Deployment Options

Question 1

What are the two deployment types? ( x2 traffic flow paths)

Answer 1

1. In Path (in line)
2. Out of Path - Quite complicated

Question 2

What are the 3 different deployment modes for the EdgeConnect appliance?

Answer 2

1. Router Mode - as in: In Line Router Mode (ILRM)
2. Bridge Mode - also inline but is ‘transparent’ within the same subnet
3. Server Mode - Default for EdgeConnect VMs but will likely be changed to a different type of mode.

Question 3

What is one advantage of Bridge Mode on a physical appliance.

Answer 3

Fail-to-Wire feature that acts like a cross over cable when the device is powered off.

Question 4

How does the Server Mode deployment type work?

Answer 4

Only one network interface.

Traffic must be redirected to the SilverPiek device in both directions

Question 5

What are some limitations of bridge mode?

Answer 5

1. No Local Breakout
2. Less path flexability
3. No EdgeHA Mode
4. No ZBF (Zone based Firewall) functionality

Question 6

What is the best protocol to support traditional HA deployments of EdgeConnect in Edge mode

Answer 6

VRRP - Virtual Router Redundancy Protocol

Two edge routers share a virtual IP and MAC address.

Question 7

What is the best way to deploy an HA pair of edge devices without the need for extra switches on the WAN side of the devices?

Answer 7

Edge High Avalability

devices share the wan connections between then where needed.

Question 8

How does a router direct traffic to a silver piek that is not inline with the traffic?

Answer 8

Either…

Adversite the destination networks using the best metrics to local routers

or…

Policy Based Routing (PBR) on the in-line router.

Question 9

Would you employ rate limiting on the device sending traffic or on the Silver Peak appliance?

Answer 9

On the Silver Peak Appliance.

Question 10

What does the Firewall mode “WAN Hardening” do?

Answer 10

Only tunnel traffic will be allowed through the interface along with DHCP, DNS, and cloud portal managment traffic.

Return traffic from internet browsing would be blocked if internet breakout was attempted.

Question 11

What does the Stateful Firewall mode of the EdgeConnect device do?

Answer 11

Acts as a very basic statful firewall but does not do any filtering such as IPS or inspection.

Question 12

What does the Stateful+ Firewall mode of the EdgeConnect device do?

Answer 12

Acts as a statful firewall plus NAT functionality but does not do any filtering such as IPS or inspection.

Question 13

How does ta SilverPeak Edge device support internal Server?

Answer 13

Inbound Port Forwarding

Question 14

What is a Zone Based Firewall (ZBF)?

Answer 14

Each inside and outside port as well as “business intent overlays” are assigned to a zone and then traffic behind zones can be controlled.
The Zone list is shared among all sites to allow setup or rules for the entire multi-site WAN network.

Question 15

Does the EdgeConnect device need direct access to the internet.

Answer 15

No. The EdgeConnect device can talk over a private network link to the Orchestrator and the orchestrator can act as a proxy to reach the Silver Peak Cloud Portal to register.

Question 16

Will the SilverPeak EdgeConnect device work behind a device that performs NAT?

Answer 16

Yes.