04-10-2008 11:34 AM
Hi Sir,
I have a WAE-7326-K9 connected on the same VLAN (VLAN 200) as two Catalyst 6513s. Their configs are as follows:
Core Switch #1
--------------
!
ip wccp version 2
ip wccp 61
ip wccp 62
!
interface Vlan601
description *** To WAN Access Router Gi0/1 ***
ip address ...
ip wccp 61 redirect out
ip wccp 62 redirect in
!
interface Vlan200
description *** To WAE ***
ip address 10.200.70.2 255.255.255.240
ip wccp redirect exclude in
standby ip 10.200.70.1
!
interface Vlan A
description *** Server Farm A ***
!
interface Vlan B
description *** Server Farm B ***
!
interface Vlan C
description *** Server Farm C ***
!
Core Switch #2
--------------
!
ip wccp version 2
ip wccp 61
ip wccp 62
!
interface Vlan602
description *** To WAN Access Router Gi0/2 ***
ip address ...
ip wccp 61 redirect out
ip wccp 62 redirect in
!
interface Vlan200
description *** To WAE ***
ip address 10.200.70.3 255.255.255.240
ip wccp redirect exclude in
standby ip 10.200.70.1
!
interface Vlan A
description *** Server Farm A ***
!
interface Vlan B
description *** Server Farm B ***
!
interface Vlan C
description *** Server Farm C ***
!
WAE Config
----------
!
primary-interface GigabitEthernet 1/0
!
interface GigabitEthernet 1/0
ip address 10.200.70.10 255.255.255.240
exit
interface GigabitEthernet 2/0
exit
!
ip default-gateway 10.200.70.1
!
wccp router-list 1 10.200.70.2 10.200.70.3
wccp tcp-promiscuous router-list-num 1 l2-redirect mask-assign
wccp version 2
!
On the WAE, I configured l2-redirect and mask-assign based on a config example I came across. I don't quite understand the function of these two keywords. Below is the Command Reference for the "wccp tcp-promiscuous" command:
Is there anything else I need to configure on the Catalyst switches in order to support the L2 redirection and mask assignment?
Is it best practice to configure these features for a WAE that is directly connected to Catalyst 6500 switches?
Thank you.
B.Rgds,
Lim TS
04-11-2008 04:18 AM
Lim,
The WCCP configuration on the WAE is correct, however on the 6500 you should avoid the use of outbound redirection and the 'ip wccp redirect exclude in' command. Both of these commands cause a portion of the WCCP redirection to happen in software (versus hardware).
Instead of configuring outbound redirection, you can move that service group to the server-facing interfaces as inbound redirection. By only using inbound redirection, you also no longer need the 'redirect exclude in' command.
Zach
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide