possible cause of wccp v2 error message WCCP-EVNT:D60

Unanswered Question
Dec 9th, 2008

I have wccp configured on a pair of 6509s trying to establish a relationship with a couple of Bluecoat proxies. We are trying to use L2 redirection. I keep getting this message:

WCCP-EVNT:D60: Here_I_Am packet from w.x.y.z w/bad rcv_id 00000000

I have set this up in two other locations using 3750s and the same proxies. Everything looks the same both on the switches and on the proxies. Any suggestions for where to check would be welcome.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
dstolt Tue, 12/09/2008 - 12:55

Craig,


Can you post your configs you are using for wccp on the switch as well as the IOS you are using?


Dan

craig.robbins Tue, 12/09/2008 - 13:03

Hi Dan,

Here is what we have configured:

ip wccp 60 redirect-list Proxy_traffic group-list Bluecoat


Standard IP access list Bluecoat

20 permit 10.230.62.6

10 permit 10.230.62.4


Extended IP access list Proxy_traffic

10 permit tcp host 10.230.14.96 any eq www

20 permit tcp host 10.230.14.96 any eq 443

30 permit tcp host 10.230.14.96 any eq 554

40 permit tcp host 10.230.14.96 any eq 1755

50 permit tcp host 10.230.21.103 any eq www

60 permit tcp host 10.230.21.103 any eq 443

70 permit tcp host 10.230.21.103 any eq 554

80 permit tcp host 10.230.21.103 any eq 1755


interface Vlan254

ip address 10.230.254.252 255.255.255.0

no ip redirects

no ip proxy-arp

ip wccp 60 redirect out

ip route-cache flow

glbp 1 ip 10.230.254.254

glbp 1 timers msec 250 msec 900

glbp 1 preempt delay minimum 30

end


This is exactly how we have set it up on two sets of 3750s at different locations and they are working fine (except for the redirect out which I have read your warnings about).


Here is what I continue to see from the switch with debug event and debug packet turned on:


Dec 9 12:58:24.800 PST: WCCP-EVNT:wccp_update_assignment_status: enter

Dec 9 12:58:24.800 PST: WCCP-EVNT:wccp_update_assignment_status: exit

Dec 9 12:58:24.800 PST: WCCP-EVNT:wccp_copy_wc_assignment_data: enter

Dec 9 12:58:24.800 PST: WCCP-EVNT:wccp_copy_wc_assignment_data: reuse orig mask info (1052 bytes)

Dec 9 12:58:24.800 PST: WCCP-EVNT:wccp_copy_wc_assignment_data: exit

Dec 9 12:58:24.800 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad return method 00000002, was offered 00000001

Dec 9 12:58:24.800 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 with incompatible capabilites

Dec 9 12:58:24.800 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 00000006

Dec 9 12:58:25.788 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000005

Dec 9 12:58:25.792 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 00000007

Dec 9 12:58:26.792 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000005

Dec 9 12:58:26.792 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 00000008

Dec 9 12:58:32.792 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000005

Dec 9 12:58:32.792 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 00000009

Dec 9 12:58:42.792 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000005

Dec 9 12:58:42.792 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 0000000A

Dec 9 12:58:52.792 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000005

Dec 9 12:58:52.792 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 0000000B

Dec 9 12:59:02.793 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000000

Dec 9 12:59:02.793 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 0000000C

Dec 9 12:59:12.793 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000000

Dec 9 12:59:12.793 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 0000000D


thanks for your help.


Craig

craig.robbins Tue, 12/09/2008 - 13:07

sho ip wccp output:


show ip wccp 60 detail:


WCCP Cache-Engine information:

Web Cache ID: 10.230.62.4

Protocol Version: 2.0

State: NOT Usable

Redirection: L2

Packet Return: L2

Packets Redirected: 0

Connect Time: 00:07:23

Assignment: MASK


sho ip wccp 60


lobal WCCP information:

Router information:

Router Identifier: 10.230.255.37

Protocol Version: 2.0


Service Identifier: 60

Number of Cache Engines: 0

Number of routers: 0

Total Packets Redirected: 0

Redirect access-list: Proxy_traffic

Total Packets Denied Redirect: 0

Total Packets Unassigned: 0

Group access-list: Bluecoat

Total Messages Denied to Group: 0

Total Authentication failures: 0


sho ip wccp 60 view:


WCCP Routers Informed of:

-none-


WCCP Cache Engines Visible:

10.230.62.4


WCCP Cache Engines NOT Visible:

-none-


dstolt Tue, 12/09/2008 - 14:04

Craig,


I didn't see the IOS version you are using, and I would also ask what SUP you are using. This may be able to help you out, but without knowing what software/hardware capabilities you have, it may be mute point.


The differences between the 3750 and 6500 is that the 3750 "prefers" to have L2-Return configured. The 6500 doesn't support it in most common versions of IOS. Can you try turning off L2-Return on the wccp clients and let them use GRE instead? See if that helps.


Dan


craig.robbins Tue, 12/09/2008 - 14:09


Version 12.2(18)SXF11


WS-SUP720-3B


I'll try changing the return type on the proxies..


thanks

craig.robbins Tue, 12/09/2008 - 15:23

Using GRE works. The caches and routers see each other and it works. A packet capture on the Bluecoat showed that the 6509s were were using a return type of GRE. The Bluecoats were specifying L2 return and that is what would show on the 6509s if we did a sho ip wccp detail. Going to have to open a ticket for this one I'm afraid.



dstolt Tue, 12/09/2008 - 18:41

I would set up your wccp clients to use GRE redirect then if they support it. SUP720 and SXF code will allow you to perform the redirects in Hardware. See section on Cisco Catalyst 6500 Series Switches (http://www.cisco.com/en/US/docs/ios/ipapp/configuration/guide/ipapp_wccp.html)... "The PFC3 provides hardware acceleration for GRE. If you use WCCP Layer 3 redirection with GRE, there is hardware support for encapsulation, but the PFC3 does not provide hardware support for decapsulation of WCCP GRE traffic. "


Also, on SXF11, changing to GRE will also allow you to avoid a couple of known L2 caveats (CSCsl04908 and CSCsl65335).


Good luck,

Dan

craig.robbins Wed, 12/10/2008 - 08:16

Thanks for your help Dan. We are going to give it a go with GRE and keep tabs on the cpu utilization.

thanks again,

Craig

Actions

This Discussion