How to deployment

1. SANGFOR WANO 9.5.8R1
Chapter 1
Advanced Deployment

2. VLAN Network Environment
1
30 Bit Mask Network Environment
2
Propagate Link Down and HA Deployment
3

3. 1. VLAN Network Environment

4. VLAN Network Environment
Internet
Leased Line
Vlan1:10.0.1.1
Vlan2:10.0.2.1
Vlan3:10.0.3.1
Vlan1:10.0.1.x Vlan2:10.0.2.x Vlan3:10.0.3.x
Trunk
192.168.x.x/16 172.16.x.x/16
192.168.0.1 172.16.0.1
1.1.1.2/24
1.1.1.1/24
HQ Branch
• Bridge and double bridge mode support VLAN environment,
• Gateway mode not support VLAN trunk.

5. VLAN Network Environment
Internet
Leased Line
Vlan1:10.0.1.1
Vlan2:10.0.2.1
Vlan3:10.0.3.1
Vlan1:10.0.1.x Vlan2:10.0.2.x Vlan3:10.0.3.x
Trunk
192.168.x.x/16 172.16.x.x/16
192.168.0.1 172.16.0.1
1.1.1.2/24
1.1.1.1/24
HQ Branch
Vlan1:10.0.1.2
Vlan2:10.0.2.2
Vlan3:10.0.3.2
1.1.1.3/24

6. VLAN Network Environment Configuration
1. HQ Interface configuration.

7. VLAN Network Environment Configuration
2. HQ VLAN configuration.
VLAN support : VLAN tag traffic can pass through device.
If we want to accelerate VLAN traffic, we must set VLAN ID in order to communicate with VLAN traffic.
3. Branch connect to one HQ VLAN IP build acceleration tunnel.

8. 2. 30 Bit Mask Network Environment

9. 30 Bit Mask Network Environment
Internet
192.168.x.x/16 172.16.x.x/16
192.168.0.1 172.16.0.1
1.1.1.2/30
1.1.1.1/30
• 30 bit mask network only exist in bridge and double bridge acceleration only mode.
• WANO deploy between two device , but no available same subnet IP for WANO.

10. 30 Bit Mask Network Environment
Internet
192.168.x.x/16 172.16.x.x/16
192.168.0.1 172.16.0.1
1.1.1.2/30
1.1.1.1/30
• Peer side WANO must has route to logic interface IP
• Peer side WANO connect to this logic build acceleration tunnel
Logic IP
192.168.0.2

11. 30 Bit Mask Network Environment Configuration

12. 3. Propagate Link Down and HA Deployment

13. Propagate Link Down
Internet
Server User
eth0
eth2
eth1
eth3
SW1 SW2
FW1 FW2
Background:
In some double bridge mode scenario, traffic run in 2 bridge in the same time.
If SW1 does not work suddenly, traffic will not go out from SW1, but FW1
don’t know SW1 is not available, traffic come in side will still route to eth2, and
these packets will be lost.
To avoid this issue, WANO can enable propagate link down, if WANO detect
eth0 down, WANO will disable eth2, then FW1 know traffic cannot come in
side through br0.
br0 br1
• If propagate link down is enable and one bridge interface doesn’t
connect to other device, this bridge IP will cannot work, we should
be careful.

14. HA Deployment
Internet
Server User Server User
Single Bridge Gateway
Server User
Single Bridge
Rollover cable/Console
Normal cable/Normal interface

15. HA Deployment
Internet
Server
User
Double Bridge
Server User
Double Bridge
Rollover cable/Console
Normal cable/Normal interface

16. HA Deployment Configuration

17. HA Deployment Notices
 WANO HA deployment requires both WANO devices have same version and same model.
 Rollover cable is required to connect the console or serial port of WANO devices.
 All deployments of WANO support HA deployment.
 Once WANO HA deployment is completed, the alarm light of standby device will regularly twinkling which indicates
normal performance and the alarm light of active device will not light up.
 When HA devices are connected, power up active device and wait the alarm light stops flashing. Then power off standby
device. The configuration will sync from active device to standby device via console or serial port.
 WANO HA deployment only support active-standby mode, not support active-active mode.

18. 1. Why we need configure multiple IP in multiple VLAN environment ?
2. How to set VLAN configuration ?
Question
3. What scenario we need configure propagate link down ?
4. What type of cable we should prepare when we want to use HA deployment?

19. Thank you !
tech.support@sangfor.com
www.sangfor.com
Sangfor Technologies (Headquarters)
Block A1, Nanshan iPark, No.1001
Xueyuan Road, Nanshan District,
Shenzhen, Guangdong Province,
P. R. China (518055)