Riverbed virtual in-path issue

my scheme Hello, dear Experts! I've successfully tried to deploy physical in-path deployment of my riverbed 550 and 1050 and now I am trying to implement virtual in-path configuration. My scheme and pieces of config on the picture. swbr and swhq it is a layer3 cisco 3750. Router - it is a WANem, linux-based router. I am trying to deploy RVBDs via PBR. In network statistic I am seeing passtrough traffic on both RVBDs, but it can not optimize traffic. What is possible mistake or bug in my installation?
KhitrovAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

BDC-NetCommented:
I have never used the riverbed product, but I am familiar with cisco's WAAS. Can riverbed use WCCP?
BDC-NetCommented:
It looks like riverbed can use WCCP. I would try using WCCP instead of PBR. Here is an example config for a 3750 switch:

ip wccp 61 redirect-list 122
ip wccp 62 redirect-list 123

ip wccp 61 redirect in (on inside)
ip wccp 61 redirect in(on outstide)

access-list 122 permit tcp any 10.50.76.0 0.0.0.255
access-list 122 permit tcp 10.50.76.0 0.0.0.255 any

access-list 123 permit tcp any 10.50.76.0 0.0.0.255
access-list 123 permit tcp 10.50.76.0 0.0.0.255 any

Open in new window

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
KhitrovAuthor Commented:
BDC-Net, It is good, but our IT-security requires to use PBR. RVBD allows to do this, I've configured it relative to RVBD PBR deployment guide.
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

kevinhsiehCommented:
WCCP is safer than PBR, because you are less likely to black-hole traffic like you can with PBR. I use Riverbed with WCCP and it works great.
KhitrovAuthor Commented:
kevinhsieh, PBR on cisco routers can verify next hop address before redirect traffic, it allows to avoid black holes.
BDC-NetCommented:
If I am not mistaken with PBR.... If you reboot the riverbed box or stop your PBR session then the existing TCP sessions it is handling will be dropped. Usually, it isn't too big of a deal due to TCP handshaking, but  I have seen issues. WCCP will wait to stop the service or reboot the box until the sessions are done while not excepting new sessions.
KhitrovAuthor Commented:
Thanks for all. I've configured WCCP solution. It works well.
kevinhsiehCommented:
@BDC-Net, Cisco can verify that the next hop is alive (responds to ping), but that doesn't mean that the Riverbed is actually able to forward the traffic. For example, the Cisco will send traffic to the Riverbed Steelhead appliance before the appliance has been able to start the optimization service, which wll cause those packets to get dropped. I have tested physical in-path, PBR, and WCCP, and I found WCCP to be the least disruptive to traffic when rebooting the appliance.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.