WAAS and "Other traffic"

Hi there,
Recently I have deployed WAAS for just one site, and I am a bit concerned as majority of the traffic falls into "Other Traffic" category. I've discovered this is just a file transfer between XP desktops and a W2003 server.
Why it's categorized as Other?
Thanks

Correct - that would be SMB traffic. Prior to 4.0.7, it should be classified as part of the File-System application. From 4.0.7 on, it is classified as part of the WAFS application.
Can you please confirm that you have classifiers that cover ports 139 and 445. If so, which application is the classifier associated with?
Zach

Similar Messages

  • WAAS REPORTS - Other Traffic

    Hi all
    I am facing an issue with waas reporting, in the charts i have OTHER TRAFFIC with a high percentage (50% and sometimes more)
    What can i do to know which traffic is being categorized as OTHER TRAFFIC so i could create new policy for it

    Click on manage device and go to connections.
    There you will see connections and level of optimization being applied. It will display ip source and destination as well as tcp port number. Once you have the port create a new application and classifier policy

  • WAAS and Netflow, traffic reports are inflated unpredictably

    Not sure if anybody has any luck getting Netflow to report correctly when WAAS is in a picture.  We have about 30 sites deployed with WAAS in out of line configuration and every single one of them incorrectly report Netflow traffic to our NetQoS Reporter Analyzer product.  Typically the traffic throughput seems to be inflated several times higher.  We tried every which way to alter the netflow configuration in the router including Egress Netflow but the traffic is still showing higher than actual traffic coming out of a port.  In one site, even the "show interface" command on the router shows 5-minute rate of 16Mbps on a 6Mbps Mulitlink circuit. 

    Hello Thang Lu,
    We have run into this issue with a few customers and here are a some things to consider:
    - If you have 'Flexible' NetFlow enabled: Beware, Flexible NetFlow does not export the flow direction by default you must configure the direction bit to be set for egress flows.  Traditional NetFlow v9 does this automatically.
    - Are you excluding certain protocols in NetQoS?  If you don't do this, some tunnels and VPN connections will be exported twice!
    These are the protocols we exclude by default in Scrutinizer NetFlow Analyzer:
    I hope these suggestions help you.
    Jake

  • Telnet traffic intiated from console and other traffic

    I have got this scenario :
    hostname R1
    interface Ethernet 0/1
    ip address 192.168.10.10 255.255.255.0
    ip policy-may APPLYPOLICY
    ip local policy route-map REDIRECT
    ip access list extended CONTROL
    Permit tcp any 172.18.1.0 0.0.0.255 eq 23
    route-map REDIRECT permit 10
    match ip address CONTROL
    set ip next-hop 192.168.10.220
    As we know that packets that originate from the router are policy routed according to the local policy.
    Does the telnet traffic to a destination on the 172.18.1.0/24 network, that is initiated from console connection on the router, will be policy routed as well ?

    Hi,
    all traffic locally generated should be treated the same, it should not matter, if you access the router through console or vty. The main point is, that the telnet packets are created locally, no matter how the command is executed.
    Regards, Martin

  • How does QoS work with WAAS WCCP? What's the interaction between QoS Traffic Classification and WAE Traffic Application Policy?

    How does QoS work with WAAS WCCP? What's the interaction between Router QoS Traffic Classification and WAE Traffic Application Policy?

    By default, WAAS preserves the DSCP marking on intercepted packets.  There is a configuration option to set/override the DSCP value at the global (device), application, and classifier levels.  Currently WAAS provides marking only.  There is no action taken by WAAS based on the DSCP value.
    Regards,
    Zach

  • WAAS- Optimization for OCS and Wireless traffic

    Hi,
    I have been trying to find some information regarding optimization of Microsoft Office Communicator and Wireless traffic across a WAN environment via WAAS and its acceleration/optimization capabilities.
    So far, I have seen the case studies section for WAAS but no case offers what I am looking for...
    Do you have any information/documentation that can be shared with customers regarding OCS and Wireless as key business application that were benefited after  a WAAS deployment?
    Thanks
    Regards,
    M.

    Hi Manuel,
    Answers for you:
    So we can  say that wireless traffic across a WAN link could not obtain any  benefits from any WAN optimization solution, in this case WAAS?
    Ans: Nope. I do nto mean that. What I am trying to say is - it's a different thing. Wireless or no Wireless, optimization can be done when the traffic passes thru edge and core side WAEs. If it passes thru only one WAE, it will go in pass thru.
    If  a wireless controller at a remote site needs to send traffic to another  wireless controller in a centralized or HUB site, can we optimize this  traffic or it will just  benefit from the overall reduction in bandwidth  as a result of any TCP based application getting optimized?
    Ans: It really does not matter. The traffic really needs to pass thru WAEs on both sides in order to optimize. Whether it is from wireless controller or from any other devices, it really does not matter. Further the type of traffic and policies on WAEs will determine how much optimization can be done, if any.
    OCS  uses SIP which is TCP based or ports 506x so I am assuming that SIP  could be benfited by WAAS unless OCS uses a secured session were SIP is  encrypted.: Yes, WAAS can help you but SIP is a voice traffic and there are default policies like VoIP on WAAS which will pass thru this traffic for port 5060. It's not a good idea to optimize voice traffic due to various reasons.

  • Other traffic at 75% Crushing the optimization, Acceleration and Bandwidth

    Other traffic at 75% Crushing the optimization, Acceleration and Bandwidth.  Is there a way through the CM to see what the other traffic is?  Any thoughts or ideas?

    Hi Dan,
    You really do not need to create a policy but rather you need application definition. Here are the steps.
    Creating an Application Definition
    The first step in creating an application policy is to set up an  application definition that identifies general information about the  application, such as the application name and whether you want the WAAS  Central Manager to collect statistics about the application. After  creating the application definition, you assign it to a device or device  group. You can create up to 255 application definitions on your WAAS  system.
    The Link:
    http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v441/configuration/guide/policy.html#wp1042389
    One the application definition is created for the traffic you want to identify, it will start displaying statistics under the application definition name.
    Hope this helps.
    Regards.
    PS: Please mark this as Answered, if this answers your question.

  • WAAS and IP SLA operation

    we are currently using the IP SLA udp jitter measurement to monitor our voice paths accross the WAN. If we implement a partial WAAS across the same WAN the voice traffic will be acellerated but not the IP SLA jitter measurement. Does this mean that when WAAS is implemented IP SLA is limited in its use?

    Hi Steve,
    The answer to your question depends on 1) how you deploy WAAS and 2) how you use IP SLA.  If you deploy WAAS using WCCP for interception, UDP traffic will never be intercepted.  If the WAAS device is deployed inline, all traffic flows through the WAAS device, so an IP SLA probe using UDP will be subject to WAAS pass-through handling behavior.
    What are you trying to measure with regards to WAAS?
    Zach

  • WAAS and Citrix ICA

    I am looking to accelerate compressed and encrypted ICA traffic.  Can WAAS handle this?
    If WAAS turns off compression and handles it itself, will that mean LAN traffic will be uncompressed on the server end and client end?
    thanks,
    gb

    WAAS versions greater than 5.0 all handle Citrix ICA with no configuration necessary, it is simply plug and play.
    WAAS does not turn off compression, it removes the Citrix compression and uses its own compression that is better on your WAN, then puts the Citrix compression back on at the other end.  The client sees the packet exactly as it was sent from the Citrix server, with Citrix compression.  WAAS is transparent to your users.  My WAAS system is currently claiming a 27% reduction in bandwidth for Citrix.  Other acceleration is much more impressive, like file copying (CIFS), web traffic, replication traffic, and SQL, all of which consistently show 70%-95% reduction in bandwidth.  All of which are also plug and play with WAAS.

  • WAAS and Juniper Netscreen Interoperability

    I've been doing a dig on historical posts relating to WAAS deployed through firewalls.
    I am working on a deployment with Juniper Netscreens & ASA5520 sitting between WAE's. IP connectivity is fine. I can ssh to remote device etc. but users cannot login (XP). The login scripts calls upon CIFS etc and I suspect this is being broken through the fw's.
    When I disable WAAS for this flow - it all works fine i.e. users can login and access full set of corporate resources. I suspect the firewalls but would appreciate any leads..
    thanks
    Ajaz

    Hi Ajaz,
    WAAS adds TCP Option 0x21 and increments TCP packet sequence number during TCP handshake. FW needs to be configured to allow
    these changes.
    On the latest PIX/ASA a new command "ip inspect waas" has been added to allow above changes by wae. You might want to check
    Netscreen config guide on command to disable TCP sequence number checking.
    If SSH to Servers is working fine then it might not be FW dropping packets. However to confirm it might be best to use
    tcpdump/tethereal on both WAEs and to sniff the traffic on whether its being dropped along the path by the FW.
    Few questions:
    - Whats the version running on WAEs?
    - Is it only CIFS traffic which is affected? Try disabling CIFS AO if its enabled and then test.
    Hope this helps,
    Best Regards,
    Rahul Vavale

  • WAAS and Symantec Vertitas Volume Replicator

    Hi,
    We are forwarding Symantec replication traffic via our WAAS infrastructure over a 20Mb WAN link. The CM appears to register the traffic but does not optimize it at all. Has anyone had any experience with WAAS and Symantec Veritas Volume Replicator (VVR) 4.3?

    I tested with VVR in the lab. VVR default uses UDP and using the nerd knob in the GUI did not force VVR to start using TCP. To get VVR to use TCP, I had to input these commands:
    vrport data 1999-1999
    vrport heartbeat 2000-2000
    or use what ever ports you want to use. The previous answer was asking if you were seeing TCP sessions in the WAE's. This can be seen by telneting to the WAE and issueing a "show tfo connection summary". Can you post the output of that command?

  • WAAS and 512 Deployment

    Attach is the Visio as well as config for the India site. The Visio has 2 tabs (POC-WAAS and Proposed-WAAS). The POC (Proof of Concept) tab does not have the spare 3660 installed yet but I plan to do that soon. The "Proposed WAAS" is where we would want to be. However, my question will most likely address POC tab with the preparation to move to the Proposed tab.
    Current assumptions:
    Since we have a Manager in India, we will be getting another Manager in Calif, If so, I would like to setup a Primary/Standby deployment for redundancy.
    Questions:
    1. For Calif Primary WAE, the visio shows a Management interface but do I need a management interface or is it better to go with a standby interface instead as well as use MHSRP?
    2. Since we have a high speed link (4 Mb Internet for VPN in POC but 10mb WAN for proposed), should we tune the buffers to the max? If so how?
    3. Is this a recommend design for California? for India?
    4. Is my configs a recommend configs for California 3660 in POC? If so, what do I need to change in 3825 in Proposed?

    Zach
    After reading the SRND, I believe the best design is to move the 512 to the Cores. Please see the updated Visio and planned configs. Here's my updated requirements:
    1. Calif is hub
    2. All traffic to India (10.2/10.26) should go through the VPN tunnel through (ASA5520)
    3. All traffic to 10.3 and 10.5 should go through WAN via (R-Voice2)
    4. Latency to India is btwn 280 to 340msec and BW is 2mb. Do I also need to be concern with the BDP, L2 redirect(forwarding), and Mask assignments?
    TIA

  • WAAS and NAM 4.2 Reporting

    hey folks,
    I recently went through the upgrade process with a customer to move their NAMs to 4.2 and integrate WAAS 4.0.15 with the NAMs via the flow agent. We followed the NAM integration guide and setup some reporting in the NAM for collecting information from the WAAS flow agents on bandwidth and response time. However, at this point, the information that we seem to be getting is limited. I am finding the reports in the WAAS GUI itself to be more valuable at this time, however, I have heard from several engineers since this integration has been available that NAM and WAAS are a good fit. Does anyone have any specific reports that they can point me towards in the NAM? Right now I have setup some Application optimization specific reports in the WAAS CM for HTTP and CIFS. What I would like to do is use the NAM to validate those reports and provide some upper management level visibility into specific flows to specific servers and how effective WAAS has been in optimizing that traffic. This customer is about to deploy WAAS worldwide and having some more detailed reporting capability would be very helpful.
    Does anyone on the list have any good experience with NAM 4.2 and WAAS that they can share and some how to's on what reports they are finding the most valuable to their senior managers and IT staff? Thanks
    Sincerely
    Mike Louis

    Hi Mike,
    This webinar on Jan 12; might be of interest to you.
    You can register via this URL.
         https://ciscosales.webex.com/ciscosales/onstage/g.php?d=201229605&t=a
    I also attached a document that might help as well - Using NAM Hardware in a WAAS POC and Depoloyment.
    Thanks
    Eric - please mark as answered with a rating of 5, if this answered your questions.
    /* Style Definitions */
    table.MsoNormalTable
    {mso-style-name:"Table Normal";
    mso-tstyle-rowband-size:0;
    mso-tstyle-colband-size:0;
    mso-style-noshow:yes;
    mso-style-priority:99;
    mso-style-qformat:yes;
    mso-style-parent:"";
    mso-padding-alt:0in 5.4pt 0in 5.4pt;
    mso-para-margin:0in;
    mso-para-margin-bottom:.0001pt;
    mso-pagination:widow-orphan;
    font-size:10.0pt;
    font-family:"Times New Roman","serif";}
    Leverage Cisco Network Analysis   Module to enhance operational visibility into WAAS deployments. NAM   reports on a comprehensive set of application performance metrics such as   application response time, WAN bandwidth usage, LAN and WAN data throughput,   and other application performance metrics to:
    Identify        application optimization opportunities
    Analyze        impact of Cisco WAAS implementation
    §  Take advantage of visibility for ongoing    optimization improvements and troubleshooting
    Cisco NAM   4.1 also introduces the first software only version of the NAM as a Virtual   Blade on the WAVE 574 and WAE 674.
    If you have ever felt overwhelmed   trying to answer the following questions:
    ·         How do I verify the impact of WAAS on   application performance at my remote offices?
    ·         How do I get the level of visibility needed   for effective operational manageability?
    ·         Is there a monitoring solution that is   integrated and does not demand additional footprint?
    ·         Is there a solution that provides visibility   across the entire WAAS deployment lifecycle?
    Please join us for a webinar of   the Cisco NAM 4.1 that explores the performance management and   troubleshooting capabilities of NAM hardware and NAM VB in a WAAS environment   to help address the above questions and more.
    WEBINAR Dates and Times:
    REGISTER January 12th, 2010 Tuesday at 8:00 - 9:00 AM PST/11:00-12:00 EST
    Agenda:
    ·         Overview of NAM and NAM VB
    ·         Setting up  NAM for WAAS analysis
    ·         Use of NAM for WAAS before-and-after impact   analysis
    ·         Use of NAM to improve manageability and   troubleshooting of WAAS
    ·         Q&A
    NOTE – Once you have   registered for the webinar, you will get a WebEx message with outlook ics   file.
    Please   click on the .ics file when you get your message from WebEx to make sure it   is placed on your Outlook Calendar.
    © 2010 Cisco Systems, Inc. All rights   reserved. Privacy Statement and Trademarks of Cisco Systems, Inc

  • Multiple HTTP Servers, 1 for HTTP and other for HTTPS

    I am trying to install 9ias 1.0.2.2.2 on 2 machines both running solaris. 1st machine hosts the database (8.1.7.4) and the other hosts the App server (9ias), what i am tryin to achive is have 2 listeneres. One for HTTP traffic and other for HTTPS traffic. Have anyone configured this and could shed some light and enlighten me.
    With all the notes i have read i have understood that i need to basically install 2 instance of Apache in 2 different Oracle Homes. but my question is how can i just have one portal repository. or rather i should say if somebody could guide me from installing the 2 instance of Apache.
    Thanks
    Mir

    You left out Twixl.
    Bob

  • Understanding 5505 firewall-site to site and internet traffic

    Hi,
    My question is mutli-faceted. I apologize for the lengthy intro here but i think the info is necessary to understand where I am headed in this.
    I am new to the cisco 5505. I have had very limited exposure to a 5510 that was preset. I have managed to make modifications to it here and there, but dont completely understand how it was put together. I learn by watching, listening, and gleaning what I can from others. I have had no formal training in CLI, but I have learned some of the commands. I know enough to be dangerous, but I respect my limitations.
    That being said, I have been charged with setting up a 5505 at a remote site. I need to accomplish several things.  Our ultimate goal is to use this device as a site to site with the 5510 at the corporate office. However, I need to accomplish this in baby steps, test, test real users and then maybe convert in full. Where I could outsource this in its entirety, that would preclude me from learning so I can address this in the future on my own.
    We need to have this in place by the end of February 2013.
    Currently the remote site is connected via a very slow (by todays standards) T1 line on a MPLS. Stable. Works, but slow. All internet traffic as well as work traffic is routed through that connection. We have added a 50mb cable connection (with static ips) to the office. First we want to set up the 5505 so that it can be used as follows:
    1, Internet traffic can be routed out through this device and all other "work" traffic routed through the MPLS.
    2, Test using this connection as a route out to the internet AND use it as a site to site VPN connection to the home office. (or anyconnect vpn)
              I need to be able to have users in both environments. IE, some still using step 1 and some starting to use and test step 2.
    3, long term, use this as the main connection per number 2, but add the IP address so that if the cable connection drops, the office can access internet via the VoIP T1 line as a life line.
    In all cases, I dont want internet going through the home office as it currently is traveling.
    I have done a lot of searching but so far have come up empty with answers.
    Question 1:     (This one probalby shows my ignorance the worst) - in using the 5505 firewall, will it segregate normal internet traffic from the VPN traffic when used by the workstation? Using the Gui, I didnt see where this was necessarily happening. Do I need to use CLI language (and what) to make this happen? Or is that a basic function that happens during the setup of the firewall using the GUI. Do I need to do some sort of "split tunneling"?
    Question 2:     Do I use this device as the Default gateway for both step 1 and 2/3) for normal use and then change the gateway on the Pcs to the VoIP network during emergency use,(that would bypass the firewall though or is there a way to have it route to that router if there is no connection through the Outside port? Or as long as I have some access to the device, can I make a change remotely to help accomplish this failsafe?
    Question 3:     We have 25 Anyconnect VPN licenses. Should we use these and not the Static site to site, if so, why or why not? They dont need to be used at all.
    Question 4:     In setting up the VoIP line for backup, would using that on the "DMZ" connection help in making this viable so that the device could still ultimately control the internet traffic?
    Question 5:     In setting up the VPN connections, unless i am getting the two methods confused, I will need the 5505 to hand out IP addresses for the vpn connection. I see in using a class c schema that i can use 92.168.0.0 to 192.168.255.0. So for instance, I could use 101.1.20.0 for the inside network Vpn addresses?? I need to stay away from 192.168.0.0 networks as we use that in our normal structure.
    Reasons for setting this up:
    Slow speeds over the T1.
    increasing demand for Skype, Video conferencing etc that the T1 pipe couldnt adequately handle
    Lack of backup pathways for downed connections - ie, backhoe chopping through wire at a construction site).
    I read through the Getting started guides on both the 5510 and the 5505 and feel I can likely get the site to site setup (I have a list of all the Ip addresses i need for inside networks and outside networks etc.
    additional notes:
    I have to email ATT anytime I want a change made on the MPLS router, so doing as little to that as possible would be good.
    I will be onsite for testing at the end of February  and will have direct access to the home office via other methods to work on the asa5510 if any additional work needs to be done on it once i am onsite.
    Thanks for taking the time to read through all of this. please forgive my lack of knowledge...
    Dave

    Thanks for getting back to me and so quickly!
    1) I am not sure if I understand the “ACL” portion of your question, but this is how I want to access info via the VPN tunnel:
    192.168.D.0 inside(NJ) to outside 5505 - 12.175.X.X to outside 5510 - 12.200.X.X to inside network (HQ)192.168.X.0. Routes are needed to find subnets 192.168.A.0, 192.168.B.0 and 192.168.C.0. The default gateway to those subnets right now is: 192.168.X.XX4 inside of HQ. This would be so that the NJ office could find resources of the other offices if needed. This will change as we wean off the MPLS. Inside the ASA 5505, the IP addresses are 192.168.D.0 for data, 10.X.X.0 for the Phone system. All other traffic would be sent out through the internet. Phone system uses the XOcomm conection to route phone traffic.
    2) I did some reading on SLA. Thanks for pointing that out. For purposes of learning here, I am showing this as 12.175.XXX.XXX for Comcast and 12.200.XXX.XXX for XO comm.
    4) I guess I would use an Outside 2 as that makes sense, in description, I would label them “ComCast” for outside 1 and “XOcomm” for outside 2.
    5) I am still not sure I understand this part. Are additional IP addresses needed for the Site to site VPN to talk to the local hosts, or will it use the IP addresses assigned by the local server?
    Next Steps
    1-         Configure the ASA5510 for the 5505 connection
    2-         Configure the ASA5505 for the 5510 connection
    3-         Configure SLA for Comcast and XOcomm outside connections
    4-         For this I need help….I think this is from step 1, but I need help to configure the internet to be segregated via my question from #1. Have I given enough information to do so? Please advise on ACL entries, and route statements needed so that NJ can talk to all the offices when using this connection, not just the Headquarters.
    Thanks
    dave

Maybe you are looking for

  • Vendor bank details report

    Hi SAP Experts, In the report If we gave any vendor number (codes)range can we get vendor bank details in that report .but no user exit, is any standard report there this is  my client requirement Please update me ASAP Have a good day Regards Surya

  • Component material to be used for both MTO and MTS scenario

    Hello All, What is the setting required at IMG or at Master data level, in order to use the component for both MTO and MTS scenario. Detail description of problem: In the system already MTS process is exist. And now business wants MTO scenario, in or

  • Download to excel - class not found error

    hi all i m trying to provide a feature in my project called download to excel. I have written the code and referenced appropriate jars still on deployment i get the no class def found error. Pls help. regards vln

  • My IPhone orientation freezes / locks and the only resolution Is to restart the iPhone... Help!

    Hi everyone! im using an iPhone 6 Plus with OS 8.0.2 and sometimes when I unlock my phone the orientation is locked upside down or will not change to landscape mode... i've tried the following to resolve without any luck: - Lock and unlock iPhone - T

  • I just brought a new macbook pro but am hving problems syncing ipad/iphone 4

    i just got my new macbook pro. i used my time machine to back up old macbook and then used it to put all my files on new one but when i try to sync ipad i get transfere purchaes .. but when i do that all my things say there not allowed on this mac as