Description

Global Site Selector Operations and Configuration (GSSOC) is a three day course covering the implementation, configuration, and management of the Cisco Global Site Selector. These devices, when properly deployed in enterprise or service provider networks, allow an enterprise to implement Global Server Load Balancing and/or Disaster Recovery Implementation in a multiple data center DNS environment. Students will discuss DNS, GSS command structure, the GSS GUI, Global Server Load Balancing, Disaster Recovery via DNS and implementation concerns regarding Firewalls and Keepalives.

GSSOC version 1.0 includes several hands-on lab exercises covering interface configuration via the CLI and GSLB and DRP configuration via the GUI. Rules, Answers, Source Address Lists, Domain Lists, Load Balancing techniques and Keepalives will all be configured and tested.

Objectives

Upon completing this course, the learner will be able to meet these overall objectives:

• Describe how the Cisco Global Site Selector is placed in an enterprise environment and what concerns must be addressed to accomplish this.
• Describe the GSS platform and licensing options.
• Describe the utilization concepts of Global Server Load Balancing and Disaster Recovery Protection in a GSS implementation utilizing DNS.
• Discuss DDoS implementations used with the GSS.
• Describe the use of NS-forwarding in regards to the GSS
• Describe and discuss interaction with the GSS.
• Describe and configure “clustered” or “networked” GSS devices.
• Discuss and configure several Keepalive techniques available to the GSS including integration of the GSS with the ACE module. This discussion shall include some platform specific information for various SLB platforms and other types of platforms.
• Discuss and configure several Load Balancing techniques available to the GSS and implementation concerns pertinent to some specific SLB platforms.
• Discuss and configure DNS Rules on the GSS, with implementation lessons on Domain Lists and Source Address Lists as optional traffic qualifiers.

Prerequisites

The knowledge and skills that a learner must have before attending this course are as follows:

• Prior experience with Server Load Balancers (Cisco CSS, ACE, CSM, Local Director or competitive models) and understanding of SLB’s is necessary. The SLB used in this course is the Cisco ACE.
• A general understanding of the DNS process and HTTP will be useful.
• In addition, to fully comprehend the concepts and technologies taught in this course, a working knowledge of LANs, WANs, and IP switching and routing is essential.
• Basic internetworking skills taught in the Interconnecting Cisco Network Devices training course, or equivalent knowledge, is considered the minimum knowledge needed for this course, including and especially an understanding of routing, switching and the OSI or TCP/IP model.

Who Should Attend

• Module 1 – Domain Name Services and Global Server Load Balancing Overview
  • Define DNS Resolution Process
  • Define DNS and GSS Terminology
  • Describe GSS Operation
  • Describe the use of GSS Load Balancing
  • Describe the use of GSS Keepalives
  • Describe the usefulness of GSS fault tolerance.
• Module 2 – GSS Deployment Model Overview
  • Describe the Distributed Data Center Model and its advantages
  • Describe the Advantages/Disadvantages of the Active/Standby and Active/Active Data Center Models
  • Recognize the Advantages/Disadvantages of the DNS GSLB Model
  • Describe Topological Implementation issues regarding Keepalives.
  • Describe the Hierarchical and Distributed deployment Models
• Module 3 – GSS Setup
  • Logging into the GSS
  • Describe the Command Line Interface and identify the different types of CLI connections
  • Identify the CLI modes of operation
  • Use the CLI to perform:
    • Creation of Usernames and Permissions
    • Configure and display interfaces
    • Configure, Display and remove a static route
    • Display, save, tftp and restore a configuration.
  • Describe GSS Logging Features
  • Describe GSS SNMP setup and features
  • Describe TACACS+ setup
  • Explain User Roles and Views
  • Describe configuration of NTP on GSS
• Module 4 – Global Server Load Balancing
  • Describe and configure a Rule
    • Domain Lists
    • Source Address Lists
  • Describe and configure Answers
  • Describe and configure an Answer Group
  • Describe and configure a Load Balancing technique
  • Describe and configure Keepalives
• Module 5 – GSS Keepalives
  • Describe the types of Keepalives a GSS can use and their implementation in a network.
  • Determine the best Keepalive implementation given a network scenario
  • Describe and configure Shared Keepalives
  • Describe and configure the Kal-ap Keepalive
  • Describe and configure Scripted/SNMP Keepalives
• Module 6 – GSS Load Balancing Methods
  • Describe the GSS Load Balancing techniques
  • Determine the most appropriate Load Balancing technique for a given scenario
  • Recognize the load balancing values used given a specific SLB
  • Explain the Stickiness/Persistence characteristics and issues when used with the GSS
• Module 7 – GSS Network Proximity
  • Recognize the advantages of Proximity detection regarding client D-proxy
  • Recognize the internetworking capabilities of GSS’s
  • Explain DRP
• Module 8 – GSS DDoS Protection
  • Describe the use of DDoS in a GSS
  • Explain the DDoS Anti-Spoofing mechanism
  • Recognize and describe a “Reflector” attack
  • Describe GSS “Mitigation”
  • Explain Rate Limiting on the GSS
  • Describe “Peacetime Learning” on the GSS.
• Module 9 – GSS/CNR Interaction
  • Recognize the uses of CNR (Cisco Network Registrar)
  • Describe the requirements pertaining to the use of CNR on a GSS platform
  • Describe the ability of the CNR as an alternate form of DNS resolver
  • Recognize DNS query flow when CNR is involved

Lab Outline

• Lab 2: Accessing the Remote Lab
  • Task 1: Connecting from Microsoft Internet Explorer to the Remote Lab
• Lab 3: Initial Cisco GSS Configuration
  • Task 1a: a: Initial Configuration Through the CLI
  • Task 1b: Initial Configuration Through the CLI Initial Setup Script
  • Task 2: Cisco GSS GUI Access
  • Task 3: Cisco GSS Roles and Views
• Lab 4: Initial Cisco GSS GSLB Configuration
  • Task 1a: Creating a GSLB Configuration with the Rule Wizard
  • Task 1b: Creating a GSLB Configuration on a Component Basis
• Lab 5: Keepalives
  • Task 1: ICMP Keepalives
  • Task 2: Changing Global Keepalive Settings—KAL-AP
  • Task 3: KAL-AP Keepalive Configuration
• Lab 6: Implementing Load-Balancing Techniques
  • Task 1: Implementing Ordered List Load Balancing
  • Task 2: Implementing Weighted Round Robin Load Balancing
  • Task 3: Implementing Least Loaded Load Balancing
• Lab 7: Configuring Cisco GSS Clusters
  • Task 1 : Configure Two Cisco GSS Devices into a Single GSS Meshed Topology
  • Task 2: Restore Previous Cisco GSS Database
• Lab 8: Configuring Distributed Denial of Service Commands on the Cisco GSS
  • Task 1: DDoS Mitigation Observation
• Optional Lab: Upgrading Software on the Cisco GSS
  • Task 1: Upgrade the Cisco GSS