WAE - Clarification on "wccp tcp-promiscuous" command

limtohsoon · ‎04-10-2008

Hi Sir,

I have a WAE-7326-K9 connected on the same VLAN (VLAN 200) as two Catalyst 6513s. Their configs are as follows:

Core Switch #1

--------------

!

ip wccp version 2

ip wccp 61

ip wccp 62

!

interface Vlan601

description *** To WAN Access Router Gi0/1 ***

ip address ...

ip wccp 61 redirect out

ip wccp 62 redirect in

!

interface Vlan200

description *** To WAE ***

ip address 10.200.70.2 255.255.255.240

ip wccp redirect exclude in

standby ip 10.200.70.1

!

interface Vlan A

description *** Server Farm A ***

!

interface Vlan B

description *** Server Farm B ***

!

interface Vlan C

description *** Server Farm C ***

!

Core Switch #2

--------------

!

ip wccp version 2

ip wccp 61

ip wccp 62

!

interface Vlan602

description *** To WAN Access Router Gi0/2 ***

ip address ...

ip wccp 61 redirect out

ip wccp 62 redirect in

!

interface Vlan200

description *** To WAE ***

ip address 10.200.70.3 255.255.255.240

ip wccp redirect exclude in

standby ip 10.200.70.1

!

interface Vlan A

description *** Server Farm A ***

!

interface Vlan B

description *** Server Farm B ***

!

interface Vlan C

description *** Server Farm C ***

!

WAE Config

----------

!

primary-interface GigabitEthernet 1/0

!

interface GigabitEthernet 1/0

ip address 10.200.70.10 255.255.255.240

exit

interface GigabitEthernet 2/0

exit

!

ip default-gateway 10.200.70.1

!

wccp router-list 1 10.200.70.2 10.200.70.3

wccp tcp-promiscuous router-list-num 1 l2-redirect mask-assign

wccp version 2

!

On the WAE, I configured l2-redirect and mask-assign based on a config example I came across. I don't quite understand the function of these two keywords. Below is the Command Reference for the "wccp tcp-promiscuous" command:

http://www.cisco.com/en/US/partner/docs/app_ntwk_services/waas/waas/v4013/command/reference/glob_cfg.html#wp1151676

Is there anything else I need to configure on the Catalyst switches in order to support the L2 redirection and mask assignment?

Is it best practice to configure these features for a WAE that is directly connected to Catalyst 6500 switches?

Thank you.

B.Rgds,

Lim TS

Zach Seils · ‎04-11-2008

Lim,

The WCCP configuration on the WAE is correct, however on the 6500 you should avoid the use of outbound redirection and the 'ip wccp redirect exclude in' command. Both of these commands cause a portion of the WCCP redirection to happen in software (versus hardware).

Instead of configuring outbound redirection, you can move that service group to the server-facing interfaces as inbound redirection. By only using inbound redirection, you also no longer need the 'redirect exclude in' command.

Zach