WAAS 4.1 central management
Hi All,
Base on my understanding, we can run CM on 274 appliance with enterprise license. my question is: if company wants to save money and use 274 as AA, is it possible to implement waas 4.1 solution without even have CM? or CM is the mandatory piece of design?
thanks
Alex
The use of a Central manager is not required to accelerate traffic. However, without, you will not have access statistics reporting, CM software updates, GUI configuration and more.
All AA will have a default policy, but will need to use CLI to implement any advanced features. Highly recommended to utilize a CM in optimization environment as number of site deployments grow. Without CM each branch / core node needs to be administered individually as opposed to centrally using group policies.
Taking the cost into effect of admin for each device vs. ~6k for a manager kind of pays for itself.
The WAVE274 allows for up to 1000 managed devices.
Similar Messages
-
WAAS installed without Central Manager. not compressing traffic
Hi,
I installed 2 SRE modules in 2 ISR G2 router and configure them without Central Manager, but they are not doing compression, Traffic is going to Branch to Head Office but without compression.
My configuration is similar to this link
http://2and2is5.wordpress.com/2011/03/30/configuring-cisco-waas-on-a-sre/
I want to compress http, exchange and cifs traffic.
I don't have Central Manager, could WAAS works without Central Manager ?
Can anyone help me with that.
Thanks in Advanced.Hi Arslan
WAAS requires a Central Manager however once they are setup it doesn;t technically require one in order to continue to to optimise traffic. If your WAAS environment is setup correctly and is intercepting the traffic http and CIFS should automatically been compressed with LZ compression. WAAS can accelerate Exchange however it depends on how your Exchange environment is setup and whether it is encrypted? If its encrypted via SSL you will need a WAAS Central manager to accelerate it.
To check if you WAE's are running correctly type in "show cms info" on the WAAS and you will probably see your WAE is status is not online:
WAE2#sh cms info
Device registration information :
Device Id = 3107921
Device registered as = WAAS Application Engine
Current WAAS Central Manager = ##.##.##.##
Registered with WAAS Central Manager = ##.##.##.##
Status = Online
Time of last config-sync = Mon Sep 24 13:18:51 2012
CMS services information :
Service cms_ce is running
You can check the accelerator status with the below command:
WAE2#sh accelerator
Accelerator Licensed Config State Operational State
cifs Yes Enabled Running
epm Yes Enabled Running
http Yes Enabled Running
mapi Yes Enabled Running
nfs Yes Enabled Running
ssl Yes Enabled Running
video No Disabled Shutdown -
Firewall between WAAS 7341s and Central Manager.
Is there a white paper that describes having a firewall between a Central Manager and the WAAS devices it is managing? I need to know all the ports and protocals that need to be allowed through the firewall. - Thanks
Hi Jeff,
I am searchign for white paper for you but you need following ports bi-directionally open between WAAS CM and WAAS to communicate to each other.
1. TCP 8443
2. TCP 443
3. UDP 4050 - if you are using directed mode.
4. TCP 22 and 23 - If you plan to use SSH / Telnet for management.
Regards,
PS: If this answers your question, please mark this as Answered. -
WAAS - behavior if central manager is down
We would like to move our 4.1.3 central manager to a different city. I understand that the waas devices dependent on the CM continue to operate if the CM is down, but if a waas device reboots while the CM is down, will it continue to operate?
The easy way to do this would be to add a Standby CM and fail over to it while the Primary is offline during the move.
However, if a box is rebooted while a single CM is offline, it should be okay unless you have disk encryption enabled. Then it won't be able to access the disk cache until it can reach a CM during the boot cycle for the encryption key.
Also, another thing to consider: Are you using a dns host name (waascm.cisco.com) in your WAE configs for the "central manager address" or are you using an IP address that will be changing? If you are using an IP address and are NOT using the Standby CM failover technique, then you have to change it on the WAEs manually when the CM comes up with a new IP address.
Hope that helps,
Dan -
How can I enable GUI in WAAS Stand By Central Manager
Hi guys,
I'm testing the stand by central manager, the situation is as follows:
When the active central manager goes down I try to access the GUI in stand by central manager but it always sends me the following error
Graphical user interface is not enabled in this standby CM.
Please close this window and go to the Primary CM.
So I think that I have to enable anything but I don't know what, can anybody help me?
Thanks in advance!
LeninCurrently the switch to a standby CM requires manual intervention.
The benefit of the Central Manager is that it provides configuration management, device management (software upgrades, etc.), reporting, and security services from a single, central location. Note that the security services, such as disk encryption keys, SSL certificates, etc., are available from the Standby CM (in the event that the Primary CM is unavailable) without the need to promote the Standby to Primary.
Regards,
Zach -
WAAS Express devices went offline in Central manager
Hi all,
after a long time i have a new issue in our WAAS environment.
We're running several WAAS Express devices.
And a few weeks ago i integrated them into our WAAS Central Manager.
The registration of WAAS Express device was done on basis of "waasx_deployment_guide_120910.pdf"
Now when i came back from christmas holiday i detected that all of them became offline again in CM.
Activating as well as replacing did not work, cause the router detected that the device is still registered.
i got the following output after this:
Jan 10 15:30:37: %WAAS-3-WAAS_CM_REGISTER_FAILED: IOS-WAAS registration with Central Manager failed for the following reason: Registration r
ecord for this device already exists or other devices share certificate or mac address or ip address with this device. Failed to process reg
istration request initiated from 10.11.176.1
Jan 10 15:30:37: %WAAS-3-WAAS_CM_REGISTER_FAILED: IOS-WAAS registration with Central Manager failed for the following reason: Registration r
ecord for this device already exists or other devices share certificate or mac address or ip address with this device. Failed to process reg
istration request initiated from 10.11.176.1
Now to my questions:
How can i set the WAASxpress router to Status active again on CM?
What could be the reason why the WAAS express device became offline?
thanks for your feedback in advance
DieterHi Dieter,
i am just curious to know what made the WAAS express go offline. Even if you open a TAC case, TAC is going to ask this question.
1. Was there any IOS upgrade performed on routers?
2. Was the routers reloaded for any reason?
3. If you are using AAA / TACACS, any changes like upgrade / renewal of certificates on them?
This information will help you narrow down the problem quickly. If you can share above information, we might be able to move something for you.
Regards. -
Https certificate on WAAS Central Manager
Hi,
I wanting to know if it is possible to authenticate the WAAS central manager with a different certificate/key pair than the self-signed certificate/key pair.
I can't find any information about installing my own certificate/key pair.
Thanks in advanceWe do have an option for the same:
First you may generate a CSR using:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v531/command/reference/execmds.html#wp2773266
Once done you can get the cert and import cert and keys on Central Manager using admin option
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v531/command/reference/execmds.html#wp2773369
"admin"
Specifies that the certificate and key are for the Central Manager admin service. This option can be used only on the Central Manager.
The Central Manager admin service uses a self-signed certificate and key by default. You can use the crypto import pkcs12 admin command to import a custom certificate and key in PKCS12 or PEM format. If you delete the custom certificate and key, the self-signed certificate and key again become active.
Hope this helps,
Swati -
WAAS Central Manager version 4.1
Hello,
I have to prepare a design of a WAAS deployment for my customer. I have an issue with the 4.1 version: Does i have to use an appliance dedicated for the management or i can use an WAE-512 with entreprise licence for managament and for WAN optimization features?
Thank you in advanceIn any version of WAAS the supported configuration is to have a minimum of 2 application accelerators and one central manager. You cannot run the Central Manager and Application Accelerator on the same device.
The enterprise license unlocks specific features, notably CIFS acceleration but will not influence the number of required WAE's. -
Is WAAS Central Manager needed for SRE?
Hello experts,
We're planning to deploy just WAAS SRE in 3945 routers at multiple sites? Do we need to buy WAAS central manager? also can WAAS SRE be configured from command line and able to save the config to text file just like on router's IOS?
ThanksHi,
For your setup to be supported, you need to have all of your WAAS devices registered to a Central Manager.
Will it optimise connections if you don't? Yes it will but if you run into any issues with it, you will be on your own...
Regarding the configuration, you need to have the module imported into a CM but you can do all of the config from the CLI if you prefer and only use the CM for statistical reporting.
Nicolas -
Can someone tell me how to deploy Cisco WAAS Central Manager to manage 100 WAE devices over WAN? Is there any additional devices need to setup redundant design and any license cost included here per device basis to monitor? I need detailed solution to manage WAE devices centrally.
Vinod,
There is no need to buy additional licenses or no need to add per device license on the central manager. You can go with the 294-4G or the 474 device , these can support upto 250 devices. However would suggest you to go with a higher model so in future if you expand , you might want to replace the CM that time.
Also a central manager cannot work as a inline or wccp device nor it can do any optimization.
Regards
Abijith -
WAAS Central Manager Replacement
I have need to replace a WAAS Central Manager (4.4.x). The replacement would have a new IP address. The planned path of migrating is first to setup the replacement as standby and once sync'ed promote to primary. I will then manually update the WAE devices with new IP address.
OLD CM:
WAE# configure
WAE(config)# central-manager role primary
WAE(config)# cms enable
On the standby device, execute the following CLI commands:
WAE# configure
WAE(config)# central-manager role standby
WAE(config)# central-manager address new IP
WAE(config)# cms enable
Is this idea the best approach?
Any idea if the SSL certificates would have to be revoked and re-issued (whether self signed or otherwise)?Hi,
The steps to replace a CM hardware have been documented under the following bug:
http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtz47138
Basically, the steps are the following:
If the CM will be using the same hardware and IP you can restore the CMS database.
If the CM will be using a new name or IP, use the workaround provided by CSCsi59886:
1- Add new CM as standby
2- Make it primary
3- deactivate former CM in new CM GUI
4- delete former CM from new CM GUI (and make sure it s gone from the DB)
5- 'cms deregister' on former CM CLI
7- rename former CM, change its mode and reload.
8- rename the new primary and change its IP address
9- Change the IP and mode of former CM and register it
Regards,
Nicolas -
WAAS Central Manager - Procedure for changing FQDN and ip address
Software version 4.1.1c
I have the need to change my waas central manager hostname, doamin name and ip settings. What is the proper procedure to do this in order to keep the cm synchronized with the waes. I seem to have them out of sync now. Do you deregister all the waes first, change and reboot the cm, then register them again?Hi,
check SAP note 8307 Changing host name on R/3 host: What do you do? -
Where May I get WAAS OS 4.2.1 for Central Manager?
I am not seeing ANY WAAS software in Feature Navigator.
Hi James,
There is no specific image for Central manager. You can select the mode when you install WAAS for the first time --> whether you want it to act as central manager or application acceleration. You can select any of the universal images. Universal images can be used for Application accelerator or Central Manager but Accelerator images can only be used for application accelerator.
Further details about various WAAS images on CCO can be found here:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v443/release/notes/ws443xrn.html#wp90088
You can download the WAAS images under Cisco --> Support --> Downloads --> Browse all categories --> Products --> Application Networking Services --> WAAS --> WAAS software.
Regards.
PS: Please mark this as Answered, if this answers your question. -
Advice for WAAS Central Manager?
Hello,
We are building a WAAS lab (not production) for a customer and we recently discovered that we can't use the NME-WAE-502-K9 as the central manager which was very affordable. So we are very disappointed about this. The other equipment are Cisco ISR 2811 (very affordable for building WAAS) with NME-WAE-502-K9 running WAAS 4.1.1 acting as the application accelerators. I have some questions and asking for some advice about some alternative options for us to consider:
What is the cheapest/smallest WAAS option we can use for the WAAS central manager? The only thing I could find is the WAE-512-K9, but maybe there is something else that is smaller and cheaper for consideration.
From what I read, after WAAS software version 4.1.1 it requires the Enterprise and Transport Licencing. Does the WAAS central manager have a 30,60, or 90 day trial that the CM can run before a license is required like most of the Cisco Unified Communications products today?
Thanks in advanced!
-ryaA central manager is required to managed all of your accelerators properly in a supported configuration. You don't necessarily need a physical appliance though. There is also the virtual form factor (vWAAS is the accelerator version and vCM is the manager version) that can run on a ESXi hypervisor.
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/vwaas/guide/vwaasguide.html#wp69212
John
If this is useful please mark as Helpful or Solved. -
Renewing Self Signed Certificate for WAAS Central Manager
Hi,
We would like some help from you about the following: We have an WAAS Central Manager which its self-signed certificate validity has expired as showed below:
Validity
Not Before: Jul 7 00:47:06 2009 GMT
Not After : Jul 6 00:47:06 2014 GMT
We have used its certificate to install some other remote WAAS Express routers.
We would like to know the following:
1. is it possible to renew this certificate? or
2. do we need to reinstall another certificate on CM and replicate this new one on these waas express remote devices?
If affirmative for at least one of them, please, could you share any document that describe how to do it?
I have attached some output commands from our CM.
Thanks,
Marceloattaching file now!!!
Maybe you are looking for
-
From today both my iPad and iPhone will no longer charge
It's the weirdest thing. My Iphone & Ipad will no longer charge. They both worked/ charged fine yesterday. I have tried various other chargers for my iPhone as we have other Apple equipment at our house & they all charge fine. The lightning bolt is n
-
After reseting its linked to an apple Id
so i bought this iphone4s and i was ok with how it came because my thought was it can just be reseted and all the information will be gone no big deal. well thats what i thought when i folowed instructions to resetting it pressing power button and h
-
Terrible performance after moving VM's to new hardware
We recently decided to purchase a new server to run our VM's on since the old one did not have redundant drives. Unfortunately our new and improved server has resulted in far worse performance now that I've moved the VM's over to it! I am not really
-
Should e-book Data Guard Concepts and Administration be useless for us?
I think The Data Guard Broker is an easy and efficient way to manage a Data Guard configuration. The Data Guard Broker provides us with two efficient tools: EM Console and DGMGRL. We can do everything we want for Data Guard system. Why we spend so mu
-
I can't access my bank of america online banking
I can't access my bank of America online banking. When I type in my online ID it says unable to process request. == URL of affected sites == http://bankofamerica.com