Adding new policy using CLI

Unanswered Question
Jun 2nd, 2010


I want to apply new policy on the WAVE-574 to bypass the optimization for the certain traffic flows (traffic from to not to be optimized). I've prepared the configuration according to preconfigured policies which looks as following:

policy-engine application
name Pass
classifier Pass_Classifier
  match src ip dst ip
map basic
  name Pass classifier Pass_Classifier action pass-through

I would like to apply this using CLI, not CM GUI.

Does this configuration looks OK ? Unfortunately I dont have any lab equipment and I can't test it on production network.

After the configuration, is there anything else that needs to be done on branch WAVE to sync up with the CM (so I can see the new policy using CM GUI) or it will do it automatically ?

Also, at what place is this policy going to be applied (1st or last, or can I configure it to be 1st via CLI) ?

Many thanks!


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Eric Rose Wed, 06/02/2010 - 07:29

I can't comment on the CLI since i have never modified the policy configuration via the CLI. However, can I ask why you don't

want to do this via the GUI. The GUI will provide a simple graphical way to modify the policy to a single WAE/WAVE or to a group of them.


svolansky Wed, 06/02/2010 - 07:47

Sure. Web GUI is user friendly, nice and so on. But for me it is much more comfortable just to copy/paste the configuration using CLI. I've spent hours and hours on routers and switches CLI and now I would like to continue using it with WAAS. I am just the old fashion CLI guy .

Eric Rose Wed, 06/02/2010 - 08:11


I did a little research and noticed that the map command is used for the ordering process.

also note the warning in the command reference guide.

Note We strongly recommend that you use the  WAAS Central Manager GUI to centrally configure application policies for  your WAEs. For more information, see the Cisco  Wide Area Application Services Configuration Guide.

Also the modification from the CLI are sent to the CM upon the next polling cycle. "show cms info" The policy for this device will then become a locally administered policy. Typically policies should be done via the all device group to simplify the configuration configuration and modifications.



svolansky Thu, 06/03/2010 - 02:30

Thanks a lot Eric for your response!

Just one more question. What command needs to be applied to send the new configuration from branch WAVE to CM without waiting on polling timer? Is it "cms enable" or "cms config-sync" ??

Many thanks!


svolansky Thu, 06/03/2010 - 14:46

Thansk Zach!

I've also found out that Cisco offers  couple of remote labs focused on configuring WAAS devices in Partner  Education Connection section. I've registered for the one called "Cisco  Wide Area Application Services: Configuring WAAS Inline lab". But unfortunately when I want start this lab it keeps telling me that "No labs are available at this time". Can you please tell me when this lab will be available or point me to other place where I can ask this question?



svolansky Fri, 06/04/2010 - 06:21

Please keep me posted about status of this case.




Eric Rose Fri, 06/04/2010 - 17:49

Here is the response back.

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:"Times New Roman"; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;} The "Wide Area Application Services: Configuring WAAS Inline lab" is already End-Of-Life and no longer available.

To locate teh available course for Cisco Wide Area Application Services, follow the steps below:
-Visit Partner Education Coonection at then hit LAUNCH
--Login using your Cisco User ID and Password
---Then locate "Brose Catalog" and click on it
----Look for "Architectural Plays" then locate "- Wide Area Application Services (WAAS)" under TECHNOLOGIES - Data Center
-----Then hit on "All Offering" for Wide Area Application Services (WAAS).
------You will be prompted to a list of available Courses for Wide Area Application Services (WAAS).

-Or you may follow the link below "IT Certification and Career Paths"
--Simply locate "Cisco Data Center Application Services Design Specialist" and "Cisco Data Center Application Services Support Specialist" under DATA CENTER.

IT Certification and Career Paths Introduction



Eric Rose

P.S. If this answers your questions, please mark the question as answered with a 5.


This Discussion