12-09-2008 12:32 PM
I have wccp configured on a pair of 6509s trying to establish a relationship with a couple of Bluecoat proxies. We are trying to use L2 redirection. I keep getting this message:
WCCP-EVNT:D60: Here_I_Am packet from w.x.y.z w/bad rcv_id 00000000
I have set this up in two other locations using 3750s and the same proxies. Everything looks the same both on the switches and on the proxies. Any suggestions for where to check would be welcome.
12-09-2008 12:55 PM
Craig,
Can you post your configs you are using for wccp on the switch as well as the IOS you are using?
Dan
12-09-2008 01:03 PM
Hi Dan,
Here is what we have configured:
ip wccp 60 redirect-list Proxy_traffic group-list Bluecoat
Standard IP access list Bluecoat
20 permit 10.230.62.6
10 permit 10.230.62.4
Extended IP access list Proxy_traffic
10 permit tcp host 10.230.14.96 any eq www
20 permit tcp host 10.230.14.96 any eq 443
30 permit tcp host 10.230.14.96 any eq 554
40 permit tcp host 10.230.14.96 any eq 1755
50 permit tcp host 10.230.21.103 any eq www
60 permit tcp host 10.230.21.103 any eq 443
70 permit tcp host 10.230.21.103 any eq 554
80 permit tcp host 10.230.21.103 any eq 1755
interface Vlan254
ip address 10.230.254.252 255.255.255.0
no ip redirects
no ip proxy-arp
ip wccp 60 redirect out
ip route-cache flow
glbp 1 ip 10.230.254.254
glbp 1 timers msec 250 msec 900
glbp 1 preempt delay minimum 30
end
This is exactly how we have set it up on two sets of 3750s at different locations and they are working fine (except for the redirect out which I have read your warnings about).
Here is what I continue to see from the switch with debug event and debug packet turned on:
Dec 9 12:58:24.800 PST: WCCP-EVNT:wccp_update_assignment_status: enter
Dec 9 12:58:24.800 PST: WCCP-EVNT:wccp_update_assignment_status: exit
Dec 9 12:58:24.800 PST: WCCP-EVNT:wccp_copy_wc_assignment_data: enter
Dec 9 12:58:24.800 PST: WCCP-EVNT:wccp_copy_wc_assignment_data: reuse orig mask info (1052 bytes)
Dec 9 12:58:24.800 PST: WCCP-EVNT:wccp_copy_wc_assignment_data: exit
Dec 9 12:58:24.800 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad return method 00000002, was offered 00000001
Dec 9 12:58:24.800 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 with incompatible capabilites
Dec 9 12:58:24.800 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 00000006
Dec 9 12:58:25.788 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000005
Dec 9 12:58:25.792 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 00000007
Dec 9 12:58:26.792 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000005
Dec 9 12:58:26.792 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 00000008
Dec 9 12:58:32.792 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000005
Dec 9 12:58:32.792 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 00000009
Dec 9 12:58:42.792 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000005
Dec 9 12:58:42.792 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 0000000A
Dec 9 12:58:52.792 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000005
Dec 9 12:58:52.792 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 0000000B
Dec 9 12:59:02.793 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000000
Dec 9 12:59:02.793 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 0000000C
Dec 9 12:59:12.793 PST: WCCP-EVNT:D60: Here_I_Am packet from 10.230.62.4 w/bad rcv_id 00000000
Dec 9 12:59:12.793 PST: WCCP-PKT:D60: Sending I_See_You packet to 10.230.62.4 w/ rcv_id 0000000D
thanks for your help.
Craig
12-09-2008 01:07 PM
sho ip wccp output:
show ip wccp 60 detail:
WCCP Cache-Engine information:
Web Cache ID: 10.230.62.4
Protocol Version: 2.0
State: NOT Usable
Redirection: L2
Packet Return: L2
Packets Redirected: 0
Connect Time: 00:07:23
Assignment: MASK
sho ip wccp 60
lobal WCCP information:
Router information:
Router Identifier: 10.230.255.37
Protocol Version: 2.0
Service Identifier: 60
Number of Cache Engines: 0
Number of routers: 0
Total Packets Redirected: 0
Redirect access-list: Proxy_traffic
Total Packets Denied Redirect: 0
Total Packets Unassigned: 0
Group access-list: Bluecoat
Total Messages Denied to Group: 0
Total Authentication failures: 0
sho ip wccp 60 view:
WCCP Routers Informed of:
-none-
WCCP Cache Engines Visible:
10.230.62.4
WCCP Cache Engines NOT Visible:
-none-
12-09-2008 02:04 PM
Craig,
I didn't see the IOS version you are using, and I would also ask what SUP you are using. This may be able to help you out, but without knowing what software/hardware capabilities you have, it may be mute point.
The differences between the 3750 and 6500 is that the 3750 "prefers" to have L2-Return configured. The 6500 doesn't support it in most common versions of IOS. Can you try turning off L2-Return on the wccp clients and let them use GRE instead? See if that helps.
Dan
12-09-2008 02:09 PM
Version 12.2(18)SXF11
WS-SUP720-3B
I'll try changing the return type on the proxies..
thanks
12-09-2008 03:23 PM
Using GRE works. The caches and routers see each other and it works. A packet capture on the Bluecoat showed that the 6509s were were using a return type of GRE. The Bluecoats were specifying L2 return and that is what would show on the 6509s if we did a sho ip wccp detail. Going to have to open a ticket for this one I'm afraid.
12-09-2008 06:41 PM
I would set up your wccp clients to use GRE redirect then if they support it. SUP720 and SXF code will allow you to perform the redirects in Hardware. See section on Cisco Catalyst 6500 Series Switches (http://www.cisco.com/en/US/docs/ios/ipapp/configuration/guide/ipapp_wccp.html)... "The PFC3 provides hardware acceleration for GRE. If you use WCCP Layer 3 redirection with GRE, there is hardware support for encapsulation, but the PFC3 does not provide hardware support for decapsulation of WCCP GRE traffic. "
Also, on SXF11, changing to GRE will also allow you to avoid a couple of known L2 caveats (CSCsl04908 and CSCsl65335).
Good luck,
Dan
12-10-2008 08:16 AM
Thanks for your help Dan. We are going to give it a go with GRE and keep tabs on the cpu utilization.
thanks again,
Craig
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: