I'm trying to configure WCCP support on a 3750 running IOS 12.2.53.SE2 IP Services in conjunction with a McAfee Web Gateway proxy (formerly a Secure Computing Webwasher) but not getting very far.
As WCCP-vrf support is not yet available on a 6509 I'm looking to integrate the functionality into the network with the minimum of disruption and topology changes.
My plan is to place a 3750G running WCCP in between a trunk link between two 6509s effectively as a bump in the wire, the single vlan on the trunk representing the default route traffic takes towards the Internet if an end device is not configured to use an explicit proxy.
The 3750 and McAfee Web Gateway are on the same vlan / subnet with my test PC on a different vlan within the same vrf.
The 3750 reports that it can see the WCCP client (the Web Gateway) but I don't see any redirections.
The config on the 3750 is very basic - just 'ip wccp 51' globally and 'ip wccp 51 redirect in' on the SVI vlan interface (service 51 is the default WCCP service on the Web Gateway). I've also changed the SDM template to 'routing' and 'IP routing' is not enabled.
Below are the output of various 'sh ip wccp' commands and I've attached a screenshot of the McAfee Web Gateway config page. Can anyone point me in the direction of where I'm going wrong?
thanks in advance
Switch#sh ip wccp 51 detail
WCCP Client information:
WCCP Client ID: 172.16.224.100
Protocol Version: 2.0
Packet Return: GRE
Packets Redirected: 0
Connect Time: 00:01:59
Switch#sh ip wccp interfaces counts
WCCP interface counts:
Output packets redirected
Input packets redirected
Switch#sh ip wccp interfaces detail
WCCP interface configuration details:
Output services: 0
Input services: 1
Mcast services: 0
Exclude In: FALSE
Switch#sh ip wccp 51 view
WCCP Routers Informed of:
WCCP Clients Visible:
WCCP Clients NOT Visible:
Those are software counters. WCCP is done in hardware on the 3750 platform. I know it's hard to prove that is working without counters but you've found the differences with and without WCCP so it's definitely working. Glad I was able to help.