WAAS - I lose access to all applications

Answered Question
Mar 8th, 2008

I think I have everything configured correctly, however as soon as I put the last tcp-promiscuous command in place on the core WAAS, I lose connectivity to all applications. What am I doing wrong?

I have a core site with a 6509 and core WAAS. I have an edge site with a 3750 stack and an edge WAAS. I have attached the configs.

Correct Answer by dstolt about 8 years 11 months ago

61 on the LAN and 62 on the WAN will pin the traffic from the end users at the other end of the WAN based on destination IP. If you are going to have multiple sites load balanced across more then one core WAE, then you might want to reverse services 61 (wan) and 62 (lan) and load balanced based on source IP.

The router list on the WAE should specify the layer 3 address of the 6500 (interface or vlan) that is dedicated to the WAEs (separate from the LAN/WAN subnets).

Hope that helps,

Dan

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4.5 (2 ratings)
Loading.
dstolt Mon, 03/10/2008 - 20:25

Patrick,

Looks like your core WAAS is on VLAN 254 where you are intercepting wccp 62. If so, you need a dedicated vlan where you won't be re-intercepting the egress traffic leaving the WAE. This can create a loop of the traffic leaving the WAE and getting re-intercepted by wccp.

Dan

patrickg@layer8... Tue, 03/11/2008 - 06:58

Dan,

Thanks for the help. Can you please Veriy something for me. Since I am placing the WCCP on my 6509 here is my new understanding. I should place "ip wccp 61 in" on the VLANS with the hosts address I want optimized, and then place the command "ip wccp 62 in" on the interface connecting to my WAN router. Then I should specify the IP address of my 6509 in the router-list on the WAAS? Is that correct?

Correct Answer
dstolt Tue, 03/11/2008 - 17:57

61 on the LAN and 62 on the WAN will pin the traffic from the end users at the other end of the WAN based on destination IP. If you are going to have multiple sites load balanced across more then one core WAE, then you might want to reverse services 61 (wan) and 62 (lan) and load balanced based on source IP.

The router list on the WAE should specify the layer 3 address of the 6500 (interface or vlan) that is dedicated to the WAEs (separate from the LAN/WAN subnets).

Hope that helps,

Dan

Actions

This Discussion