路径选择、应用优化、广域网自动化等。 - 介绍了不同类型的网络拓扑结构，包括分支站点的拓扑布局。 - 讨论了不同的角色和权限级别，以及角色权限矩阵，帮助管理员理解如何分配和管理用户权限。 4. **关键概念** (Key Concepts) - 定义并解释了与VeloCloud系统相关的技术术语和概念，例如边缘设备、控制器、策略管理等。 - 列出了支持的调制解调器和SFP（小型可插拔收发器）型号，这对于硬件兼容性和网络连接至关重要。 5. **用户协议** (User Agreement (VCOLogin Screen)) - 用户在登录VCO（VeloCloud Orchestrator）时会遇到的用户协议，详细阐述了使用服务的条款和条件。 6. **登录VCO使用SSO for Enterprise User** - 说明了企业用户如何通过单点登录（Single Sign-On, SSO）接入VCO，简化身份验证过程。 7. **监控VCO** (Monitor the VCO) - 提供了监控VCO的不同方面，如导航面板、边缘设备监控、全局视图、概述、质量-of-Service (QoS)、传输、应用、源、目的地和业务优先级等。 - 监控功能可以帮助管理员实时了解网络状态，包括应用性能、带宽使用情况、延迟等关键指标。 8. **应用统计保留更新** (Application Stats Retention Updates) - 描述了应用统计信息的存储和更新策略，可能涉及到数据保留期限、统计刷新频率等。 9. **源和目的地** (Sources and Destinations) - 这部分详细介绍了如何跟踪和管理网络中的数据源和目的地，以便进行有效的流量管理和故障排查。这些知识点是管理员有效管理和优化VMware SD-WAN by VeloCloud网络的关键，通过深入理解和应用这些内容，可以确保网络的稳定运行和高效性能。

n Supported SFPs

Solution Components

This section describes VeloCloud solution components.

VeloCloud Edge

A thin “Edge” that is zero IT touch provisioned from the cloud for secured, optimized connectivity to your

apps and virtualized services. The VeloCloud Edges are zero-touch, enterprise-class devices or virtual

software that provide secure and optimized connectivity to private, public and hybrid applications;

compute; and virtualized services. VeloCloud Edges perform deep application recognition, application and

per-packet steering, on-demand remediation performance metrics and end-to-end quality of service

(QoS) in addition to hosting Virtual Network Function (VNF) services. An Edge pair can be deployed to

provide High Availability (HA). Edges can be deployed in branches, large sites and data centers. All other

network infrastructure is provided on-demand in the cloud.

The VeloCloud Orchestrator provides centralized enterprise-wide configuration and real-time monitoring,

as well as orchestrates the data flow into and through the SDWAN overlay network. Additionally, it

provides the one-click provisioning of virtual services across Edges, in centralized and regional enterprise

service hubs and in the cloud.

VeloCloud Gateways

VeloCloud’s network consists of gateways deployed at top tier network points-of-presence and cloud data

centers around the world, providing SDWAN services to the doorstep of SaaS, IaaS and cloud network

services, as well as access to private backbones. Multi-tenant, virtual Gateways are deployed both by

VeloCloud transit and cloud service provider partners. The gateways provide the advantage of an on-

demand, scalable and redundant cloud network for optimized paths to cloud destinations as well as zero-

installation applications.

A Cloud Edge may also be configured with VeloCloud Gateways to provide Internet inbound firewall

protection.

Capabilities

This section describes VeloCloud capabilities.

Dynamic Multi-path Optimization

VeloCloud Dynamic Multi-path Optimization is comprised of automatic link monitoring, dynamic link

steering and on-demand remediation.

VeloCloud Administration Guide

VMware, Inc. 16

Link Steering and Remediation

Dynamic, application aware per-packet link steering is performed automatically based on the business

priority of the application, embedded knowledge of network requirements of the application, and the real-

time capacity and performance of each link. On-demand mitigation of individual link degradation through

forward error correction, jitter buffering and negative acknowledgment proxy also protects the

performance of priority and network sensitive applications. Both the dynamic per-packet link steering and

on-demand mitigation combine to deliver robust, sub-second blackout and even brownout protection to

improve application availability, performance and end user experience.

Cloud VPN

Cloud VPN is a 1-click, site-to-site, VPNC-compliant, IPSec VPN to connect VeloCloud and Non-

VeloCloud Sites while delivering real-time status and the health of the sites. The Cloud VPN establishes

dynamic edge-to-edge communication for all branches based on service level objectives and application

performance. Cloud VPN also delivers secure connectivity across all branches with PKI scalable key

management. New branches join the VPN network automatically with access to all resources in other

branches, enterprise data centers, and 3rd party data centers, like Amazon AWS.

Multi-source Inbound QoS

VeloCloud classifies 2,500+ applications enabling smart control. Out-of-the-box defaults set the multi-

source inbound Quality of Service (QoS) parameters for different application types with IT required only to

establish application priority. Knowledge of network requirements for different application types, automatic

link capacity measurements and dynamic flow monitoring enables automation of QoS configurations and

bandwidth allocations.

Firewall

VeloCloud delivers stateful and context-aware (application, user, device) integrated application aware

firewall with granular control of sub-applications, support for protocol-hopping applications – such as

Skype and other peer-to-peer applications (e.g., disable Skype video and chat, but allow Skype audio).

The secure firewall service is user- and device OS-aware with the ability to segregate voice, video, data,

and compliance traffic. Policies for BYOD devices (such as Apple iOS, Android, Windows, and Mac OS)

on the corporate network are easily controlled.

Network Service Insertion

The VeloCloud Solution supports a platform to host multiple virtualized network functions to eliminate

single-function appliances and reduce branch IT complexity. VeloCloud service-chains traffic from the

branch to both cloud-based and enterprise regional hub services, with assured performance, security, and

manageability. Branches leverage consolidated security and network services, including those from

partners like Zscaler and Websense. Using a simple click-to-enable interface, services can be inserted in

the cloud and on-premise with application specific policies.

VeloCloud Administration Guide

VMware, Inc. 17

Activation

VeloCloud Edge appliances automatically authenticate, connect, and receive configuration instructions

once they are connected to the Internet in a zero-touch deployment. They deliver a highly available

deployment with VeloCloud Edge redundancy protocol and integrate with the existing network with

support for OSPF routing protocol and benefit from dynamic learning and automation.

Routing and Segmentation

Overlay Flow Control

The VeloCloud Edge learns routes from adjacent routers through OSPF and BGP. It sends the learned

routes to the Gateway/Controller. The Gateway/Controller acts like a route reflector and sends the

learned routes to other VeloCloud SD-WAN Edges. The Overlay Flow Control (OFC) enables enterprise-

wide route visibility and control for ease of programming and for full and partial overlay.

OSPF

VeloCloud supports inbound/outbound filters to OSPF neighbors, OE1/OE2 route types, MD5

authentication. Routes learned through OSPF will be automatically redistributed to the controller hosted in

the cloud or on-premise.

BGP

VeloCloud supports inbound/outbound filters and the filter can be set to Deny, or optionally adding/

changing the BGP attribute to influence the path selection, i.e. RFC 1998 community, MED, AS-Path

prepend, and local preference.

Segmentation

Network segmentation is an important feature for both enterprises and service providers. In the most

basic form, segmentation provides network isolation for management and security reasons. Most

common forms of segmentation are VLANs for L2 and VRFs for L3.

Typical Use Cases for Segmentation:

n Line of Business Separation: Engineering, HR etc. for Security/Audit

n User Data Separation: Guest, PCI, Corporate traffic separation

n Enterprise uses overlapping IP addresses in different VRFs

However, the legacy approach is limited to a single box or two physically connected devices. To extend

the functionality, segmentation information must be carried across the network.

VeloCloud enables end-to-end segmentation. When the packet traverses through the Edge, the Segment

ID is added to the packet and is forwarded to the Hub and cloud Gateway, allowing network service

isolation from the Edge to the cloud and data center. This provides the ability to group prefixes into a

unique routing table, making the business policy segment aware.

VeloCloud Administration Guide

VMware, Inc. 18

Routing

In Dynamic Routing, VeloCloud Edge learns routes from adjacent routers through OSPF or BGP. The

VeloCloud Orchestrator maintains all the dynamically learned routes in a global routing table called the

Overlay Flow Control. The Overlay Flow Control allows management of dynamic routes in the case of

"Overlay Flow Control sync" and "change in Inbound/Outbound filtering configuration." The change in

inbound filtering for a prefix from IGNORE to LEARN would fetch the prefix from the Overlay Flow Control

and install into the Unified routing table.

For more information, see Chapter 19 Configure Dynamic Routing with OSPF or BGP.

Business Policy Framework

Quality of Service (QoS), resource allocations, link/path steering, and error correction are automatically

applied based on business policies and application priorities. Orchestrate traffic based on transport

groups defined by private and public links, policy definition, and link characteristics.

Network Topologies

This section describes network topologies for branches and data centers.

Branches to Private Third Party (VPN)

Customers with a private data center or cloud data center often want a way to include it in their network

without having to define a tunnel from each individual branch office site to the data center. By defining the

site as a non-VeloCloud site, a single tunnel will be built from the nearest VeloCloud Gateway to the

customer’s existing router or firewall. All the VeloCloud Edges that need to talk to the site will connect to

the same VeloCloud Gateway to forward packets across the tunnel, simplifying the overall network

configuration and new site bring up.

VeloCloud simplifies the branch deployment and delivers enterprise great application performance or

public/private link for cloud and/or on-premise applications.

Branch Site Topologies

The VeloCloud service defines two three different typical branch topologies designated as Bronze and

Silver Bronze, Silver, and Gold. In addition, pairs of VeloCloud Edges can be configured in a High

Availability (HA) configuration at a branch location.

VeloCloud Administration Guide

VMware, Inc. 19

剩余430页未读，继续阅读

weixin_45957905

粉丝: 1
资源: 1

VMware SD-WAN by VeloCloud 3.3 管理指南

Vmware Velocloud SD-WAN三大组件部署官方文档.rar

Vmware Velocloud SD-WAN三大组件部署官方文档

PAN-OS-6.0-Admin-Guide.pdf

vsphere-esxi-vcenter-server-703-virtual-machine-admin-guide.pdf

dubbo.io 文档（dubbo-user-book.pdf、dubbo-dev-book.pdf、dubbo-admin-book.pdf）

dell EMC isilon存储OneFS-9-1-0-0-Web-Admin-guide.pdf（web端中文版管理员指南）

pmg-admin-guide.pdf

or-3.0-admin-guide.rar_OpenReports

pve-admin-guide-6.2.pdf

demo.laravel-admin.org：官方http：demo.laravel-admin.org网站的源代码

最新资源