WAAS Show Commands

When i execute the command
show tfo connection summary
I get the alot of
PT in Progress
and
PT No Peer
results
What do these mean as far as optimization goes? These all are appearing under the Pass Through Connection Heading.
Also, application engines lie on both sides of the connections reporting the PT no Peer and PT in Progress outputs.
Are there any cisco docs that dig deeper into the relevance of the output from these types commands more so than the command references. I am looking for more tools to troubleshoot waas optimizations.

Michael,
Pass-through connections are connections that are forwarded without any optimization. This can happen for a number of reasons. The specific connection types you mentioned mean the following:
PT In Progress - The connection was already established when the first packet was seen by the WAE.
PT No Peer - The connection is pass-through due to no peer WAE being found during TFO auto-discovery.
Zach

Similar Messages

  • At CRS-1,how can i use show command with pipe | ?

    HI,ALL
    when I use show command with pipe on the CRS-1,the command invalid
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |errors 
                                                                       ^
    % Invalid input detected at '^' marker.
    ========================================================
    But Previously on the cisco 7609,I can use the show command
    GZ-DM-SR-1.MAN.7609#show int | include line |err
    Vlan1 is down, line protocol is down
         0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
         0 packets output, 0 bytes, 0 underruns
         0 output errors, 0 interface resets
    Vlan11 is administratively down, line protocol is down
         0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
         0 packets output, 0 bytes, 0 underruns
         0 output errors, 0 interface resets
    Vlan99 is down, line protocol is down
         0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored
         0 packets output, 0 bytes, 0 underruns
         0 output errors, 0 interface resets

    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |errors 
                                                                       ^
    % Invalid input detected at '^' marker.
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |?    
    | 
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | |?
                                                                        ^
    % Invalid input detected at '^' marker.
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | ?
      begin    Begin with the line that matches
      exclude  Exclude lines that match
      file     Save the configuration
      include  Include lines that match
      utility  A set of common unix utilities
      <cr>    
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |
    % Incomplete command.
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |errors
                                                                       ^
    % Invalid input detected at '^' marker.
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#                                     
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | ?   
      begin    Begin with the line that matches
      exclude  Exclude lines that match
      file     Save the configuration
      include  Include lines that match
      utility  A set of common unix utilities
      <cr>    
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line |?
    | 
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line | include er$
    Thu Jan 15 22:36:24.120 GMT
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#
    RP/0/RP0/CPU0:JA-DL-CR-1.MAN.CRS-1#show interfaces | include line           
    Thu Jan 15 22:37:05.013 GMT
    Loopback0 is up, line protocol is up
    Loopback1 is up, line protocol is up
    Loopback6 is up, line protocol is up
    Null0 is up, line protocol is up
    POS0/0/0/0 is up, line protocol is up  (APS not Configured )
    POS0/0/1/0 is up, line protocol is up  (APS not Configured )
    TenGigE0/0/4/0 is up, line protocol is up

  • Create a privilege level that only allows access to show commands

    Hi,
    I would like to create a privilege level that would only give access to the show commands for certain users. What would be the best way to do this?
    Would I have to use the privilege mode level level command for every available show command or is there a more efficient way of doing this?
    In addition, could we manage such a privilege level from a Radius Server.
    Thanks for your help
    Stéphane

    Well, I think the best way to achive this is to use TACACS with command authorization feature.
    Configuration on the tacacs server ( only for show commands, read only access)
    http://www.cisco.com/en/US/products/sw/secursw/ps2086/products_configuration_example09186a00808d9138.shtml#scenario2
    These commands are required on an IOS router or switch in order to implement command authorization through an ACS server:
        aaa new-model
        aaa authorization config-commands
        aaa authorization commands 0 default  group tacacs+ local
        aaa authorization commands 1 default  group tacacs+ local
        aaa authorization commands 15 default group tacacs+ local
         tacacs-server host 10.1.1.1
         tacacs-server key cisco123
    These commands are required on ASA/PIX/FWSM in order to implement command authorization through an ACS server:
        aaa-server authserver protocol tacacs+
        aaa-server authserver host 10.1.1.1
        aaa authorization command authserver
    However, if you strictly want to use radius server then please try the below listed attribute for a single user or group.
    Service-Type = NAS Prompt
    http://www.ietf.org/assignments/radius-types/radius-types.xml#radius-types-4
    This might not work for ASDM.
    HTH
    Regards,
    Jatin
    Do rate helpful posts-

  • Cisco7206 show command to get the chassis s/n

    Hi there,
    I have a partner in Canada that is trying to add a Cisco 7206VXR to smartnet and we are trying to determine the true chassis serial number.  The end customer has provided us the sh invent which gives us the main processor board s/n, and they have provided us the sh hardware which also gives us the serial number of the main processor board.  I have searched in Cisco's manufacturing tool  and found the main processor board s/n and it provided me the chassis serial number but the partner is not accepting this to be the chassis serial number.
    Is there another show command that the end customer can do to see the correct chassis serial number?
    Thank,s
    Debra Cameron
    Cisco Canada
    Partner Support

    Hi,
    DId you try with show version command? because when i tried with packet tracer, it shows some ID in the name of Processor ID. here is the example of sh ver.
    Processor board ID JAD05190MTZ (4292891495)
    M860 processor: part number 0, mask 49
    2 FastEthernet/IEEE 802.3 interface(s)
    239K bytes of NVRAM.
    62720K bytes of processor board System flash (Read/Write)
    Please try and reply back.
    Thank you.

  • Show command

    Hi,
    does anybody know if there is a show command that displays all the prefixes in the BGP table that match a specific extended community route target?
    Thanks in advance
    Stefano

    Hi,
    There is a little trick: you define an extended community list specifying the RT and then use it with your show command, f.e.:
    Router(config)#ip extcommunity-list standard CheckRT permit rt 65535:1
    Router(config)#end
    Router# show bgp vpnv4 unicast [all|rd|vrf] community-list CheckRT
    Depending on your IOS version, the command syntax might vary slightly, but the ? is your friend ;-)
    You can also use regular expressions within extended community lists. For the complete usage please check
    http://www.cisco.com/en/US/products/ps6350/products_command_reference_chapter09186a0080454ced.html#wp1074763
    Hope this helps! Please rate all posts.
    Regards, Martin

  • CSS11506 Good Show commands to validate failover

    Hello All,
    I am planning to perform a failover drill between active and standy CSS loadbalancers which are configured in a cluster pair.  I am looking for help to know what show commands I can run to validate that the failover occurred successfully from primary to secondary load balancer and that the VIP's have failed over successfuly as well.
    Any guidance you can provide on this would be greatly appreciated.
    Thanks,
    Adil      

    Hi Adil,
    You can use:
    # sh virtual-routers
    If you have configured VIP/Int
    If you have Box-to-Box:
    # show redundancy
    Cesar R
    ANS Team

  • ACE - unable to execute various show commands. Error: Called API timed out

    Hi I am runnng version A2(2.3)  on a HA ACE setup.
    I have noticed today that issuing various show commands such as 'show run' and 'show probe' on the active ACE have suddenly stopped working. On hitting return the ACE sits there for a while non respondant before finally outputting an Error: Called API timed out and then returning to the command prompt. It only seems to happen on show commands that would generate a lot of output, for example a 'show version' works. I have also noticed a delay sometimes in logging into the active ACE which has again only come to light today.
    We havent made any changes recently and this behavior has not been seen before.
    I could only find one similar posting which kind of suggested that a high logging level may be to blame for this issue, we are running at debugging level but have since the ACE's were brought into play over 12 months ago (yep i know logging at that level is far from ideal).
    Production traffic does not seem to be affected at present.
    Apart from reudcing the logging level I am not sure what else could be causing this issue, has anyone come across this one before?
    Unfortunaltey the 'show resource usgae in one of the commands that wont work'
    A 'show cpu'  command shows nothing above 10%
    Though multiple context are configured (3), the default resource allocation is in place between all three.
    Thanks for taking the time to read.

    Thanks for the response I will take a look at that Bug ID.
    In the end as you have already suggested above I ended up failing across to the standby ACE and powering down/up  the affected ACE module from the switch CLI. This seems to have restored all functionality. Even a soft reload command prior on the affected ACE didnt take affect.

  • Show Command Killed 6509???

    Good Morning,
    Can anyone tell me why issuing the following command would drive the processor utilization 100%?
    sh ip device tracking all           
    This effectively took the switch offline until we resolved the issue by clearing the vty lines.  The following message was listed in the log 4 times:
    %IP_DEVICE_TRACKING-4-TABLE_LOCK_FAILED: Table already locked byprocess-id 130(SSH Process)
    This 6509 is functioning as a L2 access switch and has a very minimal config - only features running are dhcp snooping and 802.1x.  Other engineers in my company use this command on 6509s (same IOS) daily with no issues.  Unfortunately, I am unable to post any specific config info so I am just curious if anyone else has encountered this issue as I would love to know how a show command caused this issue.
    Thanks,

    show module
    http://www.cisco.com/en/US/products/hw/switches/ps708/products_command_reference_chapter09186a00802dec4b.html#wp1029450
    Please rate all helpful posts!
    Chris

  • Process show commands with EEM

    Hi all,
    Im newbie in EEM, but using it in on of my projects in a basic style:
    syslog or ip sla tracking events
    set actions and some basics if/else...
    I dont know how I lived without EEM, its awesome.
    I need to do some advanced inspection of show commands output, like taking some strings from "show ip route", "show ip ospf" and so on, compare them and do some actions based on result.
    Can anyone show me some simple example, with filtering IP address of the DR from "show ip ospf neighbor", comparing it with router-id from the "show ip ospf interface" and make some action based on the result. It would be very useful for me.
    Also documentation for beginners would be appreceated.
    Best regards,
    Aleksei 

    Sorry, I missed this one originally.  There are a lot of examples in this community that talk about parsing show command output.  I don't know of any OSPF-specific ones off the top of my head, but look at examples like:
    https://supportforums.cisco.com/thread/2238284?tstart=0
    https://supportforums.cisco.com/thread/2241567?tstart=0
    You'll need to come up with regular expressions that match what you want from the output of the OSPF commands.  I don't have OSPF output handy to show any relevant examples, but hopefully the two I mentioned will be of some help.

  • How to verify ISAKMP Aggressive mode using show command only?

    How to verify ISAKMP Aggressive mode using show command only?

    Ah OK, my mistake. I was thinking ASA - I believe you are using an IOS-based VPN.
    The state after establishment should be "QM Idle" (quick mode) - whether the Phase 1 was MM or AM.
    I think you'll only see the AM in the debugs (like you have) or if you watch the output of the "show cry isa sa" command during establishment of the Phase 1 SA. If you're quick, you may see it cycle through as shown in this reference:
    http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/security/s1/sec-s1-cr-book/sec-cr-s3.html#wp5743341910

  • How can I check the virtual-address up using show command in ACE?

    I want to check the virtual-address using show command.
    however, there are not in ACE. So I used the ping to check virtual-address status in ACE
    I want to know the command what is verify virtual-address status , using show command
    Thank :)

    Try -> show arp
    There you have a Type column and a Status column.
    Look for the entry "VSERVER" in the Type column
    Roble

  • Expect script and show command capture problem.

    Hello everyone.
    I want to capture the output of 'show interface status' to text files for our +600 switches.  Unfortunately, we have many old 2924's and other models running code prior to 12.0(21) that cannot support 'show command | redirect tftp....'  My hope was to use this command set and run it in an Expect script to capture this information on a daily basis.  Running the 'show interface status' in an Expect script is pretty easy, but I cannot see how to capture the show command output to a file for transfer to a server.  Has anyone else faced this problem and found a solution?
    Thanks,

    To write the "show" commands output to a text file in Expect/Tcl:
    set filename "/path/to/output.file"
    exp_send "show running\r"
    set var $expect_out(buffer);
    set fid [open ${filname} w+]
    put $fid $var
    close ${fid}
    Large "show" output can often exceed the default size of $expect_out(buffer) however. This can be tuned accordingly:
    http://wiki.tcl.tk/9407

  • Local ASA passwords to allow ALL show commands, no config

    Hi there
    Currently have an ASA 5545. What I want to do is allow our support team to perform ALL show commands (up to and including show run) but not enable them to perform ANY configuration changes on the devices (not get into config t). This is to allow them to check ARP tables, routing protocol status, etc
    Can anyone advise the syntax to do this? i don't have access to the ASA at the moment and haven't been able to figure it out in IOS, i'm assuming its not too hard...

    Assuming AAA authentication, define some users with intermediate privilege levels and assign the commands they can run to that level, e.g.
        username readonly password SomeSecret privilege 2
    followed by a tedious number of privilege commands for each of the keywords "show ?" expands to:
    privilege show level 2 mode exec command aaa-server
    privilege show level 2 mode exec command xlate
    Anyone knowing a more consise way would be welcome.
    -- Jim Leinweber, WI State Lab of Hygiene

  • SHOW commands without ENABLE...?

    I have a user who has been given read-only, privilege level 1, access and wants the ability to use the various SHOW commands.  We have ACS running in this environment.  Is there a way, through ACS, to give him these commands?  
    Policy Elements/Authorization and Permissions/Device Administration/Shell Profiles has ReadOnly with all shell attributes set to not in use, default/max privilege set to 1, nothing extra in custom attributes.  Same set of submenus, Command Sets, Limited has "Permit" "SHOW" with no arguments listed.  Under Access Policies, Standard Device Admin, Authorization, I have a rule for the identity group assigned to the user in all locations and all device types that assigns the shell profile of ReadOnly and the command set of Limited.  However, the user cannot perform any such commands
    What am I missing?  Is there another way to do this?  As I said, the key is to provide the show commands without the ability to make changes to the devices.

    Yes this can be done and it sounds like you have ACS configured correctly.  However, I am not sure if all show commands will be available without entering enable mode.  For example, show interfaces is not available until after you enter enable mode.
    What AAA commands do you have running on the devices?
    I am doing pretty much what you're doing but I allow the user to enter enable mode and then restrict them to a hand full of commands.  Also, I have ACS controlling the enable password on a per user basis.

  • Show commands logging ?

    Hi guys, i m using ACS 3.3 windows version, these are the commands
    aaa accounting update periodic 1
    aaa accounting exec default start-stop group tacacs+
    aaa accounting commands 15 default start-stop group tacacs+
    but i m not getting all the show commands logged, i usually get logging of show running, show start-up, but no other show commands like show ip int brief and such, what is the reason ? how can i get all the exec commands logged ?
    thanks

    Ovais
    The command that you have configured:
    aaa accounting commands 15 default start-stop group tacacs+
    will generate accounting records for the commands that are entered that require level 15 privilege (such as show run, show start, etc) but will not generate accounting records for commands which only require level 1 privilege (such as sh ip int brief, etc). If you also want these commands to generate accounting records then you should add this to your config:
    aaa accounting commands 1 default start-stop group tacacs+
    HTH
    Rick

Maybe you are looking for