04-16-2012 05:01 PM
Does ASA inspect wass command equal to:
1) allow tcp option 33 (0x21) for auto-discovery btw waas devices;
2) disable tcp sequence number checking;
3) disable DPI (Deep Packet Inspection) for compressed waas packets.
Topology: DC (waas)-------ASA------WAN--------ASA---------Branch (waas)
Do we still we to add any extra command on ASA in term of auto-discovery and optimize traffic btw DC and Branch waas units?
I have the Branch waas configured in-line mode but traffic is not optimized at all. show stat conn indicates traffic is in "PT no peer"
When I look at ASA on Branch, show policy inpsect waas command indicates that ASA received many WAAS TCP SYN packets but there was "No" WAAS SYN ACK packet on the command outputs. Does this mean auto-discovery is still not working? DC and Brach waas is not seeing each other?
I reloaded Branch waas few times but with no luck, the situation remains the same. Any suggestion?
Thanks
Joe