WCCP on ASA

jburk · ‎11-02-2009

I have a customer who would like to do a Proof of Concept with WCCP before they invest in WAAS or bluecoat. They have a Content Engine 507 (I know this is EOL but it is what we have for POC)

The campus core switch is a 4507 Sup6-E running 12.2.40SG ip base code. The internet firewall is an ASA 5510 running 8.2

I have configured wccp correctly (I think) for 2 PC's to test but it breaks internet for the specified PC's. No errors in the debugs and the flow does show up in the 507 wccp flow.

ASA Config:

access-list wccp extended permit tcp host *PC1 IP* eq www

access-list wccp extended permit tcp host *PC2 IP* eq www

access-list wccp_ce extended permit ip host *CE507 IP* any

wccp web-cache redirect-list wccp group-list wccp_ce

wccp interface inside web-cache redirect in

CE507 Config:

wccp router-list 1 *ASA IP*

wccp port-list 1 80 443

wccp web-cache router-list-num 1

wccp version 2

Kureli Sankar · ‎11-24-2009

Here is the WCCP config guide link:

http://www.cisco.com/en/US/docs/security/asa/asa80/configuration/guide/dhcp.html#wp1094445

Your config looks good.

What does the output of

"sh wccp web-cache" show?

You can also collect "debug wccp events/packets" and see what may be going on.