Fortinet white logo
Fortinet white logo

CLI Reference

config wanopt profile

config wanopt profile

Configure WAN optimization profiles.

config wanopt profile
    Description: Configure WAN optimization profiles.
    edit <name>
        set transparent [enable|disable]
        set comments {var-string}
        set auth-group {string}
        config http
            Description: Enable/disable HTTP WAN Optimization and configure HTTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set ssl [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
        end
        config cifs
            Description: Enable/disable CIFS (Windows sharing) WAN Optimization and configure CIFS WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
        end
        config mapi
            Description: Enable/disable MAPI email WAN Optimization and configure MAPI WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set tunnel-sharing [shared|express-shared|...]
        end
        config ftp
            Description: Enable/disable FTP WAN Optimization and configure FTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
        end
        config tcp
            Description: Enable/disable TCP WAN Optimization and configure TCP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set byte-caching-opt [mem-only|mem-disk]
            set tunnel-sharing [shared|express-shared|...]
            set port {user}
            set ssl [enable|disable]
            set ssl-port {user}
        end
    next
end

config wanopt profile

Parameter

Description

Type

Size

Default

name

Profile name.

string

Maximum length: 35

transparent

Enable/disable transparent mode.

option

-

enable

Option

Description

enable

Determine if WAN Optimization changes client packet source addresses. Affects the routing configuration on the server network.

disable

Disable transparent mode. Client packets source addresses are changed to the source address of the FortiProxy internal interface. Similar to source NAT.

comments

Comment.

var-string

Maximum length: 255

auth-group

Optionally add an authentication group to restrict access to the WAN Optimization tunnel to peers in the authentication group.

string

Maximum length: 35

config http

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

-

disable

Option

Description

enable

Enable SSL/TLS offloading.

disable

Disable SSL/TLS offloading.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

config cifs

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

config mapi

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

config ftp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

config tcp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

disable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

byte-caching-opt

Select whether TCP byte-caching uses system memory only or both memory and disk space.

option

-

mem-only

Option

Description

mem-only

Byte caching with memory only.

mem-disk

Byte caching with memory and disk.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

port

Port numbers or port number ranges for TCP. Only packets with a destination port number that matches this port number or range are accepted by this profile.

user

Not Specified

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

-

disable

Option

Description

enable

Enable SSL/TLS offloading.

disable

Disable SSL/TLS offloading.

ssl-port

Port numbers or port number ranges on which to expect HTTPS traffic for SSL/TLS offloading.

user

Not Specified

config wanopt profile

config wanopt profile

Configure WAN optimization profiles.

config wanopt profile
    Description: Configure WAN optimization profiles.
    edit <name>
        set transparent [enable|disable]
        set comments {var-string}
        set auth-group {string}
        config http
            Description: Enable/disable HTTP WAN Optimization and configure HTTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set ssl [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
        end
        config cifs
            Description: Enable/disable CIFS (Windows sharing) WAN Optimization and configure CIFS WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
        end
        config mapi
            Description: Enable/disable MAPI email WAN Optimization and configure MAPI WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set tunnel-sharing [shared|express-shared|...]
        end
        config ftp
            Description: Enable/disable FTP WAN Optimization and configure FTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
        end
        config tcp
            Description: Enable/disable TCP WAN Optimization and configure TCP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set byte-caching-opt [mem-only|mem-disk]
            set tunnel-sharing [shared|express-shared|...]
            set port {user}
            set ssl [enable|disable]
            set ssl-port {user}
        end
    next
end

config wanopt profile

Parameter

Description

Type

Size

Default

name

Profile name.

string

Maximum length: 35

transparent

Enable/disable transparent mode.

option

-

enable

Option

Description

enable

Determine if WAN Optimization changes client packet source addresses. Affects the routing configuration on the server network.

disable

Disable transparent mode. Client packets source addresses are changed to the source address of the FortiProxy internal interface. Similar to source NAT.

comments

Comment.

var-string

Maximum length: 255

auth-group

Optionally add an authentication group to restrict access to the WAN Optimization tunnel to peers in the authentication group.

string

Maximum length: 35

config http

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

-

disable

Option

Description

enable

Enable SSL/TLS offloading.

disable

Disable SSL/TLS offloading.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

config cifs

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

config mapi

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

config ftp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

config tcp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

disable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

byte-caching-opt

Select whether TCP byte-caching uses system memory only or both memory and disk space.

option

-

mem-only

Option

Description

mem-only

Byte caching with memory only.

mem-disk

Byte caching with memory and disk.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

port

Port numbers or port number ranges for TCP. Only packets with a destination port number that matches this port number or range are accepted by this profile.

user

Not Specified

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

-

disable

Option

Description

enable

Enable SSL/TLS offloading.

disable

Disable SSL/TLS offloading.

ssl-port

Port numbers or port number ranges on which to expect HTTPS traffic for SSL/TLS offloading.

user

Not Specified