- Table of Contents
-
- 07-Layer 3—IP Services Command Reference
- 00-Preface
- 01-ARP commands
- 02-IP addressing commands
- 03-DHCP commands
- 04-DNS commands
- 05-NAT commands
- 06-IP forwarding basics commands
- 07-Fast forwarding commands
- 08-Multi-CPU packet distribution commands
- 09-Adjacency table commands
- 10-IRDP commands
- 11-IP performance optimization commands
- 12-UDP helper commands
- 13-IPv6 basics commands
- 14-DHCPv6 commands
- 15-IPv6 fast forwarding commands
- 16-Tunneling commands
- 17-GRE commands
- 18-ADVPN commands
- 19-WAAS commands
- 20-AFT commands
- 21-Lighttpd service commands
- 22-Web caching commands
- Related Documents
-
Title | Size | Download |
---|---|---|
19-WAAS commands | 140.53 KB |
display waas statistics udp compress
display waas tfo auto-discovery blacklist
reset waas statistics udp compress
reset waas tfo auto-discovery blacklist
waas tfo auto-discovery blacklist enable
waas tfo auto-discovery blacklist hold-time
WAAS commands
The following compatibility matrix shows the support of hardware platforms for WAAS:
Hardware |
WAAS compatibility |
MSR810, MSR810-W, MSR810-W-DB, MSR810-LM, MSR810-W-LM, MSR810-10-PoE, MSR810-LM-HK, MSR810-W-LM-HK, MSR810-LMS-EA |
Yes |
MSR810-LMS, MSR810-LUS |
No |
MSR2600-6-X1, MSR2600-10-X1 |
Yes |
MSR 2630 |
Yes |
MSR3600-28, MSR3600-51 |
Yes |
MSR3600-28-SI, MSR3600-51-SI |
No |
MSR3600-28-X1, MSR3600-28-X1-DP, MSR3600-51-X1, MSR3600-51-X1-DP |
No |
MSR3610-I-DP, MSR3610-IE-DP |
Yes |
MSR3610-X1, MSR3610-X1-DP, MSR3610-X1-DC, MSR3610-X1-DP-DC |
Yes |
MSR 3610, MSR 3620, MSR 3620-DP, MSR 3640, MSR 3660 |
Yes |
MSR3610-G, MSR3620-G |
Yes |
class
Use class to specify a Wide Area Application Services (WAAS) class for a WAAS policy and enter WAAS policy class view.
Use undo class to remove a WAAS class from a WAAS policy.
Syntax
class class-name [ insert-before existing-class ]
undo class class-name
Default
No WAAS class exists in a WAAS policy.
Views
WAAS policy view
Predefined user roles
network-admin
Parameters
class-name: Specifies a WAAS class by its name, a case-insensitive string of 1 to 63 characters. The specified class must already exist.
insert-before existing-class: Inserts the new class before an existing class in the WAAS policy. If you do not specify this option, the new class is placed at the end of the WAAS policy.
Usage guidelines
A WAAS policy can use system-defined WAAS classes (see Table 7).
As a best practice, configure a WAAS class by modifying a system-defined WAAS class.
You can also use this command to arrange existing WAAS classes in a WAAS policy.
A packet is checked against WAAS classes in the specified order. When a packet matches a class, the action for the class is performed on the packet, and the match process ends.
If you do not configure an action for a WAAS class, the device ignores the WAAS class.
Examples
# Specify the system-defined WAAS class AFS for the WAAS policy waas_global, and enter the view of the WAAS class AFS.
<Sysname> system-view
[Sysname] waas policy waas_global
[Sysname-waaspolicy-waas_global] class AFS
[Sysname-waaspolicy-waas_global-AFS]
# Specify the system-defined WAAS class AOL for the WAAS policy waas_global, insert it before AFS, and enter the view of the WAAS class AOL.
[Sysname] waas policy waas_global
[Sysname-waaspolicy-waas_global] class AOL insert-before AFS
[Sysname-waaspolicy-waas_global-AOL]
# Change the position of the WAAS class AOL in the WAAS policy waas_global by inserting it before AFS, and enter the view of the WAAS class AOL.
[Sysname] waas policy waas_global
[Sysname-waaspolicy-waas_global] class AOL insert-before AFS
[Sysname-waaspolicy-waas_global-AOL]
Related commands
display waas policy
waas class
waas policy
display waas class
Use display waas class to display WAAS classes.
Syntax
display waas class [ class-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
class-name: Specifies a WAAS class by its name, a case-insensitive string of 1 to 63 characters. If you do not specify a WAAS class, this command displays all WAAS classes.
Examples
# Display the WAAS class class1.
<Sysname> display waas class class1
WAAS class: class1
match 1 tcp source 1.1.1.1/24 port 50000 60000
match 6 tcp destination 2.2.2.2 port 1 1024
match 11 tcp source 1001::1111/96 port 50000 60000
match 16 tcp destination 2002::2222 port 1 1024
Field |
Description |
match |
Match criterion of the WAAS class. |
Related commands
match tcp
waas class
display waas policy
Use display waas policy to display WAAS policies.
Syntax
display waas policy [ policy-name ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
policy-name: Specifies a WAAS policy by its name, a case-insensitive string of 1 to 63 characters. If you do not specify a WAAS policy, this command displays all WAAS policies.
Examples
# Display the WAAS policy po1.
<Sysname> display waas policy po1
WAAS policy: po1
class cl1
optimize TFO DRE LZ
class cl2
optimize TFO DRE
class cl3
passthrough
class cl4
optimize TFO LZ
class cl5
Table 2 Command output
Field |
Description |
WAAS class in the WAAS policy. |
|
Optimization actions: · TFO (works with only TCP). · DRE. · LZ compression. |
|
Action that does not perform any optimization. |
Related commands
class
waas policy
display waas session
Use display waas session to display WAAS session information.
Syntax
In standalone mode:
display waas session { ipv4 | ipv6 } [ client-ip client-ip ] [ client-port client-port ] [ server-ip server-ip ] [ server-port server-port ] [ peer-id peer-id ] [ verbose ]
In IRF mode:
display waas session { ipv4 | ipv6 } [ client-ip client-ip ] [ client-port client-port ] [ server-ip server-ip ] [ server-port server-port ] [ peer-id peer-id ] [ verbose ] [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ipv4: Specifies IPv4 sessions.
ipv6: Specifies IPv6 sessions.
client-ip client-ip: Displays the WAAS session information for the client specified by its IP address.
client-port client-port: Displays the WAAS session information for the clients specified by port number in the range of 1 to 65535.
server-ip server-ip: Displays the WAAS session information for the server specified by its IP address.
server-port server-port: Displays the WAAS session information for the servers specified by port number in the range of 1 to 65535.
peer-id peer-id: Displays the WAAS session information for the peer specified by its bridge MAC address in the format of H-H-H.
verbose: Displays detailed information about WAAS sessions. If you do not specify this keyword, the command displays brief information about WAAS sessions.
slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays WAAS session information for all member devices. (In IRF mode.)
Usage guidelines
If you specify only the ipv4 or ipv6 keyword, this command displays information about all IPv4 or IPv6 WAAS sessions.
Examples
# Display brief information about all IPv4 WAAS sessions.
<Sysname> display waas session ipv4
Peer ID: 0021-90ad-0012
Start Time: Fri Mar 21 10:43:05 2014
Source IP/Port: 1.1.1.1/34572
Destination IP/Port: 2.2.2.2/80
Peer ID: 0011-10ad-0012
Start Time: Fri Mar 21 10:45:05 2014
Source IP/Port: 2.2.1.1/34572
Destination IP/Port: 3.2.2.3/80
Total 2 sessions found.
# Display detailed information about all IPv4 WAAS sessions.
<Sysname> display waas session ipv4 verbose
Peer ID: 0021-90ad0-01221
Start Time: Fri Mar 21 11:43:05 2014
Source IP/Port: 1.1.1.1/34572
Destination IP/Port: 2.2.2.2/80
LAN interface: GigabitEthernet2/0/1
WAN interface: GigabitEthernet2/0/2
Configured Policy: TFO DRE LZ
Negotiated Policy: TFO DRE LZ
LAN->WAN bytes: Original 104884 Optimized 88594
WAN->LAN bytes: Original 744588 Optimized 3355445
LZ section:
Encode status:
Bytes in: 0
Bytes out: 0
Bypass bytes: 400
Space saved: 0%
Average Latency: 0 usec
Decode status:
Bytes in: 329
Bytes out: 393
Bypass bytes: 63
Space saved: 16%
Average Latency: 2 usec
DRE section:
Encode status:
Bytes in: 0
Bytes out: 0
Bypass bytes: 314
Space saved: 0%
Average latency: 0 usec
Decode status:
Bytes in: 399
Bytes out: 332
Bypass bytes: 0
Space saved: 0%
Chunk miss: 0
Collision: 0
Average latency: 23 usec
Peer ID: 0011-10ad-0012
Start Time: Fri Mar 21 11:43:05 2014
Source IP/Port: 2.2.1.1/34572
Destination IP/Port: 3.2.2.3/80
LAN interface: GigabitEthernet2/0/1
WAN interface: GigabitEthernet2/0/2
Configured Policy: TFO DRE LZ
Negotiated Policy: TFO DRE LZ
LAN->WAN bytes: Original 104884 Optimized 88594
WAN->LAN bytes: Original 744588 Optimized 3355445
LZ section:
Encode status:
Bytes in: 0
Bytes out: 0
Bypass bytes: 400
Space saved: 0%
Average Latency: 0 usec
Decode status:
Bytes in: 329
Bytes out: 393
Bypass bytes: 63
Space saved: 16%
Average Latency: 2 usec
DRE section:
Encode status:
Bytes in: 0
Bytes out: 0
Bypass bytes: 314
Space saved: 0%
Average latency: 0 usec
Decode status:
Bytes in: 399
Bytes out: 332
Bypass bytes: 0
Space saved: 0%
Chunk miss: 0
Collision: 0
Average latency 23 usec
Total 2 sessions found.
Field |
Description |
Bridge MAC address of the peer device. A bridge MAC address uniquely identifies a peer device. |
|
Time when the WAAS session was established. |
|
IP address and port number of the client. |
|
IP address and port number of the server. |
|
Optimization actions configured on the local device, which can be one or any combination of the following actions: · TFO (works with only TCP). · DRE. · LZ compression. |
|
Optimization actions negotiated with the peer device, which can be one or any combination of the following actions: · TFO (works with only TCP). · DRE. · LZ compression. The negotiated optimization actions are the union of the optimization actions configured on the local device and those configured on the peer device. |
|
Statistics for LAN-to-WAN data: · Original—Number of bytes before optimization. · Optimized—Number of bytes after optimization. |
|
Statistics for WAN-to-LAN data: · Original—Number of bytes before optimization. · Optimized—Number of bytes after optimization. |
|
LZ compression statistics. |
|
DRE statistics. |
|
Compression statistics. |
|
Decompression statistics. |
|
Number of input bytes. |
|
Number of output bytes. |
|
Number of bytes that bypass DRE. |
|
· Compression ratio: (1–Bytes out/Bytes in) x 100. · Decompression ratio: (1–Bytes in/Bytes out) x 100. |
|
Average latency in milliseconds for the most recent compression or decompression. When multiple CPUs are available on a card, the average latency is the latency time divided by the number of CPUs. |
|
Cumulative number of times that DRE failed to find a dictionary entry according to a dictionary index. |
|
Cumulative number of times that data checks failed. |
display waas statistics dre
Use display waas statistics dre to display DRE statistics.
Syntax
In standalone mode:
display waas statistics dre [ peer peer-id ]
In IRF mode:
display waas statistics dre [ peer peer-id ] [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
peer-id peer-id: Specifies a peer device by its bridge MAC address in the format of H-H-H. If you do not specify a peer device, the command displays DRE statistics for all peer devices.
slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays DRE statistics for all member devices. (In IRF mode.)
Examples
# Display DRE statistics for all peer devices.
<Sysname> display waas statistics dre
Peer-ID: 0016-9d38-ca1d
Peer version: 1.0
Cache in storage: 19426304 bytes
Index number: 75884
Age: 00 weeks, 00 days, 00 hours, 00 minutes, 33 seconds
Total connections: 1
Active connections: 0
Encode Statistics
Dre msgs: 2
Bytes in: 392 bytes
Bytes out: 424 bytes
Bypass bytes: 0 bytes
Bytes Matched: 0 bytes
Space saved: -8%
Average latency: 0 usec
Decode Statistics
Dre msgs: 196407
Bytes in: 29132703 bytes
Bytes out: 42413368 bytes
Bypass bytes: 0 bytes
Space saved: 31%
Average latency: 0 usec
Peer-ID: 0d38-9d38-ca1d
Peer version: 1.0
Cache in storage: 33554944 bytes
Index number: 131074
Age: 00 weeks, 00 days, 00 hours, 21 minutes, 31 seconds
Total connections: 2
Active connections: 0
Encode Statistics
Dre msgs: 514872
Bytes in: 111390296 bytes
Bytes out: 60085884 bytes
Bypass bytes: 0 bytes
Bytes Matched: 56336640 bytes
Space saved: 46%
Average latency: 0 usec
Decode Statistics
Dre msgs: 4
Bytes in: 849 bytes
Bytes out: 785 bytes
Bypass bytes: 0 bytes
Space saved: -8%
Average latency: 0 usec
# Display DRE statistics for a specific peer device.
<Sysname> display waas statistics dre peer 0016-9d38-ca1d
Peer-ID: 0016-9d38-ca1d
Peer version: 1.0
Cache in storage: 33554944 bytes
Index number: 131074
Age: 00 weeks, 00 days, 00 hours, 21 minutes, 31 seconds
Total connections: 2
Active connections: 0
Encode Statistics
Dre msgs: 514872
Bytes in: 111390296 bytes
Bytes out: 60085884 bytes
Bypass bytes: 0 bytes
Bytes Matched: 56336640 bytes
Space saved: 46%
Average latency: 0 usec
Decode Statistics
Dre msgs: 4
Bytes in: 849 bytes
Bytes out: 785 bytes
Bypass bytes: 0 bytes
Space saved: -8%
Average latency: 0 usec
Table 4 Command output
Field |
Description |
Peer ID |
Bridge MAC address of the peer device. A bridge MAC address uniquely identifies a peer device. |
WAAS version of the peer device. |
|
Disk space used by metadata. Metadata are original data that have indexes in the dictionary. |
|
Number of dictionary indexes. |
|
Amount of time that has elapsed since the local device initially established an optimized TCP connection with the peer. |
|
Total number of DRE connections. |
|
Number of active DRE connections. |
|
Compression statistics. |
|
Decompression statistics. |
|
Number of data blocks. |
|
Bytes in |
Number of input bytes. |
Bytes out |
Number of output bytes. |
Bypass bytes |
Number of bytes that bypass DRE. |
Number of bytes matched by DRE. |
|
Space saved |
· Compression ratio: (1–Bytes out/Bytes in) x 100. · Decompression ratio: (1–Bytes in/Bytes out) x 100. |
Average Latency |
Average latency in milliseconds for the most recent compression or decompression. When multiple CPUs are available on a card, the average latency is the latency time divided by the number of CPUs. |
Related commands
display waas statistics udp compress
Use display waas statistics udp compress to display UDP log message compression statistics.
Syntax
display waas statistics udp compress
Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display UDP log message compression statistics.
<Sysname> display waas udp compress statistics
Bytes in : 42413368 bytes
Bytes out : 29132703 bytes
Saved bandwidth ratio : 31%
Compressed packet ratio : 100%
Related commands
reset waas statistics udp compress
display waas status
Use display waas status to display the global WAAS status.
Syntax
display waas status
Views
Any view
Predefined user roles
network-admin
network-operator
Examples
# Display the global WAAS status.
WAAS Version: 1.0
Local ID: 02e0-011a-0000
DRE Status: Disabled
LZ Status: Disabled
BlackList Status: Disabled
Total Active connections: 7889
Total data storage size: 1468006400 bytes
Total index number: 11513600
Blacklist Hold-time: 5 minutes
Interfaces Applied policy
GE2/0/1 waas_global
GE2/0/2 waas_default
GE2/0/3 waas_global
Total policy interfaces: 3
Table 5 Command output
Field |
Description |
Bridge MAC address of the local device. A bridge MAC address uniquely identifies a local device. |
|
Total number of active WAAS connections. |
|
Disk space used by all metadata. Metadata are original data that have indexes in the dictionary. |
|
Total number of dictionary indexes. |
|
Aging time for blacklist entries. |
|
List of interfaces with WAAS policies applied. |
|
Number of interfaces with WAAS policies applied. |
display waas tfo auto-discovery blacklist
Use display waas tfo auto-discovery blacklist to display autodiscovered blacklist information.
Syntax
In standalone mode:
display waas tfo auto-discovery blacklist { ipv4 | ipv6 }
In IRF mode:
display waas tfo auto-discovery blacklist { ipv4 | ipv6 } [ slot slot-number ]
Views
Any view
Predefined user roles
network-admin
network-operator
Parameters
ipv4: Specifies IPv4 blacklist information.
ipv6: Specifies IPv6 blacklist information.
slot slot-number: Specifies an IRF member device by its member ID. If you do not specify a member device, this command displays autodiscovered blacklist information for all member devices. (In IRF mode.)
Examples
# Display all IPv4 blacklist information.
<Sysname> display waas tfo auto-discovery blacklist ipv4
Server IP address/Port Insert Time
1.1.1.1/8080 Fri Mar 21 10:43:05 2014
1.1.1.2/8080 Fri Mar 21 10:43:06 2014
2.2.2.2/443 Fri Mar 21 10:20:37 2014
Total 3 entries found.
Table 6 Command output
Field |
Description |
Time when a blacklist entry was generated. |
Related commands
reset waas tfo auto-discovery blacklist
waas tfo auto-discovery blacklist enable
waas tfo auto-discovery blacklist hold-time
match tcp
Use match tcp to configure a match criterion.
Use undo match tcp to delete a match criterion.
Syntax
match [ match-id ] tcp { any | destination | source } [ ip-address ipv4-address [ mask-length | mask ] | ipv6-address ipv6-address [ prefix-length ] ] [ port port-list ]
undo match match-id
Default
No match criterion exists.
Views
WAAS class view
Predefined user roles
network-admin
Parameters
match-id: Specifies the ID of the match criterion, in the range of 1 to 65535. If you specify an unused ID, you can create a new match criterion. If you specify a used ID, you can modify the existing match criterion. If you do not specify an ID, the system automatically assigns the lowest available ID.
tcp: Matches TCP packets.
any: Matches any TCP packets.
destination: Specifies destination elements for matching TCP packets.
source: Specifies source elements for matching TCP packets.
ip-address ipv4-address: Specifies an IPv4 address for matching TCP packets.
mask-length: Specifies the mask length for the IPv4 address, in the range of 0 to 32. The default is 32.
mask: Specifies the mask for the IPv4 address. The default is 255.255.255.255.
ipv6-address ipv6-address: Specifies an IPv6 address for matching TCP packets.
prefix-length: Specifies the prefix length for the IPv6 address, in the range of 0 to 128. The default is 128.
port port-list: Specifies a space-separated list of up to 10 port items for matching TCP packets. Each item specifies a port number or a range of port numbers in the form of port-number1 to port-number2. The value for port-number2 must be greater than or equal to the value for port-number1. The value range for the port-number argument is 1 to 65535. If you do not specify a port list, all port numbers are matched.
Usage guidelines
If you specify the destination or source keyword, you must specify the ip-address (or ipv6-address) option, the port option, or both.
If you specify the any keyword, the ip-address (or ipv6-address) option, and the port option, the ip-address (or ipv6-address) and port options match either source or destination fields of packets.
You cannot configure the same match criteria with different match IDs.
A WAAS class can have a maximum of 65535 match criteria. A packet is checked against match criteria in their order of appearance. The packet belongs to the WAAS class if it matches any one of the match criteria.
A WAAS class without any match criteria is not used to match packets.
Examples
# Create a WAAS class named http_class, and configure the class to match packets with source IP address 192.168.0.1/16 and port number 80 or port number in the range of 8000 to 8080.
[Sysname] waas class http_class
[Sysname-waasclass-http_class] match tcp source ip-address 192.168.0.1 16 port 80 8000 to 8080
# Create a WAAS class named http_class, and configure the class to match any TCP packets.
<Sysname> system-view
[Sysname] waas class http_class
[Sysname-waasclass-http_class] match tcp any
Related commands
display waas policy
waas class
optimize
Use optimize to configure optimization actions for a WAAS class.
Use undo optimize to restore the default.
Syntax
optimize tfo [ dre | lz ] *
undo optimize
Default
No optimization actions are configured for a WAAS class.
Views
WAAS policy class view
Predefined user roles
network-admin
Parameters
tfo: Specifies TFO.
dre: Specifies DRE.
lz: Specifies LZ compression.
Usage guidelines
An optimization action takes effect only when the corresponding feature is enabled.
An optimization action does not optimize the traffic that matches a blacklist entry.
If you configure both this command and the passthrough command, the most recent configuration takes effect.
Examples
# Configure optimization actions TFO, DRE, and LZ for the WAAS class AFS.
[Sysname] waas policy waas_global
[Sysname-waaspolicy-waas_global] class AFS
[Sysname-waaspolicy-waas_global-AFS] optimize tfo dre lz
Related commands
class
display waas policy
passthrough
waas policy
waas tfo optimize dre
waas tfo optimize lz
passthrough
Use passthrough to configure the pass-through action for a WAAS class.
Use undo passthrough to restore the default.
Syntax
passthrough
undo passthrough
Default
The pass-through action is not configured.
Views
WAAS policy class view
Predefined user roles
network-admin
Usage guidelines
The pass-through action allows packets to pass through unoptimized.
If you configure both this command and the optimize command, the most recent configuration takes effect.
Examples
# Configure the pass-through action for the WAAS class AFS.
<Sysname> system-view
[Sysname] waas policy waas_global
[Sysname-waaspolicy-waas_global] class AFS
[Sysname-waaspolicy-waas_global-AFS] optimize tfo dre lz
Related commands
class
display waas policy
optimize
waas policy
reset waas cache dre
Use reset waas cache dre to clear DRE data dictionaries.
Syntax
reset waas cache dre [ peer-id peer-id ]
Views
User view
Predefined user roles
network-admin
Parameters
peer-id peer-id: Specifies a peer device by its bridge MAC address in the format of H-H-H. If you do not specify a peer device, this command clears DRE data dictionaries for all peer devices.
Examples
# Clear the DRE data dictionary for the peer device with the bridge MAC address 0789-445d-effa.
<Sysname> reset waas cache dre peer 0789-445d-effa
Related commands
display waas statistics dre
reset waas statistics dre
Use reset waas statistics dre to clear DRE statistics.
Syntax
reset waas statistics dre [ peer-id peer-id ]
Views
User view
Predefined user roles
network-admin
Parameters
peer-id peer-id: Specifies a peer device by its bridge MAC address in the format of H-H-H. If you do not specify a peer device, this command clears DRE statistics for all peer devices.
Examples
# Clear DRE statistics for all peer devices.
<Sysname> reset waas statistics dre
Related commands
display waas statistics dre
reset waas statistics udp compress
Use reset waas statistics udp compress to clear UDP log message compression statistics.
Syntax
reset waas statistics udp compress
Views
User view
Predefined user roles
network-admin
Examples
# Clear UDP log message compression statistics.
<Sysname> reset waas statistics udp compress
Related commands
display waas statistics udp compress
reset waas tfo auto-discovery blacklist
Use reset waas tfo auto-discovery blacklist to clear all autodiscovered blacklist entries.
Syntax
reset waas tfo auto-discovery blacklist
Views
User view
Predefined user roles
network-admin
Examples
# Clear all autodiscovered blacklist entries.
<Sysname> reset waas tfo auto-discovery blacklist
Related commands
display waas tfo auto-discovery blacklist
waas tfo auto-discovery blacklist enable
waas tfo auto-discovery blacklist hold-time
waas apply policy
Use waas apply policy to apply a WAAS policy to an interface.
Use undo waas apply policy to restore the default.
Syntax
waas apply policy [ policy-name ]
undo waas apply policy
Default
No WAAS policy is applied to an interface.
Views
Interface view
Predefined user roles
network-admin
Parameters
policy-name: Specifies a WAAS policy by its name, a case-insensitive string of 1 to 63 characters. The specified policy must already exist. If you do not specify a WAAS policy, this command applies the system-defined WAAS policy waas_default.
Usage guidelines
Apply a WAAS policy to an interface that connects to the WAN (not an interface that connects to the LAN). The device optimizes or passes through the traffic entering and leaving the WAN according to the configured policy. If the incoming and outgoing interfaces of the traffic are both connected to the WAN, the traffic is not optimized.
A global logical interface (such as a Layer 3 aggregate interface or VLAN interface) that spans multiple cards or IRF member devices can be used to connect to the WAN. To ensure the traffic optimization effect for such an interface, use the service command to specify one of these cards or IRF member devices to forward traffic for the interface.
Examples
# Apply the WAAS policy global_policy to the interface GigabitEthernet 1/0/1.
[Sysname] interface gigabitethernet 1/0/1
[Sysname-GigabitEthernet1/0/1] waas apply policy global_policy
Related commands
display waas policy
display waas status
waas policy
waas asymmetric
Use waas asymmetric to configure WAAS to operate in asymmetric mode.
Use undo waas asymmetric to restore the default.
Syntax
waas asymmetric
undo waas asymmetric
Default
WAAS operates in symmetric mode.
Views
System view
Predefined user roles
network-admin
Usage guidelines
Configure this command if the device sends and receives packets on different interfaces.
If the device sends and receives packets on the same interface, the device should operate in symmetric mode.
Examples
# Configure WAAS to operate in asymmetric mode.
<Sysname> system-view
[Sysname] waas asymmetric
waas class
Use waas class to create a WAAS class and enter its view, or enter the view of an existing WAAS class.
Use undo waas class to delete a WAAS class.
Syntax
waas class class-name
undo waas class class-name
Default
Only system-defined WAAS classes exist.
Views
System view
Predefined user roles
network-admin
Parameters
class-name: Specifies a name for the WAAS class, a case-insensitive string of 1 to 63 characters.
Usage guidelines
As a best practice, configure a WAAS class by modifying a system-defined WAAS class (see Table 7).
Examples
# Create a WAAS class named waas_global and enter WAAS class view.
<Sysname> system-view
[Sysname] waas class waas_global
[Sysname-waasclass-waas_global]
Related commands
class
display waas class
waas config remove-all
Use waas config remove-all to delete all WAAS settings.
Syntax
waas config remove-all
Views
System view
Predefined user roles
network-admin
Usage guidelines
This command deletes all configuration data and running data for WAAS and exits the WAAS process.
Examples
# Delete all WAAS settings.
<Sysname> system-view
[Sysname] waas config remove-all
The command will clear all the WAAS configuration. Continue? [Y/N]:y
waas config restore-default
Use waas config restore-default to restore system-defined WAAS settings.
Syntax
waas config restore-default
Views
System view
Predefined user roles
network-admin
Usage guidelines
This command restores the system-defined WAAS policy and WAAS classes to their settings at the time when the WAAS process starts for the first time.
To successfully restore system-defined WAAS settings, make sure none of the interfaces has a WAAS policy applied.
Examples
# Restore system-defined WAAS settings.
<Sysname> system-view
[Sysname] waas config restore-default
The command will restore all the WAAS configuration to default. Continue? [Y/N]:y
waas dre cache aging
Use waas dre cache aging to set the aging time for entries in the data dictionary.
Use undo waas dre cache aging to restore the default.
Syntax
waas dre cache aging minutes
undo waas dre cache aging
Default
Entries in the data dictionary are not aged out, and the newly created entry overwrites the oldest entry if the number of data dictionary entries reaches the limit.
Views
System view
Predefined user roles
network-admin
Parameters
minutes: Specifies the aging time for entries in the data dictionary, in the range of 10 to 60 minutes.
Usage guidelines
The device polls all data dictionary entries and deletes the entries that are not hit within the aging time. If the number of data dictionary entries reaches the limit, the device no longer creates new entries.
The amount of time used by the device to poll all data dictionary entries depends on the number of data dictionary entries on the device.
You must set the same aging time on the local and peer devices.
Examples
# Set the aging time to 10 minutes for entries in the data dictionary.
<Sysname> system-view
[Sysname] waas dre cache aging 10
waas dre offset-step
Use waas dre offset-step to set the DRE match offset step.
Use undo waas dre offset-step to restore the default.
Syntax
waas dre offset-step { general | fast | fastest | normal }
undo waas dre offset-step
Default
The DRE match offset step is normal.
Views
System view
Predefined user roles
network-admin
Parameters
general: Specifies the DRE match offset step as general.
fast: Specifies the DRE match offset step as fast.
fastest: Specifies the DRE match offset step as fastest.
normal: Specifies the DRE match offset step as normal.
Usage guidelines
The following DRE match offset step levels are listed from high to low:
· fastest.
· fast.
· general.
· normal.
The higher the step level, the lower the match precision. As a best practice, use a higher-level offset step on high-speed links to improve match efficiency. Use a lower-level offset step on low-speed links to ensure match precision.
Examples
# Set the DRE match offset step to fast.
<Sysname> system-view
[Sysname] waas dre offset-step fast
waas policy
Use waas policy to create a WAAS policy and enter its view, or enter the view of an existing WAAS policy.
Use undo waas policy to delete a WAAS policy.
Syntax
waas policy policy-name
undo waas policy policy-name
Default
Only the system-defined WAAS policy waas_default exists.
Views
System view
Predefined user roles
network-admin
Parameters
policy-name: Specifies a name for the WAAS policy, a case-insensitive string of 1 to 63 characters.
Usage guidelines
To delete a WAAS policy applied to an interface, first remove the WAAS policy from the interface.
As a best practice, configure a WAAS policy by entering the system-defined WAAS policy view and modifying the system-defined WAAS policy. The system-defined WAAS policy is created by the system when the WAAS process starts for the first time. The system-defined WAAS policy uses all system-defined WAAS classes. Only system-defined WAAS classes FTP-Data and FTPS-Data use source ports as match options. All other system-defined WAAS classes use destination ports as match options.
Table 7 System-defined WAAS policy
WAAS actions |
Source ports |
Destination ports |
|
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
3200–3219, 3221–3224, 3226–3267, 3270–3282, 3284–3305, 3307–3388, 3390–3399, 3600–3659, 3662–3699 |
||
Passthrough |
N/A |
||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
N/A |
|||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
Passthrough |
N/A |
||
N/A |
|||
N/A |
|||
Passthrough |
N/A |
Examples
# Enter system-defined WAAS policy view.
<Sysname> system-view
[Sysname] waas policy waas_default
[Sysname-waaspolicy-waas_default]
Related commands
display waas policy
waas tfo auto-discovery blacklist enable
Use waas tfo auto-discovery blacklist enable to enable the TFO blacklist autodiscovery feature.
Use undo waas tfo auto-discovery blacklist enable to disable the TFO blacklist autodiscovery feature.
Syntax
waas tfo auto-discovery blacklist enable
undo waas tfo auto-discovery blacklist enable
Default
The TFO blacklist autodiscovery feature is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
This feature automatically discovers servers that cannot receive TCP packets with options and adds the server IP addresses and port numbers to a blacklist.
During the 3-way handshake, the local device considers the TCP connection attempt failed if either of the following situations occurs:
· The peer device does not respond within the specified time period.
· The peer device closes the TCP connection.
Examples
# Enable the TFO blacklist autodiscovery feature.
[Sysname] waas tfo auto-discovery blacklist enable
Related commands
display waas tfo auto-discovery blacklist
waas tfo auto-discovery blacklist hold-time
Use waas tfo auto-discovery blacklist hold-time to set the aging time for autodiscovered blacklist entries.
Use undo waas tfo auto-discovery blacklist hold-time to restore the default.
Syntax
waas tfo auto-discovery blacklist hold-time minutes
undo waas tfo auto-discovery blacklist hold-time
Default
The aging time for autodiscovery blacklist entries is 5 minutes.
Views
System view
Predefined user roles
network-admin
Parameters
minutes: Specifies the aging time for autodiscovered blacklist entries, in the range of 1 to 10080 minutes.
Usage guidelines
An aging timer is started when a blacklist entry is created. The system automatically deletes an autodiscovered blacklist entry to make room for a new blacklist entry when the aging timer expires.
Examples
# Set the aging time to 30 minutes for autodiscovered blacklist entries.
<Sysname> system-view
[Sysname] waas tfo auto-discovery blacklist hold-time 30
Related commands
display waas tfo auto-discovery blacklist
waas tfo auto-discovery blacklist enable
waas tfo base-congestion-window
Use waas tfo base-congestion-window to set the initial congestion window size for slow start.
Use undo waas tfo base-congestion-window to restore the default.
Syntax
waas tfo base-congestion-window segments
undo waas tfo base-congestion-window
Default
The initial congestion window size is two TCP segments.
Views
System view
Predefined user roles
network-admin
Parameters
segments: Specifies the initial congestion window size in the range of 1 to 10 TCP segments.
Usage guidelines
The congestion window size changes with the congestion status and transmission speed. An appropriate initial congestion window size can quickly restore the network to its full transmission capacity after congestion occurs.
Examples
# Set the initial congestion window size to three segments.
<Sysname> system-view
[Sysname] waas tfo base-congestion-window 3
waas tfo congestion-method
Use waas tfo congestion-method to specify a TCP congestion control algorithm for the WAN side.
Use undo waas tfo congestion-method to restore the default.
Syntax
waas tfo congestion-method { bic | reno }
undo waas tfo congestion-method
Default
WAAS uses BIC as the TCP congestion control algorithm on the WAN side.
Views
System view
Predefined user roles
network-admin
Parameters
bic: Specifies BIC as the TCP congestion control algorithm.
reno: Specifies Reno as the TCP congestion control algorithm.
Examples
# Specify Reno as the TCP congestion control algorithm for the WAN side.
<Sysname> system-view
[Sysname] waas tfo congestion-method reno
waas tfo connect-limit
Use waas tfo connect-limit to set the maximum number of concurrent connections.
Use undo waas tfo connect-limit to restore the default.
Syntax
waas tfo connect-limit limit
undo waas tfo connect-limit
Default
The maximum number of concurrent connections is 10000.
Views
System view
Predefined user roles
network-admin
Parameters
limit: Specifies the maximum number of concurrent connections, in the range of 1000 to 4294967295.
Usage guidelines
After the maximum number of concurrent connections is reached, WAAS does not optimize traffic for newly established connections. Configure the maximum number of concurrent connections according to your available memory resources, because optimizing TCP flows consumes memory resources.
You must set the same maximum number of concurrent connections on the local and peer devices.
Examples
# Set the maximum number of concurrent connections to 20000.
<Sysname> system-view
[Sysname] waas tfo connect-limit 20000
waas tfo keepalive
Use waas tfo keepalive to enable TFO keepalives.
Use undo waas tfo keepalive to disable TFO keepalives.
Syntax
waas tfo keepalive
undo waas tfo keepalive
Default
TFO keepalives are enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
After you enable TFO keepalives, the system starts the 2-hour TCP keepalive timer. If the local device does not send or receive any data when the timer expires, it sends a keepalive to the peer to maintain the connection.
Examples
# Disable TFO keepalives.
<Sysname> system-view
[Sysname] undo waas tfo keepalive
waas tfo optimize dre
Use waas tfo optimize dre to enable DRE.
Use undo waas tfo optimize dre to disable DRE.
Syntax
waas tfo optimize dre
undo waas tfo optimize dre
Default
DRE is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
The DRE optimization action configured in a WAAS policy takes effect only when DRE is enabled.
Examples
# Disable DRE.
<Sysname> system-view
[Sysname] undo waas tfo optimize dre
Related commands
display waas status
waas tfo optimize lz
Use waas tfo optimize lz to enable LZ compression.
Use undo waas tfo optimize lz to disable LZ compression.
Syntax
waas tfo optimize lz
undo waas tfo optimize lz
Default
LZ compression is enabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
The LZ optimization action configured in a WAAS policy takes effect only when LZ compression is enabled.
Examples
# Disable LZ compression.
<Sysname> system-view
[Sysname] undo waas tfo optimize lz
Related commands
display waas status
waas tfo receive-buffer
Use waas tfo receive-buffer to set the TFO receiving buffer size.
Use undo waas tfo receive-buffer to restore the default.
Syntax
waas tfo receive-buffer buffer-size
undo waas tfo receive-buffer
Default
The TFO receiving buffer size is 64 KB.
Views
System view
Predefined user roles
network-admin
Parameters
buffer-size: Specifies the TFO receiving buffer size in the range of 32 to 16384 KB.
Usage guidelines
The TFO receiving buffer size affects network throughput.
Examples
# Set the TFO receiving buffer size to 1024 KB.
<Sysname> system-view
[Sysname] waas tfo receive-buffer 1024
waas udp
Use waas udp to enable UDP log message compression or decompression.
Use undo waas udp to disable UDP log message compression or decompression.
Syntax
waas udp { compress [ max max-number ] | decompress }
undo waas udp
Default
UDP log message compression and decompression is disabled.
Views
System view
Predefined user roles
network-admin
Parameters
compress: Enables UDP log message compression.
max max-number: Specifies the maximum number of UDP log messages to be compressed.
decompress: Enables UDP log message decompression.
Usage guidelines
This command takes effect only on UDP log messages with the destination IP address and destination port number specified in the waas udp ip command.
Enable UDP log message compression on the upstream device and enable UDP log message decompression on the downstream device. The upstream device compresses packets and forwards them to the downstream device. The downstream device decompresses the received packets and then forwards them.
You can enable UDP log message compression or decompression for the same destination IP address, but not both.
Examples
# Enables UDP log message compression and set the maximum number of UDP log messages to be compressed to 10.
<Sysname> system-view
[Sysname] waas udp compress max 10
Related commands
waas udp ip
waas udp ip
Use waas udp ip to specify the destination IP address and destination port number of UDP log messages to be compressed or decompressed.
Use undo waas udp ip to remove the specified destination IP address and destination port number.
Syntax
waas udp ip ip-address port port-number
undo waas udp ip ip-address port port-number
Default
No destination IP address and destination port number are specified.
Views
System view
Predefined user roles
network-admin
Parameters
ip-address: Specifies the destination IP address of UDP log messages to be compressed or decompressed.
port port-number: Specifies the destination port number of UDP log messages, in the range of 1 to 65535.
Usage guidelines
UDP log message compression and decompression takes effect only on UDP log messages with the destination IP address and destination port number specified in the waas udp ip command.
You can configure this command multiple times to specify multiple IP address-port number pairs.
Examples
# Specify that UDP log messages with destination IP address 172.16.105.48 and destination port number 5000 are compressed.
<Sysname> system-view
[Sysname] waas udp compress
[Sysname] waas udp ip 172.16.105.48 port 5000
Related commands
waas udp