WAAS EMAP Optimization issue

[ranjith.kanisan]

Dear Team,

In WAAS Setup we are not seeing any Optimized EMAPI connection and below error is showing in Alarm section  for all Edge WAE devices.

Wansecure encountered a peering service configuration error: ssl peering service configuration mismatch with peer device id 88:f0:31:b3:6e:c8. The following protocol acceleration can fail: SSL-AO, ICA (if using Wansecure) and Encrypted MAPI.

We have verified the SSL peering configuration between Edge and core device and not found found any mismatch between them. Please suggest how we can resolve this issue.

Regards,

Ranjith

[Abhishek Purohit]

Hi,

Try the following on all the WAAS devices participating in the flow. (Core + edge)'

WAAS #sh acc wansecure

Accelerator     Licensed        Config State    Operational State
-----------     --------        ------------    -----------------
wansecure       Yes             Enabled         Running

WAN Secure:
   Accelerator Config Item              Mode           Value
   -----------------------              ----           ------
   SSL AO                               User           enabled
   Secure store                         User           enabled
   Peer SSL version                     User           default
   Peer cipher list                     User           configured
   Peer cert                            User           default   <<<<Should be same for all devices
   Peer cert verify                     User           enabled

Follow the doc below.

http://www.cisco.com/c/en/us/td/docs/app_ntwk_services/waas/waas/v501/configuration/guide/cnfg/policy.html#wp1156757

Hope that resolves the issue.

Regards,

Abhishek

CCIES 35269