WAAS/WAE - CM required?

We are going to be evaluating Cisco's WAAS technology soon. I've heard conflicting information on the central manager - some say that a central manager is required, and others (including some of Cisco's documentation) state that the WAE can be configured using a built-in web interface or CLI.
Is the CM required for a simple 2-site installation?

Technically you can get WAN optimization (DRE, TFO, LZ) without a CM. For CIFs you definitely need the CM. But this config (2 WAEs) is not supported by cisco.
In short
You can only use WAAS with a minimum of three devices, two for the WAE's and one CM.
Hope it helps
Syed Iftekhar Ahmed

Similar Messages

WAAS - WAE slow Printing

Hi All;
I appreciate your expertise in this case regarding Cisco WAAS and WAE devices and their printing services/capability. As i am aware WAAS printing services is done via CUPS (Common UNIX Printing services)
I have an issue with WAAS printing; I just recently set up WAE device as print server and works fine but the problem as per below:
Problem:
Printing is real slow, for example if I was to print to same printer being hosted by windows print server i.e. windows 2000 (Yes I know OLD real OLD but they still use it!!) I would be able to do it in about 5 seconds, if I was to setup the same printer on WEA device it would take in between 30-60 seconds just to process it, also for instance if I was to right click on printer and check properties tab on W2K print server it takes about 3 seconds on WAE it may take up to 30 seconds sometime more.
What I have done:
I have setup and used as test printer is HP 9500MFP (socket://10.36.9.xx:9100) and I have used both drivers PCL and PS and
I have published the printer in Active Directory
I have checked the setting on both the WAAs and WAE device but I cannot find anything that may indicate where I can priorities printing traffic or optimize it. I made sure i have associated the driver and initailised it fine
I have also tried to tweak with printer properties and driver but no hope.
I have read the Cisco white_paper_c07-502183 and printingconfigwaas paper but I could not see anything mentioning anything about optimizing print queues etc, NOT sure if I had missed it or misinterpreted it and if so then please direct me or IT IS THE LIMITATION OF THE HARDWARE!!
I have also checked this forum but not sure if anyone has same problem, the closet one is this onehttps://supportforums.cisco.com/thread/131339
Environment:
Number of pilot users only 5 and all 5 not happy at all!!! Documents printed is mix of the two, Windows word docs and PDF docs
The WAAS and WEA devices are Cisco 474 and 274 respectively, the 274 will be used on branch offices and 474 is in main office (Head office) that I am currently setting up
Note/Hint: I have noticed under accelerations on the WAAS Central manager, policies, classifiers tabs etc and I am not sure if I need to define policy in there to make it any faster and if so how would I go about it.
I have also included to images for you ease of understanding my situation
I hope I had provide enough information, if not please let me know. I will award MAX points to whom ever really helps me out
Your help and time is much appreciated. Thanks

Hi Jan
Thanks for your reply, it is much appreciated. As for WAE informations it is as per below:
Software Version: 4.1.1c
Model: WAVE-474-K9
Memory: 3072MB
As for the Legacy Printing services, i think the answer is Yes; i have attched snapshot of WAAS configuration section and highlighted in Yellow is the printing section, also it shows traffic in percentage wise (far right) if it helps. If this is what you are after let me know and if so then is this the cause of the problem? If so was it improved in the later version?
I will be looking into the troubleshooting guide you have provided while you study this information, if in anyway you can provide more info based on what i have provided please let me know and i will act on it immediately i.e. if software version out of date then i will upgrade etc
If you require any further info from me please feel free to request it.
Thanks Again

WAAS WAE Alarm 'mstore_key_retrieval'

Hello,
I am supporting an environment that has 30+ remote WAEs deployed with a CM at the HQ.
All remote WAE's Versions = Cisco Wide Area Application Services (universal-k9) Software Release 4.2.3b (build b4 Oct 4 2010)
HQ's CM version = Cisco Wide Area Application Services (universal-k9) Software Release 4.4.3 (build b4 Aug 22 2011)
On 4 of these WAEs, I currently am receiving encryption key alarms:
WAE#show alarms detail support
Critical Alarms:
        Alarm ID                 Module/Submodule               Instance
   1 mstore_key_retrieval      cms                          ssl_mstore_key
     Apr 11 18:36:16.026 CDT, Processing Error Alarm, #000002, 3000:700008
     Unable to generate and/or retrieve SSL managed store encryption key from the Key Manager
     /alm/crit/cms/mstore_key_retrieval_failure:
         CMS/Management agent failed to generate and/or retrieve SSL managed store encryption key from Key Manager.
     Explanation:
         This alarm indicates one of following issues: Central
         Manager device(s) is not reachable. Secure store on
         Central Manager is initialized but not open. Key Manager
         process on Central Manager device is not running or failing
         to respond. Key Manager is unable to process key
         generation or retrieval request.   If this issue is
         present, the WAE device will not be able to process a
         configuration update received from the Central Manager if
         it contains SSL certificate/key information.
     Action:
         Check if Central Manager device is reachable (TCP
         connections from the WAE to the Central Manager on port
         443) Check following log files for additional information
         about the error: /local1/errorlog/kc.log on WAE
         /local1/errorlog/km/km.log on CM
   2 mstore_key_failure        sslao                        mstore_key_failure
     Apr 11 18:39:07.518 CDT, Processing Error Alarm, #000006, 26000:26002
     Failed to open SSL store due to failure in getting key from Central Manager.
     /alm/crit/sslao/mstore_key_failure:
         SSL managed secure store key retrieval failure.
     Explanation:
         The SSL accelerator is unable to get the SSL secure store
         key from the Central Manager.
     Action:
         Check the connection with the Central Manager.
The explanations and actions match the alarm book , but in addition to that, in the Cisco WAAS Monitoring Guide, it also states:
Alarm 700008 (mstore_key_retrieval_failure) CMS/Management agent failed to generate and/or retrieve SSL managed store encryption key from Key Manager.
Severity: Critical
Category: Processing
Description: This alarm indicates one of following issues:
–The WAAS Central Manager device is not reachable
–Secure store on WAAS Central Manager is initialized but not open
–The Key Manager process on the WAAS Central Manager device is not running or failing to respond
–Key Manager cannot process key generation or retrieval request. If this issue is present, the WAAS device cannot process a configuration update received from WAAS Central Manager if it contains SSL certificate and key pair information.
Action: Check to see if the WAAS Central Manager device is reachable (TCP connections from the WAE to the WAAS Central Manager on port 443). Check the following log files for additional information about the error:
–On WAE: /local1/errorlog/kc.log on WAE
–On WAAS Central Manager: /local1/errorlog/km/km.log
Action: Fix the clock on the device or the primary WAAS Central Manager.
For a complete list of alarm conditions, see the Alarm Book located in the WAAS 4.2.1 Software Download area on Cisco.com.
Using this information, I've checked the following:
TCP 443 is reachable from the WAE to the CM (I can telnet from each WAE to the CM on TCP 443)
Time is correct on the WAEs and CM ('show ntp status' and 'show clock' are consistent)
Secure store on CM is open ('show cms secure-store' on the CM shows that the mode is in 'Open' state),
Verified that the key manager process is running (Looking at the CM's KM log shows plenty of action that it's working for other WAEs)
Here is some information I gathered from the WAEs' kc.log files and the CM's km.log (slightly scrubbed):
From the WAEs' kc.log files:
pool-1-thread-1] INFO CommClientAbstractRPC - Send key retrieval request to CM 10.x.x.x for token d1b77e45-ce60-4332-a92d-3d3cb17d35cf
pool-1-thread-1] WARN CommClientAbstractRPC - Received error response from KM(20,No key found for token d1b77e45-ce60-4332-a92d-3d3cb17d35cf from device 17111)
From the CM's km.log file:
[pool-1-thread-4] INFO - retrieveKey request, token=d1b77e45-ce60-4332-a92d-3d3cb17d35cf from device WAE1/17111
[pool-1-thread-4] INFO - Checking secure store open
[pool-1-thread-4] INFO - Loading KEK from data server
[pool-1-thread-4] INFO - ticket 17111 (1327767406332, 1327767392433, 13899, 10000)
[pool-1-thread-4] WARN - No key found for token d1b77e45-ce60-4332-a92d-3d3cb17d35cf from device 17111
*** Going through these logs, I've seen other devices have the same issue, and eventually a WAE records the following:
[main] ERROR DeviceInfo - /state/node.dat (No such file or directory)
java.io.FileNotFoundException: /state/node.dat (No such file or directory)
at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.<init>(Unknown Source)
at java.io.FileInputStream.<init>(Unknown Source)
at com.cisco.waas.kc.DeviceInfo.retrieveNodeInfo(DeviceInfo.java:65)
at com.cisco.waas.kc.DeviceInfo.<init>(DeviceInfo.java:47)
at com.cisco.waas.kc.DeviceInfo.getInstance(DeviceInfo.java:37)
at com.cisco.waas.kc.comm.CommClientAbstractRPC.retrieveKey(CommClientAbstractRPC.java:149)
at com.cisco.waas.kc.RetrieveKeyCommand.execute(RetrieveKeyCommand.java:43)
at com.cisco.waas.cli.CLICommand.execute(CLICommand.java:114)
at com.cisco.waas.cli.AbstractCLI.process(AbstractCLI.java:28)
at com.cisco.waas.kc.KeyClient.main(KeyClient.java:40)
[main] ERROR DeviceInfo - /state/node.dat (No such file or directory)
java.io.FileNotFoundException: /state/node.dat (No such file or directory)
at java.io.FileInputStream.open(Native Method)
at java.io.FileInputStream.<init>(Unknown Source)
at java.io.FileInputStream.<init>(Unknown Source)
at com.cisco.waas.kc.DeviceInfo.retrieveNodeInfo(DeviceInfo.java:65)
at com.cisco.waas.kc.DeviceInfo.<init>(DeviceInfo.java:47)
at com.cisco.waas.kc.DeviceInfo.getInstance(DeviceInfo.java:37)
at com.cisco.waas.kc.comm.CommClientAbstractRPC.initKey(CommClientAbstractRPC.java:40)
at com.cisco.waas.kc.InitKeyCommand.execute(InitKeyCommand.java:40)
at com.cisco.waas.cli.CLICommand.execute(CLICommand.java:114)
at com.cisco.waas.cli.AbstractCLI.process(AbstractCLI.java:28)
at com.cisco.waas.kc.KeyClient.main(KeyClient.java:40)
*** Followed with what appears to be a new SSL key being generated ***:
[main] INFO DeviceInfo - loaded device info, hash H04Fer5il3b/9oanDZXx/7aBnIo=
[pool-1-thread-1] DEBUG CMProber$ProbeWorker - Sending CM probe request to CM 10.x.x.x
[pool-1-thread-1] DEBUG CMProber$ProbeWorker - CM 10.x.x.x returned :primary:4.4.3.0.4
[pool-1-thread-1] DEBUG CMProber$ProbeWorker - Primary CM address 10.x.x.x version 4.4.3.0.4
[main] DEBUG CommClientAbstractRPC - CM version 4.4.3
[main] INFO CommClientAbstractRPC - Send key initialization request to CM 10.x.x.x key type SSL
[main] INFO CommClientAbstractRPC - Received new token for generated key SSL/cbe3d6fc-875e-4b61-baeb-528c55cb3597
[main] INFO DeviceInfo - loaded device info, hash H04Fer5il3b/9oanDZXx/7aBnIo=
[pool-1-thread-1] INFO CommClientAbstractRPC - Send key retrieval request to CM 10.0.65.234 for token cbe3d6fc-875e-4b61-baeb-528c55cb3597
[main] INFO CommClientAbstractRPC$1 - Successfully retrieved key from CM for token cbe3d6fc-875e-4b61-baeb-528c55cb3597
*** And the CM records the following ***:
[pool-1-thread-4] INFO - initKey request from device WAE2/30129 key type SSL
[pool-1-thread-4] INFO - Checking secure store open
[pool-1-thread-4] INFO - Loading KEK from data server
[pool-1-thread-4] INFO - Return crypto of type : 0
[pool-1-thread-4] INFO - Checking secure store open
[pool-1-thread-4] INFO - Loading KEK from data server
[pool-1-thread-4] INFO - Loading KEK from data server
[pool-1-thread-4] INFO - Generated new key WAE2/SSL token cbe3d6fc-875e-4b61-baeb-528c55cb3597
I'm wanting to know why this occurs on some boxes and not others, and what triggers the process for a WAE to stop repeatedly sending key retrieval requests with a token that the CM has repeatedly replies with the key not being found and performing an initial key request.
Thanks!

Hi all, I got into the same issue and looking at a solution I found a way to clear those alarms whithout re-registering the WAE/WAVE. Here it goes...
WAE##sh accelerator
Accelerator     Licensed        Config State    Operational State
cifs            Yes             Enabled         Running
epm             Yes             Enabled         Running
http            Yes             Enabled         Running
mapi            Yes             Enabled         Running
nfs             Yes             Enabled         Running
ssl             Yes             Enabled         Disabled ---> your SSL AO is probably down due the issue
video           No              Enabled         Shutdown
WAE#sh alarms
Critical Alarms:
        Alarm ID                 Module/Submodule               Instance
   1 mstore_key_retrieval      cms                          ssl_mstore_key
   2 mstore_key_failure        sslao                        mstore_key_failure
Major Alarms:
None
Minor Alarms:
None
WAE#crypto pki managed-store initialize
All certificate/private keys in SSL managed store will be deleted and optimized SSL traffic will be interrupted. Are you sure you want to continue(yes/no)? [no]:yes
Restarting SSL accelerator. Done.
After a couple of minutes alarms will be cleared and SSLAO will be back UP.
WAE#sh accelerator
Accelerator     Licensed        Config State    Operational State
cifs            Yes             Enabled         Running
epm             Yes             Enabled         Running
http            Yes             Enabled         Running
mapi            Yes             Enabled         Running
nfs             Yes             Enabled         Running
ssl             Yes             Enabled         Running
video           No              Enabled         Shutdown
WAE#sh alarms
Critical Alarms:
None
Major Alarms:
None
Minor Alarms:
None
In case you have the issue in the Core WAE (where the cms secure-store is opened), you might need to initialize it.
Regards,
Fernando

Cisco WAAS WAE-674 - Slow response in IE-7 PC's while trying to access the SAP application through cisco WEA

Hi,
From location A when we are trying to access the SAP application in location B through WAE-674 via internet Explorer there is a slow response in IE-7 PC's compare to IE-8 PC's,But when we try without WAE-674 the response is normal.
We also found that optimization in location A WAAS device as 70-90% but still users are facing slowness while opening the Webpage.
Please suggest how to address the problem ASAP.
Thanks & Regards,
P.Ramkumar

I would suggest that you open a case with the tac to look at this. Matthew

WAAS (WAE-512/612) NIC teaming?

Hi,
I've got a customer who wants to know if we can dual-home the WAAS appliances he purchased. Do the WAE-512 or 612's support any type of NIC teaming or active/passive on the NIC's?
Thanks for any help or clarification!
Brad

Brad,
WAAS supports two (2) types of physical interface redundancy:
Standby Interface:
http://www.cisco.com/en/US/partner/products/ps6870/products_configuration_guide_chapter09186a00807bb6f0.html#wp1041450
PortChannel:
http://www.cisco.com/en/US/partner/products/ps6870/products_configuration_guide_chapter09186a00807bb6f0.html#wp1041596
Thanks,
Zach

History active connections WAAS (WAE)

Hi Folks!
I need extract the history active connections from WAE-512 and WAE-612. For example, in hour XX:XX I was X number of active connections.How I can do this? It´s possible? Exist SNMP OID to collect this information if not is possible in Central Manager?
Thanks.

Hi Harrisson,
Thanks for marking this Answered.
You can use WAE Central Manager to export these numbers to any NetFlow analyzer.
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v421/configuration/guide/planning.html#wp1041835
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v421/configuration/guide/monitor.html#wp1163526
WAAS does flow the agent to any netflow collector / analyzer. NetQoS and NAM can understand this traffic directly where as you will need additional customized api if you want to export the stats from WAAS to others.
All these APIs are publicly available and listed here: http://www.cisco.com/en/US/products/ps6870/products_programming_reference_guides_list.html
Cisco WAAS reporting using NetFlow can be done with almost any NetFlow collector that supports both ingress and egress flows. One of the 3rd party has posted this on their website. Best Practices blog releated to Cisco WAAS and NetFlow.
http://www.plixer.com/blog/netflow/best-practices-for-cisco-waas-reporting-using-netflow/
Hope this helps.
Regards.

WAAS - WAE-512-K9 - SATA2 250 GB Hard disk not detecting

We had installed new WAE-512-K9 having 2*SATA2 250GB Hard disk as edge box in one of the branch. But during configuration, we have notified that both the hard disks are not getting detected. Both the disks 00 & 01 are inserted in the respective slots as mentioned in the cisco document. Hard disk LEDs are glowing intially when the device boots up, but later there is no LED indication. Please help me in resolving this issue.

Hi Tammy,
The only thing you need is - disk delete-data-partitions once the unit reboots after the memory upgrade. This command re-aligns the CIFS and DRE partition to match with 8GB memory. This command should retain the software and config on the device, only repartition the caching partitions. Not sure what may have went wrong but it seems like at this moment you may want to re-install image using copy ftp install command on WAE. Other than that, your disks look helthy.
Regards.

WAAS WAE Inline Vlans

Switch with trunk to router, whith the wae inline between them I cannot get between vlans, from the wan side I can get to all resource, Any ideas what to configure or look at

Are you trying to only intercept one VLAN or all the VLANs? You can configure this on the inline card's interface or in the CM GUI under the Interception section for that device.
Dan

Cisco WAE 4.2 with WAAS Express Router

Hello All,
I have Cisco WAAS Express 2900 (WAAS Base IOS) at Branch & 2x512-K9 Appliances (1 CM & 1 Application Accelerator) at HO.
Can we setup compression between Cisco WAAS Express Router 2900 with Cisco WAE Appliance 512-K9 ver 4.2.3c without Central Manager ?
The problem is my central manager supports 4.x only & WAAS Express Router requires CM ver 5.0 or later. Since my CM 512-K9 does not support ver 5.x (due to hardware compatibility issue) i cant manage WAAS Express Router through CM.
So the alternative is we deploy WAAS between WAAS Express Router 2900 (WAAS Base IOS) & Application Accelerator 512-K9 version 4.2.3c WITHOUT Central Manager. is it possible ?
If YES can some body share the guide please.
Regards,
Anis

You can upgrade the CM and core to 4.4.5c, the waas express router will work!
we are using 15 x 2911 series waas express routers with this setup.
good luck!

WCCP with CWAAS WAE

Dear Community,
By using WCCP Layer 2 forwarding on C6500, C3750 or ASR 1000 series routers to redirect intercepted traffic to the WAAS WAE the Cisco best practive recommends to use MASK ASSIGMENT for load balancing on such switches and ASR routers.
With WAAS versin 4.2.1 and up the default MASK ASSIGMENT is "wccp tcp-promiscuous mask src-ip-mask 0xF00 dst-ip-mask 0x0".
With a typical data center WCCP interception configuration (ingress interception with service 61 on the WAN, ingress interception with service 62 on the LAN), this mask load balances /24 branch subnets (it extracts the last 4 bits of /24 subnets). Connections from one branch subnet will be pinned to one data center WAE.
Question:
How should look like the "src-ip.mask" hex value if I would like to balance per host address instead of a Class C subnet?
A per host /32 load balacing is required on large client-sites where each client ip@ has to be balanced over the WAEs.
I am working on a project and missing the information how I can't find the "src-ip.mask" hex value information for a per host /32 load balancing on a site where only clients are located.
Thanks for your comments and replys

Unfortunately, I did not build the spread sheet so I wouldn't know/ if it's possible to convert to 2003. I did see on that page that Excel 2007 is mentioned as a requirement for it to work properly.
However, if you want a mask that will match on the 4th octet of your IP scheme use 0x000F (which simplifies to 0xF). This will create 16 buckets just like the default mask in 4.2.1 (0xF00) but instead will match on the last 4 bits of the 4th octet of your IP. Where the default mask matches on the last 4 bits of the 3rd octect.
Hope this helps,
Mike

WAE Cluster

We currently have a hub and spoke
design with WAE's at our data center and serveral out at remote sites all terminating back to the data center. I was wanting to create a cluster between two WAE's in a new environment we are standing up with the same hub and spoke design. We have dual routers, dual ISP's at both ends. Is this feasable?

Doug,
When you configure your WAE-674 to speak to your routers, you specify a router list. The routers Highest Loopback IP Addresses (if doing GRE Negotiated Return) or the directly connected Layer-2 adjacent interfaces (If doing IP Forwarded Return) are used. This will negotiate a MASK of address space to be distributed between both WAE boxes from your routers. Each routers WCCP setup will map a specific group of addresses to each WAE.
Setup on WAE
wccp router-list 1 10.0.0.254 10.0.0.253 (These are the IP address on your router)
wccp tcp-promiscuous router-list-num 1
wccp version 2
From here you have three real options:
#1 - Distribute load to both WAE boxes based on Source Address (WCCP Service 61 on WAN Interface of Data Center)
#2 - Distribute load to both WAE boxes based on Destination Address (WCCP Service 62 on WAN Interface of Data Center)
#3 - Create Custom WCCP Services and unique Access lists that send replication traffic to one WAE, all other traffic to the other WAE
Method#1
With a WAE 674-8GB, if you push less than 100-150GB per day, you would normally employ method#1, WCCP 61 on the WAN interface and have duplicate traffic types on both WAE devices based on client source address. This is great if one WAE dies the other WAE will generally have the same data cached. Watch your data loads and service actions (TFO/LZ/DRE) for different applications and make sure you are not poisoning your DRE space by sending uncachable content to DRE.
Method#2
With a WAE 674-8GB, if you push more than 150-200GB per day, you would lean toward Option#2. I am not sure how WAAS version 4.4.1's DRE caching architecture will change the game. If you determine you are over running the 300GB DRE partition every day or so, then you could swap gears and distribute unique traffic types to each WAE by using WCCP service group 62 on the Data Center WAN Interface. This will send traffic bound for Server-A to WAE#1 and traffic bound for Server-B to WAE#2. This would effectivly double your DRE Cache space, if required. You would also modify your WCCP MASK value to either alternate WAE boxes for every other destination address, or by every other subnet if you have duplicate servers in alternate subnets. I believe your destination mask would be 0x1 to alternate WAE devices based on 32-bit host addresses. Effectivly giving you 2 buckets. A WAE fault in this scenario would force all traffic to a single WAE and require the data to be cached as new content.
Method#3
Finally if you had FTP/Data Domain/ComVault/SnapMirror etc... replication traffic that was 300GB+ per day on a 674. You could use one of your WAE boxes as Replication Mode. You would create one access list for replication traffic types and bind tjhose to a custom WCCP service group. All other traffic would go on your regular WCCP access list and get bound to your regular WCCP 61 / 62 services pointed to the other WAE.
There use to be a WCCP Mask calculator on this link, but it appears to be broken. If I can find a local copy of it I will attach it to this thread.
https://communities.cisco.com/docs/DOC-9521

Help for wae 7341 device

Hi,
For the first time I am deploting WAE deviece in DC center. Since this is a new technology for me. Can some bosy help me in doing physical connectivity. I am getting confused in WAN in /out interface. Apart from this I want to know how to do basisc level configuration .Can you please help me out in this regards?I
my setup is like one core rtr,one core switch and onr layer2 switch in betwwen core rtr & core switch.
Regards,
APN

Your account team could be the first place you turn, as they can get someone onsite if needed to provide in-person assistance. We also have an internal helpdesk to help Partners with new deployments and trial deployments. And there is Cisco TAC should you encounter problems during the deployment. All of these resources are staffed with people trained and experienced in WAAS.
WAAS provides multiple methods of deployment and interception, including (but not limited to) WCCP and Inline. Inline places the WAE in the path of the packets. WCCP places the WAE out of path of the packets and requires that the router/switch be configured to intercept packets and redirect them to the WAE.
If the WAE comes equipped with inline card, an inline group consists of a pair of interfaces marked LAN and WAN. Connect LAN to the cable connecting to the LAN-side switch/router, and connect WAN to the cable connecting to the WAN-side switch/router. The types of cabling you use, duplex and speed settings on the switches and routers, and placement of the WAE within the network are important.
However, Inline may not be the preferred method for deploying in your datacenter.
If the WAE does not come equipped with an inline card, then the Gigabit interfaces are used to connect to a router/switch, and packets must be redirected to that WAE on that interface. A single interface may be used, or the interfaces may be grouped into a port-channel or standby interface configuration. Redirection from the router/switch is generally accomplished by configuring WCCP on the router/switch and on the WAE. Packets are intercepted at the router on one or more interfaces, and redirected to the WAE. The WAE processes them, performing appropriate optimizations, and egresses them back to the router/switch which forwards them to the destination.
Decide on the interception method. Read the appropriate sections in the documentation and decide how best to connect the WAE and configure interception, based on your datacenter's unique requirements. Probably the fastest way to get started would be to read the quick-start guide, and use the CLI-based setup tool.
Instructions for the inline interface can be found here:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/wae/module/inline/installation/guide/17880fru.html
Instructions for the WAE-7341 hardware can be found here:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/wae/installation/7341-7371/guide/7341gd.html
Quick Start guide here:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v421/quick/guide/waasqcg.html
Configuration (including WCCP) guide here:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v421/configuration/guide/cnfg.html

Starting with Cisco WAAS

Hi,
I am starting whit Cisco WAAS solutions, and I would like configure a WAE in the branch office, a WAE in the data center in the main office and one WAAS Central Manager. I would like configure the WAEs as Inline Interception. My first doubt is about the addressing of the WAE in the branch office and the WAE in the main office. What IP address should I configure in the WAEs (based in the pictures)?
Actual Topology:
WAAS topology.

Hi,
You can use any routable IP address for branch and DC WAE, only requirement is routable, means they should have reachabillity to CM

WAAS 101

Hi,
Is there a page in Cisco where everything is explained from design to implementation? I have going around Cisco web page and all i can see are data sheets, client success stories, etc. no notes on explaining how it works and how to implement one.
Also, would it be possible to deploy WAAS (WAE) without a central manager to multiple sites? From what i have read, it is a requirement.
Thanks in advance.

Hi Eduard,
The best place for you to start is the quick configuration guide on cisco.com. The latest is posted for 4.1.3 here: http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v413/quick/guide/waasqcg.html
Also you could check out the book "Deploying Cisco Wide Area Application Services" By Zach Seils and Joel Christner. It's a good basic overview of WAAS and how to deploy it. It's based on 4.0.x, however it still applies to the basic setup and deployment scenarios.
Hope that helps,
Dan

WAAS - Can I mix & match inline and off path installations?

Hi - I'm designing a WAAS solution which requires that I deploy the Data centre WAE inline (the core switch is a 3750 which doesn't support WCCP). I plan on using NME modules on the branch sites. Is this mix and matching of deployments permitted or will I run into problems.
Many Thanks :)
Dom

Dom,
Absolutely, you can mix and match. As a matter of fact, a lot of implementations are the opposite with inline at the edge and WCCP at the core. You should have no trouble with this at all.
BTW, the 3750 DOES support WCCP v2 at line rate (i.e. in hardware) with newer versions of IOS if you want to try it. It requires L2 adjacency to the WAEs and the WAEs need to be configured w/L2 redirect/L2 return and mask assign. The 3750 needs to have redirect in on the interfaces and a routing SDM template configured.
Hope that helps,
Dan

WAAS/WAE - CM required?

Similar Messages

Maybe you are looking for