topic Re: Adding new policy using CLI in Application Networking

Adding new policy using CLI

svolansky — Wed, 02 Jun 2010 14:13:10 GMT

Hi,

I want to apply new policy on the WAVE-574 to bypass the optimization for the certain traffic flows (traffic from 192.168.1.0/24 to 192.168.2.0/24 not to be optimized). I've prepared the configuration according to preconfigured policies which looks as following:

policy-engine application
name Pass
!
classifier Pass_Classifier
match src ip 192.168.1.0 0.0.0.255 dst ip 192.168.2.0 0.0.0.255
exit
!
map basic
name Pass classifier Pass_Classifier action pass-through
!

I would like to apply this using CLI, not CM GUI.

Does this configuration looks OK ? Unfortunately I dont have any lab equipment and I can't test it on production network.

After the configuration, is there anything else that needs to be done on branch WAVE to sync up with the CM (so I can see the new policy using CM GUI) or it will do it automatically ?

Also, at what place is this policy going to be applied (1st or last, or can I configure it to be 1st via CLI) ?

Many thanks!

Stan

Re: Adding new policy using CLI

Eric Rose — Wed, 02 Jun 2010 14:29:04 GMT

I can't comment on the CLI since i have never modified the policy configuration via the CLI. However, can I ask why you don't

want to do this via the GUI. The GUI will provide a simple graphical way to modify the policy to a single WAE/WAVE or to a group of them.

Thanks.

Re: Adding new policy using CLI

svolansky — Wed, 02 Jun 2010 14:47:20 GMT

Sure. Web GUI is user friendly, nice and so on. But for me it is much more comfortable just to copy/paste the configuration using CLI. I've spent hours and hours on routers and switches CLI and now I would like to continue using it with WAAS. I am just the old fashion CLI guy .

Re: Adding new policy using CLI

Eric Rose — Wed, 02 Jun 2010 15:11:59 GMT

Hi,

I did a little research and noticed that the map command is used for the ordering process.

http://www.cisco.com/en/US/partner/docs/app_ntwk_services/waas/waas/v417/command/reference/glob_cfg.html#wp1047067

also note the warning in the command reference guide.

Note We strongly recommend that you use the WAAS Central Manager GUI to centrally configure application policies for your WAEs. For more information, see the Cisco Wide Area Application Services Configuration Guide.

http://www.cisco.com/en/US/partner/docs/app_ntwk_services/waas/waas/v417/configuration/guide/policy.html

Also the modification from the CLI are sent to the CM upon the next polling cycle. "show cms info" The policy for this device will then become a locally administered policy. Typically policies should be done via the all device group to simplify the configuration configuration and modifications.

Thanks.

Eric

Re: Adding new policy using CLI

svolansky — Thu, 03 Jun 2010 09:30:33 GMT

Thanks a lot Eric for your response!

Just one more question. What command needs to be applied to send the new configuration from branch WAVE to CM without waiting on polling timer? Is it "cms enable" or "cms config-sync" ??

Many thanks!

Stan

Re: Adding new policy using CLI

Zach Seils — Thu, 03 Jun 2010 11:56:07 GMT

Yes, you can use cms config-sync.

Regards,

Zach

Re: Adding new policy using CLI

svolansky — Thu, 03 Jun 2010 21:46:42 GMT

Thansk Zach!

I've also found out that Cisco offers couple of remote labs focused on configuring WAAS devices in Partner Education Connection section. I've registered for the one called "Cisco Wide Area Application Services: Configuring WAAS Inline lab". But unfortunately when I want start this lab it keeps telling me that "No labs are available at this time". Can you please tell me when this lab will be available or point me to other place where I can ask this question?

Regards,

Stan

Re: Adding new policy using CLI

Eric Rose — Fri, 04 Jun 2010 13:01:37 GMT

I just tried it as well and got the same response about no labs being available.

http://www.cisco.com/web/learning/le36/saba/help-main.html

Here is the link to the help page on the PEC system. I would suggest openning up a case with them. I will do the same.

Thanks

Eric

Re: Adding new policy using CLI

svolansky — Fri, 04 Jun 2010 13:21:09 GMT

Please keep me posted about status of this case.

Thanks.

Regards,

Stan

Re: Adding new policy using CLI

Eric Rose — Sat, 05 Jun 2010 00:49:05 GMT

Here is the response back.

The "Wide Area Application Services: Configuring WAAS Inline lab" is already End-Of-Life and no longer available.

To locate teh available course for Cisco Wide Area Application Services, follow the steps below:
-Visit Partner Education Coonection at www.cisco.com/go/pec then hit LAUNCH
--Login using your Cisco User ID and Password
---Then locate "Brose Catalog" and click on it
----Look for "Architectural Plays" then locate "- Wide Area Application Services (WAAS)" under TECHNOLOGIES - Data Center
-----Then hit on "All Offering" for Wide Area Application Services (WAAS).
------You will be prompted to a list of available Courses for Wide Area Application Services (WAAS).

-Or you may follow the link below "IT Certification and Career Paths"
--Simply locate "Cisco Data Center Application Services Design Specialist" and "Cisco Data Center Application Services Support Specialist" under DATA CENTER.

IT Certification and Career Paths Introduction
http://www.cisco.com/web/learning/le3/learning_career_certifications_and_learning_paths_home.html

~~~~~~~~~~

Thanks

Eric Rose

P.S. If this answers your questions, please mark the question as answered with a 5.