Thanks for the reply. Is there a way to implement WCCP on a device where the clients aren't directly connected, i.e. not using the 3750 as the default gateway?

To give a bit more context I'm actually looking to provide a transparent proxy solution to wireless clients being tunneled through a WiSM to a guest WLC. The user vlan(s) will actually be created on the local vrf-enabled 6509 (which is why VRF-aware WCCP would be perfect if it were supported on a 6509). I had hoped to insert the device providing WCCP services in line to the flow of traffic as it is routed towards the Internet.

I did have a nice PBR solution in place using the 'set ip vrf xxx next-hop' command in a route-map that matched http and https traffic; the next hop being the virtual cluster address of two Web Gateway proxies. Unfortunately the proxy cluster was active-passive with the virtual IP being basically a HSRP/VRRP address and for capacity reasons I need an active-active proxy solution. Hence, my interest in WCCP being able to load-balance between two WCCP client proxies.

Could PBR be applicable here? Would setting the next hop for http/https traffic to the (SVI) IP of the 3750 running WCCP work?

thanks in advance

Matthew

Thanks for the reply. Is there a way to implement WCCP on a device where
 the clients aren't directly connected, i.e. not using the 3750 as the 
default gateway?

I'm afraid not. If the traffic is not being pushed towards this switch, how the switch is going to redirect?

Could PBR be applicable here? Would setting the next hop for http/https 
traffic to the (SVI) IP of the 3750 running WCCP work?

In theory, it should work. I recommend testing before deploying.

I'm happy to report that using PBR did work. The user vlan was created on the 6509 with WCCP running on a directly connected 3750 (with a single link into the proxy vlan). The user vlan and WCCP / proxy vlans were different but in the same vrf. Using the 'set ip vrf xxx next-hop' command within a route-map I set the next hop as the SVI IP of the 3750 and WCCP just worked!


The only thing I've noticed is that the 'sh ip wccp interfaces counts' counters are not incrementing and neither is the 'Packets Redirected' counter under the 'sh ip wccp 51 detail' command? I'm just assuming that they are supposed to be incremental and don't represent realtime values when the command was issued?

Perhaps the WCCP is not doing the redirection but simply PBR is doing the whole thing?

Like I said, a WCCP design requires for routing to be enable on the switch and the incoming packets directed to the SVI with WCCP in.

Did you enable routing on the 3750?

Sorry, I should have mentioned - after your previous post I enabled IP routing. It's definitely the WCCP doing its thing as it stops working when I take WCCP off the SVI 'no ip wccp51 redirect in'. I understand what you were saying now in that WCCP won't work if traffic if just passing through a device running WCCP (even if 'ip wccp xx redirect in' is configured on its only SVI) but rather the traffic has to be specifically directed at the SVI of the device running WCCP.

Any ideas on the counters?

Ah, I see. Thanks very much for your help.

Kind regards

Matthew