ASA WCCP multipkle service groups same interface

Unanswered Question
Oct 22nd, 2009
User Badges:

Hi Guys,


I am trying to configure WCCP as I have 3 DMZ off my firewall each containing a cache engine for each particular network segment, i.e london, berlin, paris.


I only have 1 inside interface and I want to redirect clients based on src ip to which ever cache engine belongs to there network segment. i.e belrin subnets goto berlin chache engine dmz.


Is this possible


Scott

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Kureli Sankar Mon, 10/26/2009 - 09:18
User Badges:
  • Cisco Employee,

You are saying that the clients are on the inside and the cache engines are on the DMZ?


Pls. check the WCCP requirement:


http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/dhcp.html#wp1094628


WCCP redirect is supported only on the ingress of an interface. The only topology that the security appliance supports is when client and cache engine are behind the same interface of the security appliance and the cache engine can directly communicate with the client without going through the security appliance.



Actions

This Discussion