Cisco GSS Configuration Guide (Software Version 1.1) - Setting Up Your GSS [Cisco ACE GSS 4400 Series Global Site Selector Appliances]

Table Of Contents

Setting Up Your GSS

Accessing the GSS CLI

Accessing the CLI Using a Direct Serial Connection

Enabling Remote Access on a GSS Device

Accessing the CLI Using a Remote Connection

Accessing the GSS CLI Using a Private and Public Key Pair

Performing Network Configuration of the GSS

Configuring the GSS Using the Setup Script

Configuring the GSS from the CLI

Configuring a Primary GSSM or Standby GSSM

Configuring a Global Site Selector

Logging Into the Primary GSSM Graphical User Interface

Creating and Modifying GSS Devices

Activating GSS Devices

Modifying GSS Device Configuration

Deleting GSS Devices

Global Server Load-Balancing Summary

Where to Go Next

Setting Up Your GSS

This chapter describes how to configure your GSS devices to connect to your network. This includes the initial network configuration of a GSS and the configuration of a primary or as a standby GSSM. Network connectivity is configured for each device using the GSS command-line interface (CLI).

This chapter contains the following major sections:

•Accessing the GSS CLI

•Performing Network Configuration of the GSS

•Creating and Modifying GSS Devices

•Global Server Load-Balancing Summary

For detailed instructions on command syntax and use of GSS CLI commands, refer to the Cisco Global Site Selector Command Reference.

Accessing the GSS CLI

You can access the GSS CLI by establishing a remote connection using Telnet or Secure Shell (SSH) from a PC or by a direct connection to the device using a dedicated terminal. If required for your SSH connection, you may also login to the GSS using an externally generated private and public key pair.

This section contains the following procedures:

•Accessing the CLI Using a Direct Serial Connection

•Enabling Remote Access on a GSS Device

•Accessing the CLI Using a Remote Connection

•Accessing the GSS CLI Using a Private and Public Key Pair

Accessing the CLI Using a Direct Serial Connection

To access the GSS CLI using a serial connection, establish a direct serial connection between your terminal and the GSS device. Once you are connected, you can use any terminal communications application to access the CLI. The following procedure uses HyperTerminal for Windows. For information on how to establish a serial connection with your device, refer to the Cisco Global Site Selector Hardware Installation Guide.

To access the GSS CLI using a direct serial connection:

1. Launch HyperTerminal. The Connection Description window appears.

2. Enter a name for your session in the Name field.

3. Click OK. The Connect To window appears.

4. From the drop-down list, choose the COM port to which the device is connected.

5. Click OK. The Port Properties window appears.

6. Set the port properties as follows:

•Baud Rate = 9600

•Data Bits = 8

•Flow Control = none

•Parity = none

•Stop Bits = 1

7. Click OK to connect.

8. Press Enter to display the CLI prompt.

Once a session is created, choose Save As from the File menu to save the connection description. Saving the connection description has the following two advantages:

•The next time you launch HyperTerminal, the session is listed as an option under Start > Programs > Accessories > HyperTerminal > Name_of_session. This option lets you reach the CLI prompt directly without going through the configuration steps.

•You can connect your cable to a different device without configuring a new HyperTerminal session. If you use this option, make sure that you connect to the same port on the new device as was configured in the saved HyperTerminal session. Otherwise, a blank screen appears without a prompt.

Enabling Remote Access on a GSS Device

To monitor the performance of your GSS devices and administer them once they are deployed, you must be able to access those devices. Accordingly, once you have basic network connectivity on your GSS device you may want to use the CLI to enable remote access to the device using the SSH, Telnet, or FTP protocols.

To enable SSH, Telnet, or FTP on your GSS device:

1. Enable privileged EXEC mode and then global configuration mode on the device. For example:
localhost.localdomain> enable
localhost.localdomain# config
localhost.localdomain(config)# 
2. From global configuration mode, use the enable command to activate the remote access protocol you need (SSH, Telnet, or FTP). For example, to enable SSH connections to the GSS device, you would enter the following command:
localhost.localdomain(config)# ssh enable
3. Repeat step 2 for each required remote access protocol using the ftp command and the telnet command.

Note To disable SSH, Telnet, or FTP, use the no form of the command.

4. Save your configuration changes to memory. For example:
localhost.localdomain(config)# copy running-config startup-config
5. Exit global configuration mode.
localhost.localdomain(config)# exit
localhost.localdomain#
Accessing the CLI Using a Remote Connection

To access the GSS CLI using a remote connection, use Telnet or Secure Shell (SSH) from a PC. In a single Telnet or SSH session, you cannot connect to more than one device. You can, however, have several Telnet or SSH sessions running in parallel for different devices. Be sure you enable Telnet or SSH as described in the "Enabling Remote Access on a GSS Device" section.

Note We recommend using SSH connections because SSH lets you communicate securely over insecure channels and provides strong authentication.

You must have physical access to the GSS device to setup remote access by Telnet or SSH connection. Refer to the Cisco Global Site Selector Hardware Installation Guide for instructions on connecting a console cable to your Cisco Global Site Selector series hardware.

To access the GSS CLI using your preferred SSH or Telnet client:

1. Enter the host name or IP address of the GSS device (Global Site Selector or Global Site Selector Manager).

2. Specify your GSS administrative username and password to log on to the GSS device.

Once you have logged on remotely, use the CLI commands described in this document and in the Cisco Global Site Selector Command Reference.

Accessing the GSS CLI Using a Private and Public Key Pair

The GSS supports remote login to the device over an SSH session using private and public key pairs for authentication. In this method of remote connection, you use a generated private/public key pair to participate in a secure communication by encrypting and decrypting messages. Use of a private and public key pair bypasses the normal username and password authentication process. This remote access method may be useful when running scripts that connect to the GSS automatically.

You generate the private key and the corresponding public key as a key pair on a server separate from the GSS and then copy the public key to the GSS /home directory.

To access the GSS CLI using a private and public key pair:

1. Generate the SSH private key and the corresponding SSH public key as a key pair on a server separate from the GSS. Refer to the documentation included with the SSH software for details on generating the private and public key pair.

2. Enable privileged EXEC mode. For example:
localhost.localdomain> enable
3. Use the scp command to securely copy the generated public key from the server to the GSS /home directory. For example:
localhost.localdomain# scp myusername@1myhost:~/mykey.pub .
myusername@1myhost password:
mykey.pub 100% |*****************************| 241 00:00
4. Use the type command to append the public key to the /home/.ssh/authorized_keys file. The /home/.ssh/authorized_keys file is a special file that the GSS software looks for when authenticating public/private keys. For example:
localhost.localdomain# cd .ssh
localhost.localdomain# type ../mykey.pub >> authorized_keys
5. Activate an SSH session from the remote host to the GSS using the private key. For example, on most Unix systems you would enter the following command line:
ssh -i private.key gss.cisco.com
Performing Network Configuration of the GSS

When setting up your GSS, log in directly to the CLI on the GSS device and configure the following basic setup configuration functions for the device:

•Specify a hostname for the GSS device

•Configure Ethernet 0 and Ethernet 1

•Configure a default gateway

•Enter the IP addresses of the name servers (up to 8)

•Configure a remote access protocol (FTP, Telnet, or SSH) so you can administer the GSS device remotely in the future.

Depending on your network requirements for the GSS device, make your configuration of GSSM (primary and standby) and GSS based on the following information:

•Primary GSSM—The primary GSSM performs content routing as well as centralized management functions for the GSS network. The primary GSSM serves as the organizing point of the GSS network, hosting the embedded GSS database that contains configuration information for all your GSS resources, such as individual GSSs and DNS rules. Other GSS devices report their status to the primary GSSM. The primary GSSM offers a single, centralized GUI for monitoring and administering your entire GSS network.

•Standby GSSM—The standby GSSM performs GSLB functions for the GSS network even while operating in standby mode. In addition, the standby GSSM can be configured to act as the GSSM should the primary GSSM need to go offline for repair or maintenance, or becomes unavailable to communicate with other GSS devices. As with the primary GSSM, the standby GSSM is configured to run the GSSM GUI and contains a duplicate copy of the embedded GSS database that is currently installed on the primary GSSM. Any configuration or network changes affecting the GSS network are synchronized between the primary and the standby GSSM. The standby GSSM can be enabled as the primary GSSM using the gssm standby-to-primary CLI command.

Note The switching of roles between the designated primary GSSM and the standby GSSM is intended to be a temporary GSS network configuration until the original primary GSSM is back online. Once the original primary GSSM is available, reassign the two GSSMs to their original roles in the GSS network as described in Chapter 9, GSS Administration and Troubleshooting, the "Logically Removing a GSS or Standby GSSM from the Network" section.

•GSS—The GSS performs routing of DNS queries based on DNS rules and conditions configured using the primary GSSM. Each GSS is known to and synchronized with the GSSM, but individual GSSs do not report their presence or status to one another. Each GSS on your network delegates authority to the GSSs that serve DNS requests. Each GSS is managed separately using the Cisco CLI. GUI support is not available on a GSS device.

A typical GSS deployment may contain up to eight GSS devices on a corporate intranet or the Internet. At least one GSS—and no more than two GSSs—must be configured as GSSMs. The primary GSSM monitors the other GSS devices on the network and offer features for managing and monitoring request routing services using a GUI accessible through secure HTTP. Only one primary GSSM can be "active" at any time, with the second GSSM serving as a "standby," or backup device.

Network configuration requires that you enter into privileged EXEC mode on the CLI, so your login must have adequate permissions to do so.

After you enable your GSSM and GSS devices, use the primary GSSM to activate each device on your network. See the "Creating and Modifying GSS Devices" section for more information.

This section includes the following procedures:

•Configuring the GSS Using the Setup Script

•Configuring the GSS from the CLI

•Configuring a Primary GSSM or Standby GSSM

•Configuring a Global Site Selector

•Logging Into the Primary GSSM Graphical User Interface

Configuring the GSS Using the Setup Script

When you boot the Cisco Global Site Selector platform for the first time and the system boots without a startup-configuration file, a setup script automatically runs to quickly guide you through the process of initially configuring the GSS.

To configure the GSS from the setup script:

1. If you have not already done so, power on and boot the GSS (as described in the Cisco Global Site Selector Hardware Installation Guide).

2. At the Do you want to continue? (y/n) [no]: prompt type y to continue (or press Enter to accept the default of No and bypass running the setup script).

If you chose to bypass the setup script, you can either:

•Manually configure the GSS from the CLI as described in the "Configuring the GSS from the CLI" section.

•Use the setup CLI command at a later point in time to configure basic configuration information (as described in this procedure).

Note The setup command cannot be executed while the GSS is running. You must issue the gss stop command before executing the setup command.

3. At the Hostname prompt, specify a qualified hostname for the GSS device. For example:
Enter the Hostname of this device: gssm1.yourdomain.com
4. At the Interface eth0 and eth1 prompts, specify the IP address and subnet mask for each interface to be used on the GSS device. For example:
* Interface eth1 (Inactive)
Do you want to change this? (y/n) [n]: y
Do you want to activate this interface? (y/n) [n]: y
Enter the IP address: 192.168.1.3
Enter the netmask: 255.255.255.0
Once you run the setup script there are additional configuration parameters that you can specify for each Ethernet interface using the interface ethernet CLI command (such as the autosense, duplex, and speed options). Refer to the Cisco Global Site Selector Command Reference for detailed information on the interface ethernet command.

5. At the default gateway prompt, enter gateway information for the GSS device. For example:
Do you want to configure a default gateway? (y/n) [y]: 
Enter the default gateway [10.86.208.1]: 10.89.12.100
6. At the Name Servers prompt, configure the domain name server or servers to be used by the GSS device. You can enter individual addresses or specify up to eight name servers in a list. Enter a dash ('-') at a blank entry to instruct the GSS to stop requesting name servers. For example:
Enter the IP addresses for up to 8 Name Servers.
Enter a dash ('-') at a blank entry to stop entering Name Servers.
At least one Name Server is required for this setup script.
Enter Name Server 1 [161.44.124.122]: 168.10.12.1
Enter Name Server 2: 192.168.1.2
Enter Name Server 3: -
7. At the Remote Access prompt, activate the remote access protocol required for the GSS device. For example:
* Remote Access
Do you want to enable FTP access? (y/n) [y]: n
Do you want to enable Telnet access? (y/n) [n]: y
Do you want to enable SSH access? (y/n) [y]: y
8. The setup script prompts you through a series of questions about configuring the device as a GSSM (primary or standby) or as a GSS. Perform one of the following actions:

–If you want to configure the device as the primary GSSM:

a. At the Do you want to configure this GSS as a Manager (gssm)? (y/n) [y]: prompt type y (or press Enter).

b. At the Do you want to configure this GSSM as the Primary? (y/n) [y]: prompt type y (or press Enter).

–If you want to configure the device as the standby GSSM:

a. At the Do you want to configure this GSS as a Manager (gssm)? (y/n) [y]: prompt type y (or press Enter).

b. At the Do you want to configure this GSSM as the Primary? (y/n) [y]: prompt type n.

c. At the Enter the Hostname or IP address of the Primary GSSM [192.168.3.4]: prompt specify the hostname or IP address of the primary GSSM for your network.

–If you want to configure the device as a GSS:

a. At the Do you want to configure this GSS as a Manager (gssm)? (y/n) [y]: prompt type n.

b. At the Enter the Hostname or IP address of the Primary GSSM [192.168.3.4]: prompt specify the hostname or IP address of the primary GSSM for your network.

9. When completed, the software prompts you to perform one of the following:

–Apply as the Running Configuration—Applies setup configuration changes to the running-configuration file.

–Edit This Configuration—Return to the beginning of setup and edit specific configuration information.

–Discard Configuration and Quit Setup—Cancel making initial configuration changes.

Once configuration setup is complete, the GSS software prompts you to log into the primary GSSM GUI and finish device setup (as described in the "Logging Into the Primary GSSM Graphical User Interface" section).

Configuring the GSS from the CLI

To configure the GSS from the CLI:

1. If you have not already done so, power on and boot the GSS (as described in the Cisco Global Site Selector Hardware Installation Guide).

2. Log on to the CLI, following the instructions in "Accessing the GSS CLI". The GSS CLI prompt appears.

By default, the hostname for GSS devices is localhost.localdomain. This name changes once you configure the hostname for the device.

3. Enable privileged EXEC mode and then global configuration mode on the device. For example:
localhost.localdomain> enable
localhost.localdomain# config
localhost.localdomain(config)# 
4. Configure a qualified hostname and default gateway information for the GSS device. For example:
Host(config)# hostname gssm1.yourdomain.com
gssm1.yourdomain.com(config)# ip default-gateway 10.89.12.100
5. From global configuration mode, enter interface configuration mode and configure the attributes of GSS interface Ethernet 0 or Ethernet 1. Each GSS device contains two Ethernet interfaces, 0 and 1. For example:
gssm1.yourdomain.com(config)# interface ethernet 0
gssm1.yourdomain.com(config-eth0)# speed 100
gssm1.yourdomain.com(config-eth0)# duplex full
Refer to the Cisco Global Site Selector Command Reference for detailed information on the interface ethernet command.

Note Interface commands cannot be executed while the GSS is running (for example, serving DNS requests). You must issue the gss stop command before executing the interface ethernet command.

6. Use the gss-communications command to configure a GSS Ethernet interface as the designated network interface for GSS device communications. For example:
gssm1.yourdomain.com(config-eth0)#gss-communications
Note Interface commands cannot be executed while the GSS is running (for example, serving DNS requests). You must issue the gss stop command before executing the gss-communications command.

7. Configure the IP address and subnet mask that are to be used by the interface. For example:
gssm1.yourdomain.com(config-eth0)# ip address 10.89.3.24 
255.255.255.0
gssm1.yourdomain.com(config-eth0)# exit
gssm1.yourdomain.com(config)#
8. Configure the domain name server or servers to be used by the GSS device. You can enter individual addresses or specify up to eight name servers using a comma-separated or space-separated list. For example:
gss1.yourdomain.com(config)# ip name-server 128.10.12.1
gss1.yourdomain.com(config)# ip name-server 128.100.12.1, 
128.110.12.1
9. Save your configuration changes to memory. For example:
gssm1.yourdomain.com(config)# copy running-config startup-config
The next step is to configure the device as either a GSSM (primary or standby) or as a GSS:

•If configuring the device as a GSSM (primary or standby), proceed to the "Configuring a Primary GSSM or Standby GSSM" section.

•If configuring the device as a GSS, proceed to the "Configuring a Global Site Selector" section.

Configuring a Primary GSSM or Standby GSSM

Before you begin configuring request routing or adding GSSs to your GSS network, you must first configure a primary GSSM with which the individual GSSs will be associated.

When configuring a GSSM, you need to configure both the network connectivity of the GSSM as well as the embedded GSS database that resides on the GSSM and holds GSS device and network configuration information. You must also indicate whether the GSSM serves as the primary or redundant (standby) manager.

To configure a GSS device to function as either a primary GSSM or a standby GSSM:

1. If you have not already done so:

a. Log on to the CLI (see the "Accessing the GSS CLI" section).

b. At the CLI prompt, enable privileged EXEC mode and then global configuration mode on the device. For example:
localhost.localdomain> enable
localhost.localdomain# config
localhost.localdomain(config)# 
c. Ensure the GSS is properly configured (see either the "Configuring the GSS Using the Setup Script" section or the "Configuring the GSS from the CLI" section).

2. Perform one of the following steps:

–If this GSSM is to be the primary (default) routing manager for your GSS network, use the gss enable gssm-primary command to enable your GSS device and make it the primary GSSM. For example:
gssm1.yourdomain.com# gss enable gssm-primary
Note If a database already exists on this GSS device an error message appears. Use the gss disable command to disable the selected GSS device and remove any existing configuration, including deleting the GSSM database from the GSS device. This option returns the GSS device to the initial, disabled state.

–If this GSSM is to be a standby (backup) GSSM for your GSS, use the gss enable gssm-standby command to place the GSSM in standby mode and associate it with the DNS name or IP address of the primary GSSM. The standby GSSM is intended to be a backup device to be used on a temporary basis until the primary GSSM can come back online. For example:
gssm1.yourdomain.com# gss enable gssm-standby 192.168.1.110
Note You must have a primary GSSM configured and enabled before you can enable a standby GSSM.

3. Save your configuration changes to memory. For example:
gssm1.yourdomain.com# copy running-config startup-config
If you fail to save your configuration changes, the GSS device reverts to its previous settings upon a reboot.

For the primary GSSM, you can now access the GUI using your preferred web browser by pointing that browser to the URL of the primary GSSM. See the "Logging Into the Primary GSSM Graphical User Interface" section for details.

After enabling the primary GSSM GUI, you can use it to activate each GSS device on your network. See the "Creating and Modifying GSS Devices" section.

If, at a later point, you need to move the primary GSSM or you want to take it offline for repair or maintenance, the standby GSSM is capable of temporarily taking over the role as the primary GSSM until the original primary GSSM is back online. Once the original primary GSSM is available, reassign the two GSSMs to their original roles in the GSS network. Refer to Chapter 9, GSS Administration and Troubleshooting, the "Logically Removing a GSS or Standby GSSM from the Network" section.

Configuring a Global Site Selector

You must configure and enable your primary GSSM before you can configure additional GSS devices. If you have not already done so, see the "Configuring a Primary GSSM or Standby GSSM" section for information on configuring and enabling your primary and optional standby GSSMs.

To configure a device to function as a GSS:

1. If you have not already done so:

a. Log on to the CLI (see the "Accessing the GSS CLI" section).

b. At the CLI prompt, enable privileged EXEC mode and then global configuration mode on the device. For example:
localhost.localdomain> enable
localhost.localdomain# config
localhost.localdomain(config)# 
c. Ensure the GSS is properly configured (see either the "Configuring the GSS Using the Setup Script" section or the "Configuring the GSS from the CLI" section).

d. Enable a remote access protocol on the GSS device (such as Telnet or SSH). See the"Enabling Remote Access on a GSS Device" section.

2. Exit global configuration mode and then use the gss command to enable your GSS device as a GSS and direct it to the primary GSSM in your GSS network. Specify either the domain name or the network address of the primary GSSM. For example:
gss1.yourdomain.com(config)# exit
gss1.yourdomain.com# gss enable gss gssm1.yourdomain.com
3. Save your configuration changes to memory. For example:
gss1.yourdomain.com# copy running-config startup-config
If you fail to save your configuration changes, the device reverts to its previous settings upon a reboot.

4. Use the primary GSSM to activate each GSS device on your network. See the "Creating and Modifying GSS Devices" section.

Logging Into the Primary GSSM Graphical User Interface

After you configure and enable your primary GSSM, you are ready to access the GUI. The GSSM uses secure HTTP (HTTPS) to communicate with web clients.

For example, if your primary GSSM is named gssm1.yourdomain.com, enter the following to display the primary GSSM logon dialog box and access the GUI:
https://gssm1.yourdomain.com
When first logging on to the primary GSSM GUI, you can use the system default administrative account and password. After accessing the GUI, create and maintain additional user accounts and passwords using the user administration features primary GSSM. Refer to Chapter 9, GSS Administration and Troubleshooting for more information on creating user accounts.

Note The user accounts and passwords that you create for the primary GSSM GUI are maintained separately from the usernames and passwords used to log on to your GSS devices using the CLI (using the username command).

To log on to the primary GSSM GUI:

1. Open your preferred Internet web browser application, such as Internet Explorer or Netscape Navigator.

2. In the address field, enter the secure HTTP address of your GSSM. For example:
https://gssm1.yourdomain.com
Note If you have trouble locating the primary GSSM DNS name, remember that the GSS network uses secure connections, so the address of the GSSM will feature https:// (secure HTTP) in the place of the more common http://.

3. If prompted to accept a certificate from the primary GSSM, click Yes to accept the certificate signed by Cisco Systems and proceed to the GUI.

–If you are using Internet Explorer and want to install the certificate, at the Security Alert dialog box click View Certificate, and then choose the Install Certificate option and follow the prompts of the Certificate Manager Import Wizard.

–If you are using Netscape and you want to install the certificate, at the New Site Certificate dialog box click Next and follow the prompts of the New Site Certificate Wizard.

Note Take the extra steps to trust certificates from Cisco Systems, Inc., which prevents you from having to approve a certificate every time you log on to a GSSM. Refer to the online help for your browser for instructions on trusting certificates from a particular owner or website.

4. When prompted to log on to the primary GSSM, enter your username and password in the fields provided, then click OK. If this is your first time logging on to the GSSM, use the default account name and password to access the GUI as follows:

–Username—admin

–Password—default

5. The GSSM Welcome page appears (Figure 2-1). Refer to Chapter 1, Introducing the Global Site Selector, the "Understanding the Primary GSSM Graphical User Interface" section for information on navigating through the primary GSSM GUI.

Figure 2-1 Primary GSSM Welcome Window

Creating and Modifying GSS Devices

A first step in configuring global server load balancing on your GSS network is to activate and configure your GSS devices. Using the Global Site Selectors tab of the primary GSSM GUI, you activate GSS devices (GSSs and standby GSSMs) that have been added to your GSS network, name the GSS devices, and, if necessary, delete those devices from the GSS network.

This section includes the following procedures:

•Activating GSS Devices

•Modifying GSS Device Configuration

•Deleting GSS Devices

Activating GSS Devices

After you have configured your GSS devices to act as GSSs or GSSMs, you must activate those devices from the primary GSSM GUI before they receive and process user requests. The one exception to this rule is the primary GSSM, which does not need to be activated after initial configuration.

To activate a GSS or a standby GSSM from the primary GSSM GUI:

1. From the primary GSSM GUI, click the Resources tab.

2. Click the Global Site Selectors navigation link. The Global Site Selectors list page appears (Figure 2-2). All active devices are listed with an Online status. The devices you need to activate are listed with an Inactive status.

Figure 2-2 Global Site Selectors List Page - Inactive Status

3. Click the Modify GSS icon for the first GSS that you wish to activate. The Modifying GSS details page appears (Figure 2-3).

Figure 2-3 Modifying GSS Details Page

4. Check the Activate check box. (This check box does not appear in the Modifying GSS details page after a GSS device has been activated.)

5. Click the Submit button. You return to the Global Site Selector list page. The status of the device that you activated is listed as Online. Assuming that the device is functioning properly and that network connectivity between the device and the primary GSSM is good, the status of the device changes to Online within approximately 30 seconds.

Figure 2-4 Global Site Selectors List Page - Active Status

6. Repeat Steps 1 through 5 for each inactive GSS or standby GSSM that you need to activate.

Modifying GSS Device Configuration

You can modify the name and location of any of your GSS devices using the primary GSSM GUI. To modify other network information such as the hostname, IP address, or role, however, you must access the CLI on the device.

To modify the name and location of a GSS device:

1. From the primary GSSM GUI, click the Resources tab.

2. Click the Global Site Selectors navigation link. The Global Site Selectors list page appears (see Figure 2-2). All active devices are listed with an online status. The devices you need to activate are listed with an inactive status.

3. Click the Modify GSS icon for the first GSS that you wish to activate. The Modifying GSS details page appears (see Figure 2-3).

4. In the Global Site Selector Name field, enter a new name for the device. This is not the same name as the hostname, which can only be changed using the CLI. It is used to easily distinguish one GSS device from another in the primary GSSM list pages, where many devices may appear together.

5. From the Location drop-down list, select a new device location.

6. Click Submit to save your changes. You return to the Global Site Selector list page.

Deleting GSS Devices

With the exception of the primary GSSM, you can delete GSS devices from your network using the primary GSSM GUI. Deleting a GSS device such as a GSS or a standby GSSM allows you to remove nonfunctioning GSS devices from your network, or to reconfigure and then reactivate a device.

To delete a GSS device:

1. From the primary GSSM GUI, click the Resources tab.

2. Click the Global Site Selectors navigation link. The Global Site Selectors list page appears.

3. From the Global Site Selectors list, click the Modify GSS icon located to the left of the GSS device you want to delete. The Modifying GSS details page appears.

4. Click the Delete icon in the upper right corner of the page. The GSS software prompts you to confirm your decision to delete the GSS device.

5. Click OK to confirm your decision. You return to the Global Site Selectors list page with the deleted device removed from the list.

6. To reconfigure the GSS device, refer to either the "Configuring a Primary GSSM or Standby GSSM" section or the "Configuring a Global Site Selector" section.

Global Server Load-Balancing Summary

Once you have created your GSSM (primary and standby) and GSS devices and configured them to connect to your network, you are ready to begin configuring request routing and global server load balancing on your GSS network. Global server load balancing on your GSS network is managed through the centralized GUI on the primary GSSM. Using this interface, you can identify your network resources (GSSs) through the use of keepalives and create the DNS rules to process incoming content requests.

Because you will be creating DNS rules that route incoming DNS requests to the most available data centers and resources on your network, you must configure the elements that constitute your DNS rules before creating the rules themselves

Use the following order when configuring your GSS devices and resources from the primary GSSM:

1. Create regions, locations, and owners—Optional. Use these groupings to organize your GSS network resources by customer account, physical location, owner, or other organizing principle. Refer to Chapter 3, Configuring Resources for details.

2. Create one or more source address lists—Optional. Use these lists of addresses to identify the name servers (D-proxy) that forward requests for the specified domains. The default source address list is Anywhere to match any incoming DNS request to the domains. Refer to Chapter 4, Configuring Source Address Lists for details.

3. Create one or more domain lists—Establish lists of Internet domains, possibly using wildcards, that are managed by the GSS and queried by users. Refer to Chapter 5, Configuring Domain Lists for details.

4. Modify the default global keepalive settings or create any shared keepalives—Optional. These are GSS network resources that are regularly polled to monitor the online status of one or more GSS resources linked to the keepalive. Shared keepalives are required for any answer that uses the KAL-AP keepalive type. Refer to Chapter 6, Configuring KeepAlives for details.

5. Create one or more answers—Answers are resources that match requests to domains. Refer to Chapter 7, Configuring Answers and Answer Groups for details.

6. Create one or more answer groups—Answer groups are collections of resources that balance requests for content. Refer to Chapter 7, Configuring Answers and Answer Groups for details.

7. Build your DNS rules—Processes incoming DNS requests using the DNS Rule Builder or DNS Rule Wizard. Refer to Chapter 8, Building and Modifying DNS Rules for details.

Because of the complexity of DNS rules, the primary GSSM GUI provides you with a choice of two methods for creating a DNS rule:

•DNS Rule Wizard—An easy-to-use tool that guides you through the process of creating a DNS rule.

•DNS Rule Builder—If you are an experienced GSS user, you can use the DNS Rule Builder to quickly assemble DNS rules from source address lists, domain lists, owners, and answers that you have already created.

Where to Go Next

Chapter 3, Configuring Resources, includes instructions on organizing resources on your GSS network as locations, regions, and owners.

	Cisco GSS Configuration Guide (Software Version 1.1)
	Setting Up Your GSS
Cisco GSS Configuration Guide (Software Version 1.1) Index Preface Introducing the Global Site Selector Setting Up Your GSS Configuring Resources Configuring Source Address Lists Configuring Domain Lists Configuring KeepAlives Configuring Answers and Answer Groups Building and Modifying DNS Rules GSS Administration and Troubleshooting Monitoring GSS Performance Glossary	Download this chapter Setting Up Your GSS Download the complete book Cisco Global Site Selector Configuration Guide Book-Length PDF, Software Version 1.1 (PDF - 5 MB) Table Of Contents Setting Up Your GSS Accessing the GSS CLI Accessing the CLI Using a Direct Serial Connection Enabling Remote Access on a GSS Device Accessing the CLI Using a Remote Connection Accessing the GSS CLI Using a Private and Public Key Pair Performing Network Configuration of the GSS Configuring the GSS Using the Setup Script Configuring the GSS from the CLI Configuring a Primary GSSM or Standby GSSM Configuring a Global Site Selector Logging Into the Primary GSSM Graphical User Interface Creating and Modifying GSS Devices Activating GSS Devices Modifying GSS Device Configuration Deleting GSS Devices Global Server Load-Balancing Summary Where to Go Next Setting Up Your GSS This chapter describes how to configure your GSS devices to connect to your network. This includes the initial network configuration of a GSS and the configuration of a primary or as a standby GSSM. Network connectivity is configured for each device using the GSS command-line interface (CLI). This chapter contains the following major sections: •Accessing the GSS CLI •Performing Network Configuration of the GSS •Creating and Modifying GSS Devices •Global Server Load-Balancing Summary For detailed instructions on command syntax and use of GSS CLI commands, refer to the Cisco Global Site Selector Command Reference. Accessing the GSS CLI You can access the GSS CLI by establishing a remote connection using Telnet or Secure Shell (SSH) from a PC or by a direct connection to the device using a dedicated terminal. If required for your SSH connection, you may also login to the GSS using an externally generated private and public key pair. This section contains the following procedures: •Accessing the CLI Using a Direct Serial Connection •Enabling Remote Access on a GSS Device •Accessing the CLI Using a Remote Connection •Accessing the GSS CLI Using a Private and Public Key Pair Accessing the CLI Using a Direct Serial Connection To access the GSS CLI using a serial connection, establish a direct serial connection between your terminal and the GSS device. Once you are connected, you can use any terminal communications application to access the CLI. The following procedure uses HyperTerminal for Windows. For information on how to establish a serial connection with your device, refer to the Cisco Global Site Selector Hardware Installation Guide. To access the GSS CLI using a direct serial connection: 1. Launch HyperTerminal. The Connection Description window appears. 2. Enter a name for your session in the Name field. 3. Click OK. The Connect To window appears. 4. From the drop-down list, choose the COM port to which the device is connected. 5. Click OK. The Port Properties window appears. 6. Set the port properties as follows: •Baud Rate = 9600 •Data Bits = 8 •Flow Control = none •Parity = none •Stop Bits = 1 7. Click OK to connect. 8. Press Enter to display the CLI prompt. Once a session is created, choose Save As from the File menu to save the connection description. Saving the connection description has the following two advantages: •The next time you launch HyperTerminal, the session is listed as an option under Start > Programs > Accessories > HyperTerminal > Name_of_session. This option lets you reach the CLI prompt directly without going through the configuration steps. •You can connect your cable to a different device without configuring a new HyperTerminal session. If you use this option, make sure that you connect to the same port on the new device as was configured in the saved HyperTerminal session. Otherwise, a blank screen appears without a prompt. Enabling Remote Access on a GSS Device To monitor the performance of your GSS devices and administer them once they are deployed, you must be able to access those devices. Accordingly, once you have basic network connectivity on your GSS device you may want to use the CLI to enable remote access to the device using the SSH, Telnet, or FTP protocols. To enable SSH, Telnet, or FTP on your GSS device: 1. Enable privileged EXEC mode and then global configuration mode on the device. For example: localhost.localdomain> enable localhost.localdomain# config localhost.localdomain(config)# 2. From global configuration mode, use the enable command to activate the remote access protocol you need (SSH, Telnet, or FTP). For example, to enable SSH connections to the GSS device, you would enter the following command: localhost.localdomain(config)# ssh enable 3. Repeat step 2 for each required remote access protocol using the ftp command and the telnet command. Note To disable SSH, Telnet, or FTP, use the no form of the command. 4. Save your configuration changes to memory. For example: localhost.localdomain(config)# copy running-config startup-config 5. Exit global configuration mode. localhost.localdomain(config)# exit localhost.localdomain# Accessing the CLI Using a Remote Connection To access the GSS CLI using a remote connection, use Telnet or Secure Shell (SSH) from a PC. In a single Telnet or SSH session, you cannot connect to more than one device. You can, however, have several Telnet or SSH sessions running in parallel for different devices. Be sure you enable Telnet or SSH as described in the "Enabling Remote Access on a GSS Device" section. Note We recommend using SSH connections because SSH lets you communicate securely over insecure channels and provides strong authentication. You must have physical access to the GSS device to setup remote access by Telnet or SSH connection. Refer to the Cisco Global Site Selector Hardware Installation Guide for instructions on connecting a console cable to your Cisco Global Site Selector series hardware. To access the GSS CLI using your preferred SSH or Telnet client: 1. Enter the host name or IP address of the GSS device (Global Site Selector or Global Site Selector Manager). 2. Specify your GSS administrative username and password to log on to the GSS device. Once you have logged on remotely, use the CLI commands described in this document and in the Cisco Global Site Selector Command Reference. Accessing the GSS CLI Using a Private and Public Key Pair The GSS supports remote login to the device over an SSH session using private and public key pairs for authentication. In this method of remote connection, you use a generated private/public key pair to participate in a secure communication by encrypting and decrypting messages. Use of a private and public key pair bypasses the normal username and password authentication process. This remote access method may be useful when running scripts that connect to the GSS automatically. You generate the private key and the corresponding public key as a key pair on a server separate from the GSS and then copy the public key to the GSS /home directory. To access the GSS CLI using a private and public key pair: 1. Generate the SSH private key and the corresponding SSH public key as a key pair on a server separate from the GSS. Refer to the documentation included with the SSH software for details on generating the private and public key pair. 2. Enable privileged EXEC mode. For example: localhost.localdomain> enable 3. Use the scp command to securely copy the generated public key from the server to the GSS /home directory. For example: localhost.localdomain# scp myusername@1myhost:~/mykey.pub . myusername@1myhost password: mykey.pub 100% \|***************************\| 241 00:00 4. Use the type command to append the public key to the /home/.ssh/authorized_keys file. The /home/.ssh/authorized_keys file is a special file that the GSS software looks for when authenticating public/private keys. For example: localhost.localdomain# cd .ssh localhost.localdomain# type ../mykey.pub >> authorized_keys 5. Activate an SSH session from the remote host to the GSS using the private key. For example, on most Unix systems you would enter the following command line: ssh -i private.key gss.cisco.com Performing Network Configuration of the GSS When setting up your GSS, log in directly to the CLI on the GSS device and configure the following basic setup configuration functions for the device: •Specify a hostname for the GSS device •Configure Ethernet 0 and Ethernet 1 •Configure a default gateway •Enter the IP addresses of the name servers (up to 8) •Configure a remote access protocol (FTP, Telnet, or SSH) so you can administer the GSS device remotely in the future. Depending on your network requirements for the GSS device, make your configuration of GSSM (primary and standby) and GSS based on the following information: •Primary GSSM—The primary GSSM performs content routing as well as centralized management functions for the GSS network. The primary GSSM serves as the organizing point of the GSS network, hosting the embedded GSS database that contains configuration information for all your GSS resources, such as individual GSSs and DNS rules. Other GSS devices report their status to the primary GSSM. The primary GSSM offers a single, centralized GUI for monitoring and administering your entire GSS network. •Standby GSSM—The standby GSSM performs GSLB functions for the GSS network even while operating in standby mode. In addition, the standby GSSM can be configured to act as the GSSM should the primary GSSM need to go offline for repair or maintenance, or becomes unavailable to communicate with other GSS devices. As with the primary GSSM, the standby GSSM is configured to run the GSSM GUI and contains a duplicate copy of the embedded GSS database that is currently installed on the primary GSSM. Any configuration or network changes affecting the GSS network are synchronized between the primary and the standby GSSM. The standby GSSM can be enabled as the primary GSSM using the gssm standby-to-primary CLI command. Note The switching of roles between the designated primary GSSM and the standby GSSM is intended to be a temporary GSS network configuration until the original primary GSSM is back online. Once the original primary GSSM is available, reassign the two GSSMs to their original roles in the GSS network as described in Chapter 9, GSS Administration and Troubleshooting, the "Logically Removing a GSS or Standby GSSM from the Network" section. •GSS*—The GSS performs routing of DNS queries based on DNS rules and conditions configured using the primary GSSM. Each GSS is known to and synchronized with the GSSM, but individual GSSs do not report their presence or status to one another. Each GSS on your network delegates authority to the GSSs that serve DNS requests. Each GSS is managed separately using the Cisco CLI. GUI support is not available on a GSS device. A typical GSS deployment may contain up to eight GSS devices on a corporate intranet or the Internet. At least one GSS—and no more than two GSSs—must be configured as GSSMs. The primary GSSM monitors the other GSS devices on the network and offer features for managing and monitoring request routing services using a GUI accessible through secure HTTP. Only one primary GSSM can be "active" at any time, with the second GSSM serving as a "standby," or backup device. Network configuration requires that you enter into privileged EXEC mode on the CLI, so your login must have adequate permissions to do so. After you enable your GSSM and GSS devices, use the primary GSSM to activate each device on your network. See the "Creating and Modifying GSS Devices" section for more information. This section includes the following procedures: •Configuring the GSS Using the Setup Script •Configuring the GSS from the CLI •Configuring a Primary GSSM or Standby GSSM •Configuring a Global Site Selector •Logging Into the Primary GSSM Graphical User Interface Configuring the GSS Using the Setup Script When you boot the Cisco Global Site Selector platform for the first time and the system boots without a startup-configuration file, a setup script automatically runs to quickly guide you through the process of initially configuring the GSS. To configure the GSS from the setup script: 1. If you have not already done so, power on and boot the GSS (as described in the Cisco Global Site Selector Hardware Installation Guide). 2. At the Do you want to continue? (y/n) [no]:* prompt type y to continue (or press Enter to accept the default of No and bypass running the setup script). If you chose to bypass the setup script, you can either: •Manually configure the GSS from the CLI as described in the "Configuring the GSS from the CLI" section. •Use the setup CLI command at a later point in time to configure basic configuration information (as described in this procedure). Note The setup command cannot be executed while the GSS is running. You must issue the gss stop command before executing the setup command. 3. At the Hostname prompt, specify a qualified hostname for the GSS device. For example: Enter the Hostname of this device: gssm1.yourdomain.com 4. At the Interface eth0 and eth1 prompts, specify the IP address and subnet mask for each interface to be used on the GSS device. For example: * Interface eth1 (Inactive) Do you want to change this? (y/n) [n]: y Do you want to activate this interface? (y/n) [n]: y Enter the IP address: 192.168.1.3 Enter the netmask: 255.255.255.0 Once you run the setup script there are additional configuration parameters that you can specify for each Ethernet interface using the interface ethernet CLI command (such as the autosense, duplex, and speed options). Refer to the Cisco Global Site Selector Command Reference for detailed information on the interface ethernet command. 5. At the default gateway prompt, enter gateway information for the GSS device. For example: Do you want to configure a default gateway? (y/n) [y]: Enter the default gateway [10.86.208.1]: 10.89.12.100 6. At the Name Servers prompt, configure the domain name server or servers to be used by the GSS device. You can enter individual addresses or specify up to eight name servers in a list. Enter a dash ('-') at a blank entry to instruct the GSS to stop requesting name servers. For example: Enter the IP addresses for up to 8 Name Servers. Enter a dash ('-') at a blank entry to stop entering Name Servers. At least one Name Server is required for this setup script. Enter Name Server 1 [161.44.124.122]: 168.10.12.1 Enter Name Server 2: 192.168.1.2 Enter Name Server 3: - 7. At the Remote Access prompt, activate the remote access protocol required for the GSS device. For example: * Remote Access Do you want to enable FTP access? (y/n) [y]: n Do you want to enable Telnet access? (y/n) [n]: y Do you want to enable SSH access? (y/n) [y]: y 8. The setup script prompts you through a series of questions about configuring the device as a GSSM (primary or standby) or as a GSS. Perform one of the following actions: –If you want to configure the device as the primary GSSM: a. At the Do you want to configure this GSS as a Manager (gssm)? (y/n) [y]: prompt type y (or press Enter). b. At the Do you want to configure this GSSM as the Primary? (y/n) [y]: prompt type y (or press Enter). –If you want to configure the device as the standby GSSM: a. At the Do you want to configure this GSS as a Manager (gssm)? (y/n) [y]: prompt type y (or press Enter). b. At the Do you want to configure this GSSM as the Primary? (y/n) [y]: prompt type n. c. At the Enter the Hostname or IP address of the Primary GSSM [192.168.3.4]: prompt specify the hostname or IP address of the primary GSSM for your network. –If you want to configure the device as a GSS: a. At the Do you want to configure this GSS as a Manager (gssm)? (y/n) [y]: prompt type n. b. At the Enter the Hostname or IP address of the Primary GSSM [192.168.3.4]: prompt specify the hostname or IP address of the primary GSSM for your network. 9. When completed, the software prompts you to perform one of the following: –Apply as the Running Configuration—Applies setup configuration changes to the running-configuration file. –Edit This Configuration—Return to the beginning of setup and edit specific configuration information. –Discard Configuration and Quit Setup—Cancel making initial configuration changes. Once configuration setup is complete, the GSS software prompts you to log into the primary GSSM GUI and finish device setup (as described in the "Logging Into the Primary GSSM Graphical User Interface" section). Configuring the GSS from the CLI To configure the GSS from the CLI: 1. If you have not already done so, power on and boot the GSS (as described in the Cisco Global Site Selector Hardware Installation Guide). 2. Log on to the CLI, following the instructions in "Accessing the GSS CLI". The GSS CLI prompt appears. By default, the hostname for GSS devices is localhost.localdomain. This name changes once you configure the hostname for the device. 3. Enable privileged EXEC mode and then global configuration mode on the device. For example: localhost.localdomain> enable localhost.localdomain# config localhost.localdomain(config)# 4. Configure a qualified hostname and default gateway information for the GSS device. For example: Host(config)# hostname gssm1.yourdomain.com gssm1.yourdomain.com(config)# ip default-gateway 10.89.12.100 5. From global configuration mode, enter interface configuration mode and configure the attributes of GSS interface Ethernet 0 or Ethernet 1. Each GSS device contains two Ethernet interfaces, 0 and 1. For example: gssm1.yourdomain.com(config)# interface ethernet 0 gssm1.yourdomain.com(config-eth0)# speed 100 gssm1.yourdomain.com(config-eth0)# duplex full Refer to the Cisco Global Site Selector Command Reference for detailed information on the interface ethernet command. Note Interface commands cannot be executed while the GSS is running (for example, serving DNS requests). You must issue the gss stop command before executing the interface ethernet command. 6. Use the gss-communications command to configure a GSS Ethernet interface as the designated network interface for GSS device communications. For example: gssm1.yourdomain.com(config-eth0)#gss-communications Note Interface commands cannot be executed while the GSS is running (for example, serving DNS requests). You must issue the gss stop command before executing the gss-communications command. 7. Configure the IP address and subnet mask that are to be used by the interface. For example: gssm1.yourdomain.com(config-eth0)# ip address 10.89.3.24 255.255.255.0 gssm1.yourdomain.com(config-eth0)# exit gssm1.yourdomain.com(config)# 8. Configure the domain name server or servers to be used by the GSS device. You can enter individual addresses or specify up to eight name servers using a comma-separated or space-separated list. For example: gss1.yourdomain.com(config)# ip name-server 128.10.12.1 gss1.yourdomain.com(config)# ip name-server 128.100.12.1, 128.110.12.1 9. Save your configuration changes to memory. For example: gssm1.yourdomain.com(config)# copy running-config startup-config The next step is to configure the device as either a GSSM (primary or standby) or as a GSS: •If configuring the device as a GSSM (primary or standby), proceed to the "Configuring a Primary GSSM or Standby GSSM" section. •If configuring the device as a GSS, proceed to the "Configuring a Global Site Selector" section. Configuring a Primary GSSM or Standby GSSM Before you begin configuring request routing or adding GSSs to your GSS network, you must first configure a primary GSSM with which the individual GSSs will be associated. When configuring a GSSM, you need to configure both the network connectivity of the GSSM as well as the embedded GSS database that resides on the GSSM and holds GSS device and network configuration information. You must also indicate whether the GSSM serves as the primary or redundant (standby) manager. To configure a GSS device to function as either a primary GSSM or a standby GSSM: 1. If you have not already done so: a. Log on to the CLI (see the "Accessing the GSS CLI" section). b. At the CLI prompt, enable privileged EXEC mode and then global configuration mode on the device. For example: localhost.localdomain> enable localhost.localdomain# config localhost.localdomain(config)# c. Ensure the GSS is properly configured (see either the "Configuring the GSS Using the Setup Script" section or the "Configuring the GSS from the CLI" section). 2. Perform one of the following steps: –If this GSSM is to be the primary (default) routing manager for your GSS network, use the gss enable gssm-primary command to enable your GSS device and make it the primary GSSM. For example: gssm1.yourdomain.com# gss enable gssm-primary Note If a database already exists on this GSS device an error message appears. Use the gss disable command to disable the selected GSS device and remove any existing configuration, including deleting the GSSM database from the GSS device. This option returns the GSS device to the initial, disabled state. –If this GSSM is to be a standby (backup) GSSM for your GSS, use the gss enable gssm-standby command to place the GSSM in standby mode and associate it with the DNS name or IP address of the primary GSSM. The standby GSSM is intended to be a backup device to be used on a temporary basis until the primary GSSM can come back online. For example: gssm1.yourdomain.com# gss enable gssm-standby 192.168.1.110 Note You must have a primary GSSM configured and enabled before you can enable a standby GSSM. 3. Save your configuration changes to memory. For example: gssm1.yourdomain.com# copy running-config startup-config If you fail to save your configuration changes, the GSS device reverts to its previous settings upon a reboot. For the primary GSSM, you can now access the GUI using your preferred web browser by pointing that browser to the URL of the primary GSSM. See the "Logging Into the Primary GSSM Graphical User Interface" section for details. After enabling the primary GSSM GUI, you can use it to activate each GSS device on your network. See the "Creating and Modifying GSS Devices" section. If, at a later point, you need to move the primary GSSM or you want to take it offline for repair or maintenance, the standby GSSM is capable of temporarily taking over the role as the primary GSSM until the original primary GSSM is back online. Once the original primary GSSM is available, reassign the two GSSMs to their original roles in the GSS network. Refer to Chapter 9, GSS Administration and Troubleshooting, the "Logically Removing a GSS or Standby GSSM from the Network" section. Configuring a Global Site Selector You must configure and enable your primary GSSM before you can configure additional GSS devices. If you have not already done so, see the "Configuring a Primary GSSM or Standby GSSM" section for information on configuring and enabling your primary and optional standby GSSMs. To configure a device to function as a GSS: 1. If you have not already done so: a. Log on to the CLI (see the "Accessing the GSS CLI" section). b. At the CLI prompt, enable privileged EXEC mode and then global configuration mode on the device. For example: localhost.localdomain> enable localhost.localdomain# config localhost.localdomain(config)# c. Ensure the GSS is properly configured (see either the "Configuring the GSS Using the Setup Script" section or the "Configuring the GSS from the CLI" section). d. Enable a remote access protocol on the GSS device (such as Telnet or SSH). See the"Enabling Remote Access on a GSS Device" section. 2. Exit global configuration mode and then use the gss command to enable your GSS device as a GSS and direct it to the primary GSSM in your GSS network. Specify either the domain name or the network address of the primary GSSM. For example: gss1.yourdomain.com(config)# exit gss1.yourdomain.com# gss enable gss gssm1.yourdomain.com 3. Save your configuration changes to memory. For example: gss1.yourdomain.com# copy running-config startup-config If you fail to save your configuration changes, the device reverts to its previous settings upon a reboot. 4. Use the primary GSSM to activate each GSS device on your network. See the "Creating and Modifying GSS Devices" section. Logging Into the Primary GSSM Graphical User Interface After you configure and enable your primary GSSM, you are ready to access the GUI. The GSSM uses secure HTTP (HTTPS) to communicate with web clients. For example, if your primary GSSM is named gssm1.yourdomain.com, enter the following to display the primary GSSM logon dialog box and access the GUI: https://gssm1.yourdomain.com When first logging on to the primary GSSM GUI, you can use the system default administrative account and password. After accessing the GUI, create and maintain additional user accounts and passwords using the user administration features primary GSSM. Refer to Chapter 9, GSS Administration and Troubleshooting for more information on creating user accounts. Note The user accounts and passwords that you create for the primary GSSM GUI are maintained separately from the usernames and passwords used to log on to your GSS devices using the CLI (using the username command). To log on to the primary GSSM GUI: 1. Open your preferred Internet web browser application, such as Internet Explorer or Netscape Navigator. 2. In the address field, enter the secure HTTP address of your GSSM. For example: https://gssm1.yourdomain.com Note If you have trouble locating the primary GSSM DNS name, remember that the GSS network uses secure connections, so the address of the GSSM will feature https:// (secure HTTP) in the place of the more common http://. 3. If prompted to accept a certificate from the primary GSSM, click Yes to accept the certificate signed by Cisco Systems and proceed to the GUI. –If you are using Internet Explorer and want to install the certificate, at the Security Alert dialog box click View Certificate, and then choose the Install Certificate option and follow the prompts of the Certificate Manager Import Wizard. –If you are using Netscape and you want to install the certificate, at the New Site Certificate dialog box click Next and follow the prompts of the New Site Certificate Wizard. Note Take the extra steps to trust certificates from Cisco Systems, Inc., which prevents you from having to approve a certificate every time you log on to a GSSM. Refer to the online help for your browser for instructions on trusting certificates from a particular owner or website. 4. When prompted to log on to the primary GSSM, enter your username and password in the fields provided, then click OK. If this is your first time logging on to the GSSM, use the default account name and password to access the GUI as follows: –Username—admin –Password—default 5. The GSSM Welcome page appears (Figure 2-1). Refer to Chapter 1, Introducing the Global Site Selector, the "Understanding the Primary GSSM Graphical User Interface" section for information on navigating through the primary GSSM GUI. Figure 2-1 Primary GSSM Welcome Window Creating and Modifying GSS Devices A first step in configuring global server load balancing on your GSS network is to activate and configure your GSS devices. Using the Global Site Selectors tab of the primary GSSM GUI, you activate GSS devices (GSSs and standby GSSMs) that have been added to your GSS network, name the GSS devices, and, if necessary, delete those devices from the GSS network. This section includes the following procedures: •Activating GSS Devices •Modifying GSS Device Configuration •Deleting GSS Devices Activating GSS Devices After you have configured your GSS devices to act as GSSs or GSSMs, you must activate those devices from the primary GSSM GUI before they receive and process user requests. The one exception to this rule is the primary GSSM, which does not need to be activated after initial configuration. To activate a GSS or a standby GSSM from the primary GSSM GUI: 1. From the primary GSSM GUI, click the Resources tab. 2. Click the Global Site Selectors navigation link. The Global Site Selectors list page appears (Figure 2-2). All active devices are listed with an Online status. The devices you need to activate are listed with an Inactive status. Figure 2-2 Global Site Selectors List Page - Inactive Status 3. Click the Modify GSS icon for the first GSS that you wish to activate. The Modifying GSS details page appears (Figure 2-3). Figure 2-3 Modifying GSS Details Page 4. Check the Activate check box. (This check box does not appear in the Modifying GSS details page after a GSS device has been activated.) 5. Click the Submit button. You return to the Global Site Selector list page. The status of the device that you activated is listed as Online. Assuming that the device is functioning properly and that network connectivity between the device and the primary GSSM is good, the status of the device changes to Online within approximately 30 seconds. Figure 2-4 Global Site Selectors List Page - Active Status 6. Repeat Steps 1 through 5 for each inactive GSS or standby GSSM that you need to activate. Modifying GSS Device Configuration You can modify the name and location of any of your GSS devices using the primary GSSM GUI. To modify other network information such as the hostname, IP address, or role, however, you must access the CLI on the device. To modify the name and location of a GSS device: 1. From the primary GSSM GUI, click the Resources tab. 2. Click the Global Site Selectors navigation link. The Global Site Selectors list page appears (see Figure 2-2). All active devices are listed with an online status. The devices you need to activate are listed with an inactive status. 3. Click the Modify GSS icon for the first GSS that you wish to activate. The Modifying GSS details page appears (see Figure 2-3). 4. In the Global Site Selector Name field, enter a new name for the device. This is not the same name as the hostname, which can only be changed using the CLI. It is used to easily distinguish one GSS device from another in the primary GSSM list pages, where many devices may appear together. 5. From the Location drop-down list, select a new device location. 6. Click Submit to save your changes. You return to the Global Site Selector list page. Deleting GSS Devices With the exception of the primary GSSM, you can delete GSS devices from your network using the primary GSSM GUI. Deleting a GSS device such as a GSS or a standby GSSM allows you to remove nonfunctioning GSS devices from your network, or to reconfigure and then reactivate a device. To delete a GSS device: 1. From the primary GSSM GUI, click the Resources tab. 2. Click the Global Site Selectors navigation link. The Global Site Selectors list page appears. 3. From the Global Site Selectors list, click the Modify GSS icon located to the left of the GSS device you want to delete. The Modifying GSS details page appears. 4. Click the Delete icon in the upper right corner of the page. The GSS software prompts you to confirm your decision to delete the GSS device. 5. Click OK to confirm your decision. You return to the Global Site Selectors list page with the deleted device removed from the list. 6. To reconfigure the GSS device, refer to either the "Configuring a Primary GSSM or Standby GSSM" section or the "Configuring a Global Site Selector" section. Global Server Load-Balancing Summary Once you have created your GSSM (primary and standby) and GSS devices and configured them to connect to your network, you are ready to begin configuring request routing and global server load balancing on your GSS network. Global server load balancing on your GSS network is managed through the centralized GUI on the primary GSSM. Using this interface, you can identify your network resources (GSSs) through the use of keepalives and create the DNS rules to process incoming content requests. Because you will be creating DNS rules that route incoming DNS requests to the most available data centers and resources on your network, you must configure the elements that constitute your DNS rules before creating the rules themselves Use the following order when configuring your GSS devices and resources from the primary GSSM: 1. Create regions, locations, and owners—Optional. Use these groupings to organize your GSS network resources by customer account, physical location, owner, or other organizing principle. Refer to Chapter 3, Configuring Resources for details. 2. Create one or more source address lists—Optional. Use these lists of addresses to identify the name servers (D-proxy) that forward requests for the specified domains. The default source address list is Anywhere to match any incoming DNS request to the domains. Refer to Chapter 4, Configuring Source Address Lists for details. 3. Create one or more domain lists—Establish lists of Internet domains, possibly using wildcards, that are managed by the GSS and queried by users. Refer to Chapter 5, Configuring Domain Lists for details. 4. Modify the default global keepalive settings or create any shared keepalives—Optional. These are GSS network resources that are regularly polled to monitor the online status of one or more GSS resources linked to the keepalive. Shared keepalives are required for any answer that uses the KAL-AP keepalive type. Refer to Chapter 6, Configuring KeepAlives for details. 5. Create one or more answers—Answers are resources that match requests to domains. Refer to Chapter 7, Configuring Answers and Answer Groups for details. 6. Create one or more answer groups—Answer groups are collections of resources that balance requests for content. Refer to Chapter 7, Configuring Answers and Answer Groups for details. 7. Build your DNS rules—Processes incoming DNS requests using the DNS Rule Builder or DNS Rule Wizard. Refer to Chapter 8, Building and Modifying DNS Rules for details. Because of the complexity of DNS rules, the primary GSSM GUI provides you with a choice of two methods for creating a DNS rule: •DNS Rule Wizard—An easy-to-use tool that guides you through the process of creating a DNS rule. •DNS Rule Builder—If you are an experienced GSS user, you can use the DNS Rule Builder to quickly assemble DNS rules from source address lists, domain lists, owners, and answers that you have already created. Where to Go Next Chapter 3, Configuring Resources, includes instructions on organizing resources on your GSS network as locations, regions, and owners.
	© 1992-2009 Cisco Systems, Inc. All rights reserved. Terms & Conditions \| Privacy Statement \| Cookie Policy \| Trademarks of Cisco Systems, Inc.