Specifications

3-515

Cisco Wide Area Application Services Command Reference

OL-21611-01

Chapter 3 CLI Commands

(config) interception access-list

To configure traffic interception with an access list, use the interception access-list global configuration

command. To disable the interception access list, use the no form of this command.

interception access-list {acl-num | acl_name}

no interception access-list

Syntax Description

Defaults No default behaviors or values.

Command Modes global configuration

Device Modes application-accelerator

central-manager

Usage Guidelines Use the interception access-list command to apply an access list (ACL) to traffic interception. Packets

permitted by the ACL are intercepted for WAAS optimization. Packets denied by the ACL are passed

through by WAAS. You can define ACLs by using the ip access-list standard or ip access-list extended

configuration commands.

You can configure only one interception ACL on a device.

If you specify an interception ACL that is not defined, it is considered to be a “permit any” ACL and all

traffic is intercepted.

An interception ACL is mutually exclusive with a static bypass list (configured by the bypass global

configuration command). If you have configured a static bypass list, you must remove it before using

this command.

An interception ACL works both with WCCP and inline interception modes.

When used with interface ACLs and WCCP ACLs, the interface ACL is applied first, the WCCP ACL is

applied second, and then the interception ACL is applied last.

Examples The following example shows how to define and apply an ACL that intercepts all traffic except WWW

traffic from a particular client:

dc-wae(config)# ip access-list extended iacl

dc-wae(config-ext-nacl)# deny tcp host 10.74.2.132 any eq www

dc-wae(config-ext-nacl)# permit ip any any

acl_num Numeric identifier that identifies the ACL to apply to traffic interception. For

standard ACLs, the valid range is 1–99; for extended ACLs, the valid range

is 100–199.

acl_name Alphanumeric identifier of up to 30 characters, beginning with a letter that

identifies the ACL to apply to traffic interception.