Fortinet white logo
Fortinet white logo

CLI Reference

config wanopt profile

config wanopt profile

Note

This command is available for model(s): FortiGate 1000D, FortiGate 101E, FortiGate 101F, FortiGate 1101E, FortiGate 1200D, FortiGate 1500DT, FortiGate 1500D, FortiGate 1801F, FortiGate 2000E, FortiGate 201E, FortiGate 201F, FortiGate 2201E, FortiGate 2500E, FortiGate 2600F, FortiGate 2601F, FortiGate 3000D, FortiGate 3001F, FortiGate 301E, FortiGate 3100D, FortiGate 3200D, FortiGate 3301E, FortiGate 3401E, FortiGate 3501F, FortiGate 3601E, FortiGate 3700D, FortiGate 3800D, FortiGate 401E, FortiGate 401F, FortiGate 4201F, FortiGate 4401F, FortiGate 5001E1, FortiGate 501E, FortiGate 601E, FortiGate 601F, FortiGate 61E, FortiGate 61F, FortiGate 71F, FortiGate 800D, FortiGate 81E-POE, FortiGate 81E, FortiGate 81F-POE, FortiGate 81F, FortiGate 900D, FortiGate 91E, FortiGate VM64, FortiWiFi 61E, FortiWiFi 61F, FortiWiFi 81F 2R 3G4G-POE, FortiWiFi 81F 2R-POE, FortiWiFi 81F 2R.

It is not available for: FortiGate 100EF, FortiGate 100E, FortiGate 100F, FortiGate 1100E, FortiGate 1800F, FortiGate 200E, FortiGate 200F, FortiGate 2200E, FortiGate 3000F, FortiGate 300E, FortiGate 3300E, FortiGate 3400E, FortiGate 3500F, FortiGate 3600E, FortiGate 3960E, FortiGate 3980E, FortiGate 400E Bypass, FortiGate 400E, FortiGate 400F, FortiGate 40F 3G4G, FortiGate 40F, FortiGate 4200F, FortiGate 4400F, FortiGate 5001E, FortiGate 500E, FortiGate 600E, FortiGate 600F, FortiGate 60E DSLJ, FortiGate 60E DSL, FortiGate 60E-POE, FortiGate 60E, FortiGate 60F, FortiGate 70F, FortiGate 80E-POE, FortiGate 80E, FortiGate 80F Bypass, FortiGate 80F-POE, FortiGate 80F, FortiGate 90E, FortiGateRugged 60F 3G4G, FortiGateRugged 60F, FortiWiFi 40F 3G4G, FortiWiFi 40F, FortiWiFi 60E DSLJ, FortiWiFi 60E DSL, FortiWiFi 60E, FortiWiFi 60F, FortiWiFi 80F 2R.

Configure WAN optimization profiles.

config wanopt profile
    Description: Configure WAN optimization profiles.
    edit <name>
        set auth-group {string}
        config cifs
            Description: Enable/disable CIFS (Windows sharing) WAN Optimization and configure CIFS WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        set comments {var-string}
        config ftp
            Description: Enable/disable FTP WAN Optimization and configure FTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set ssl [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config http
            Description: Enable/disable HTTP WAN Optimization and configure HTTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set ssl [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config mapi
            Description: Enable/disable MAPI email WAN Optimization and configure MAPI WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config tcp
            Description: Enable/disable TCP WAN Optimization and configure TCP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set byte-caching-opt [mem-only|mem-disk]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
            set port {user}
            set ssl [enable|disable]
            set ssl-port {user}
        end
        set transparent [enable|disable]
    next
end

config wanopt profile

Parameter

Description

Type

Size

Default

auth-group

Optionally add an authentication group to restrict access to the WAN Optimization tunnel to peers in the authentication group.

string

Maximum length: 35

comments

Comment.

var-string

Maximum length: 255

name

Profile name.

string

Maximum length: 35

transparent

Enable/disable transparent mode.

option

-

enable

Option

Description

enable

Determine if WAN Optimization changes client packet source addresses. Affects the routing configuration on the server network.

disable

Disable transparent mode. Client packets source addresses are changed to the source address of the FortiGate internal interface. Similar to source NAT.

config cifs

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

config ftp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

-

disable

Option

Description

enable

Enable SSL/TLS offloading.

disable

Disable SSL/TLS offloading.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

config http

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

-

disable

Option

Description

enable

Enable SSL/TLS offloading.

disable

Disable SSL/TLS offloading.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

config mapi

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

config tcp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

disable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

byte-caching-opt

Select whether TCP byte-caching uses system memory only or both memory and disk space.

option

-

mem-only

Option

Description

mem-only

Byte caching with memory only.

mem-disk

Byte caching with memory and disk.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

port

Port numbers or port number ranges for TCP. Only packets with a destination port number that matches this port number or range are accepted by this profile.

user

Not Specified

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

-

disable

Option

Description

enable

Enable SSL/TLS offloading.

disable

Disable SSL/TLS offloading.

ssl-port

Port numbers or port number ranges on which to expect HTTPS traffic for SSL/TLS offloading.

user

Not Specified

config wanopt profile

config wanopt profile

Note

This command is available for model(s): FortiGate 1000D, FortiGate 101E, FortiGate 101F, FortiGate 1101E, FortiGate 1200D, FortiGate 1500DT, FortiGate 1500D, FortiGate 1801F, FortiGate 2000E, FortiGate 201E, FortiGate 201F, FortiGate 2201E, FortiGate 2500E, FortiGate 2600F, FortiGate 2601F, FortiGate 3000D, FortiGate 3001F, FortiGate 301E, FortiGate 3100D, FortiGate 3200D, FortiGate 3301E, FortiGate 3401E, FortiGate 3501F, FortiGate 3601E, FortiGate 3700D, FortiGate 3800D, FortiGate 401E, FortiGate 401F, FortiGate 4201F, FortiGate 4401F, FortiGate 5001E1, FortiGate 501E, FortiGate 601E, FortiGate 601F, FortiGate 61E, FortiGate 61F, FortiGate 71F, FortiGate 800D, FortiGate 81E-POE, FortiGate 81E, FortiGate 81F-POE, FortiGate 81F, FortiGate 900D, FortiGate 91E, FortiGate VM64, FortiWiFi 61E, FortiWiFi 61F, FortiWiFi 81F 2R 3G4G-POE, FortiWiFi 81F 2R-POE, FortiWiFi 81F 2R.

It is not available for: FortiGate 100EF, FortiGate 100E, FortiGate 100F, FortiGate 1100E, FortiGate 1800F, FortiGate 200E, FortiGate 200F, FortiGate 2200E, FortiGate 3000F, FortiGate 300E, FortiGate 3300E, FortiGate 3400E, FortiGate 3500F, FortiGate 3600E, FortiGate 3960E, FortiGate 3980E, FortiGate 400E Bypass, FortiGate 400E, FortiGate 400F, FortiGate 40F 3G4G, FortiGate 40F, FortiGate 4200F, FortiGate 4400F, FortiGate 5001E, FortiGate 500E, FortiGate 600E, FortiGate 600F, FortiGate 60E DSLJ, FortiGate 60E DSL, FortiGate 60E-POE, FortiGate 60E, FortiGate 60F, FortiGate 70F, FortiGate 80E-POE, FortiGate 80E, FortiGate 80F Bypass, FortiGate 80F-POE, FortiGate 80F, FortiGate 90E, FortiGateRugged 60F 3G4G, FortiGateRugged 60F, FortiWiFi 40F 3G4G, FortiWiFi 40F, FortiWiFi 60E DSLJ, FortiWiFi 60E DSL, FortiWiFi 60E, FortiWiFi 60F, FortiWiFi 80F 2R.

Configure WAN optimization profiles.

config wanopt profile
    Description: Configure WAN optimization profiles.
    edit <name>
        set auth-group {string}
        config cifs
            Description: Enable/disable CIFS (Windows sharing) WAN Optimization and configure CIFS WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        set comments {var-string}
        config ftp
            Description: Enable/disable FTP WAN Optimization and configure FTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set ssl [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config http
            Description: Enable/disable HTTP WAN Optimization and configure HTTP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set ssl [enable|disable]
            set prefer-chunking [dynamic|fix]
            set protocol-opt [protocol|tcp]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config mapi
            Description: Enable/disable MAPI email WAN Optimization and configure MAPI WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
        end
        config tcp
            Description: Enable/disable TCP WAN Optimization and configure TCP WAN Optimization features.
            set status [enable|disable]
            set secure-tunnel [enable|disable]
            set byte-caching [enable|disable]
            set byte-caching-opt [mem-only|mem-disk]
            set tunnel-sharing [shared|express-shared|...]
            set log-traffic [enable|disable]
            set port {user}
            set ssl [enable|disable]
            set ssl-port {user}
        end
        set transparent [enable|disable]
    next
end

config wanopt profile

Parameter

Description

Type

Size

Default

auth-group

Optionally add an authentication group to restrict access to the WAN Optimization tunnel to peers in the authentication group.

string

Maximum length: 35

comments

Comment.

var-string

Maximum length: 255

name

Profile name.

string

Maximum length: 35

transparent

Enable/disable transparent mode.

option

-

enable

Option

Description

enable

Determine if WAN Optimization changes client packet source addresses. Affects the routing configuration on the server network.

disable

Disable transparent mode. Client packets source addresses are changed to the source address of the FortiGate internal interface. Similar to source NAT.

config cifs

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

config ftp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

-

disable

Option

Description

enable

Enable SSL/TLS offloading.

disable

Disable SSL/TLS offloading.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

config http

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

-

disable

Option

Description

enable

Enable SSL/TLS offloading.

disable

Disable SSL/TLS offloading.

prefer-chunking

Select dynamic or fixed-size data chunking for WAN Optimization.

option

-

fix

Option

Description

dynamic

Select dynamic data chunking to help to detect persistent data chunks in a changed file or in an embedded unknown protocol.

fix

Select fixed data chunking.

protocol-opt

Select protocol specific optimization or generic TCP optimization.

option

-

protocol

Option

Description

protocol

Using protocol-specific optimization.

tcp

Using generic TCP optimization.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

config mapi

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

enable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

config tcp

Parameter

Description

Type

Size

Default

status

Enable/disable WAN Optimization.

option

-

disable

Option

Description

enable

Enable WAN Optimization.

disable

Disable WAN Optimization.

secure-tunnel

Enable/disable securing the WAN Opt tunnel using SSL. Secure and non-secure tunnels use the same TCP port (7810).

option

-

disable

Option

Description

enable

Enable SSL-secured tunnelling.

disable

Disable SSL-secured tunnelling.

byte-caching

Enable/disable byte-caching. Byte caching reduces the amount of traffic by caching file data sent across the WAN and in future serving if from the cache.

option

-

disable

Option

Description

enable

Enable byte-caching.

disable

Disable byte-caching.

byte-caching-opt

Select whether TCP byte-caching uses system memory only or both memory and disk space.

option

-

mem-only

Option

Description

mem-only

Byte caching with memory only.

mem-disk

Byte caching with memory and disk.

tunnel-sharing

Tunnel sharing mode for aggressive/non-aggressive and/or interactive/non-interactive protocols.

option

-

private

Option

Description

shared

For profiles that accept nonaggressive and non-interactive protocols.

express-shared

For profiles that accept interactive protocols such as Telnet.

private

For profiles that accept aggressive protocols such as HTTP and FTP so that these aggressive protocols do not share tunnels with less-aggressive protocols.

log-traffic

Enable/disable logging.

option

-

enable

Option

Description

enable

Enable logging.

disable

Disable logging.

port

Port numbers or port number ranges for TCP. Only packets with a destination port number that matches this port number or range are accepted by this profile.

user

Not Specified

ssl

Enable/disable SSL/TLS offloading (hardware acceleration) for traffic in this tunnel.

option

-

disable

Option

Description

enable

Enable SSL/TLS offloading.

disable

Disable SSL/TLS offloading.

ssl-port

Port numbers or port number ranges on which to expect HTTPS traffic for SSL/TLS offloading.

user

Not Specified