Solved: WCCP is not working after ASR migration is done.

syjeon · ‎07-24-2012

Hi Alls.

We recently migrated with new ASR router. However, WCCP is not working, which is using for WAE traffic redirection.

I checked the WCCP configuration. however, I can't find any issue from wccp configuration on ASR router.

Please have seeing following configuration related wccp.

Global)

ip wccp check services all

ip wccp 61 redirect-list waas-redirect

ip wccp 62 redirect-list waas-redirect

Intf)

interface GigabitEthernet0/0/x

ip wccp 61 redirect out

ip wccp 62 redirect in

show ip access-list waas-redirect)

270 deny tcp any eq 1719 any

280 deny tcp any eq 1720 any

290 deny tcp any eq 8443 any

300 deny tcp any eq 689 any

310 permit tcp any any

!

I confirmed that after migration is done, there was no issue for connectivity between ASR and WAAS.

Following is WAAS status;

Router Information for Service: TCP Promiscuous 61

Routers Seeing this Wide Area Engine(2)

Router Id Sent To

xxx.xxx.xxx.213 xxx.xxx.xxx.15

xxx.xxx.xxx.7 xxx.xxx.xxx.139

Routers not Seeing this Wide Area Engine

-NONE-

Routers Notified of from other WAE's

-NONE-

Multicast Addresses Configured

Router Information for Service: TCP Promiscuous 61

Routers Seeing this Wide Area Engine(2)

Router Id Sent To

xxx.xxx.xxx.213 xxx.xxx.xxx.15

xxx.xxx.xxx.7 xxx.xxx.xxx.139

Routers not Seeing this Wide Area Engine

-NONE-

Routers Notified of from other WAE's

-NONE-

Multicast Addresses Configured

I can't find any difference from configuration and issue with connectivity.

Can anyone help to check this issue? let me know if you need more inputs.

Thanks.

Felix Arrieta · ‎07-26-2012

here is a link with a configuration sample for ASR/WCCP ( mask assignment)

http://www.cisco.com/en/US/prod/collateral/routers/ps9343/white_paper_c11_502351.html

Sample from the link above:

WAE#sh run | in wccp

wccp router-list 1 10.17.71.1

wccp tcp-promiscuous router-list-num 1 mask-assign assign-method-strict

wccp version 2

egress-method negotiated-return intercept-method wccp

Based on your current configuration (redirect in & redirect out on the same int) I suggest to use "redirect exclude in " on the interface going to the WAAS device to avoid possible routing loops. reference: http://www.ciscopress.com/articles/article.asp?p=1192686&seqNum=2

BR!

View solution in original post

Felix Arrieta · ‎07-25-2012

Hi,

what ASR software are you running ? did it change from the previous ASR?

from the ASR can you get the following debugs:

#term mon

#debug ip wccp events

#debug ip wccp packets

#term no mon

#show ip wccp summary

#show ip wccp 61 detail

#show ip wccp 62 detail

I am not into ASR's bugs or any deep support but I found someone else who face a similar issue, it seems to be fixed with the following commands: ( https://supportforums.cisco.com/thread/2071855)

Router (conf)# ip wccp check services all

Router (conf)# no ip wccp variable-timers ( hidden command)

WCCP variable timers is basically a feature for better failure response when a WCCP client goes down. I am not sure if this feature is even supported on ISR but can give it a try.

I hope that helps, otherwise please share the ASR debugs and I'll try to find a better answer.

cheers!

syjeon · ‎07-25-2012

Hi Felix,

I'm pasting the show output what you requested.

show ip wccp 61 de)

WCCP Client information:
        WCCP Client ID:          xxx.xxx.xxx.179
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Initial Hash Info:       FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                 00000000000000000000000000000000
        Assigned Hash Info:      FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                 00000000000000000000000000000000
        Hash Allotment:          128 (50.00%)
        Packets s/w Redirected: 0
        Connect Time:            1w3d
        Bypassed Packets
          Process:               0
          CEF:                   0
          Errors:                0

        WCCP Client ID:          xxx.xxx.xxx.178
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Initial Hash Info:       00000000000000000000000000000000
                                 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
        Assigned Hash Info:      00000000000000000000000000000000
                                 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
        Hash Allotment:          128 (50.00%)
        Packets s/w Redirected: 0
        Connect Time:            1w3d
        Bypassed Packets
          Process:               0
          CEF:                   0
          Errors:                0

show ip wccp 62 de)

WCCP Client information:
        WCCP Client ID:          xxx.xxx.xxx.179
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Initial Hash Info:       FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                 00000000000000000000000000000000
        Assigned Hash Info:      FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                 00000000000000000000000000000000
        Hash Allotment:          128 (50.00%)
        Packets s/w Redirected: 0
        Connect Time:            1w3d
        Bypassed Packets
          Process:               0
          CEF:                   0
          Errors:                0

        WCCP Client ID:          xxx.xxx.xxx.178
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Initial Hash Info:       00000000000000000000000000000000
                                 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
        Assigned Hash Info:      00000000000000000000000000000000
                                 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
        Hash Allotment:          128 (50.00%)
        Packets s/w Redirected: 0
        Connect Time:            1w3d
        Bypassed Packets
          Process:               0
          CEF:                   0
          Errors:                0

Could you check?

Thanks.

Felix Arrieta · ‎07-25-2012

hi Syjeon,

can you change the assignment method from both WAAS devices from HASH to MASK ? then shut down the WCCP service from the WAAS devices WAE(config)#no wccp version 2 wait till it clear the WCCP session then get it back again with WAE(config)#wccp version 2

go back to the ASR and check if there is traffic being redirected now.

I wonder how the redirection really looks like, do you have something like this on your network:

ASR:

int fastethernet 1/0

description LAN traffic from branch office

ip wccp 61 redirect in

int serial 0/0

description WAN traffic going to Core office

ip wccp 62 redirect in

-

for testing redirection:

WAAS# show wccp gre 
Transparent GRE packets received:              5531561         <-----it should increment if redirection is working
Transparent non-GRE packets received:          0

from the ASR: ( we should see counters incrementing over here as well)

#sh platform software wccp interface counters

show platform software wccp 61 counters

show platform software wccp 62 counters

let me know how it goes,

syjeon · ‎07-25-2012

We configured as following on ASR.

interface GigabitEthernet0/0/x

ip wccp 61 redirect out

ip wccp 62 redirect in

!

I couldn't see the counter increment with your provided show command.

Could you advise how to change the method from gre to hash? Do we need to change the config both of them?

Give us the usuful link.

Thanks.

Felix Arrieta · ‎07-26-2012

here is a link with a configuration sample for ASR/WCCP ( mask assignment)

http://www.cisco.com/en/US/prod/collateral/routers/ps9343/white_paper_c11_502351.html

Sample from the link above:

WAE#sh run | in wccp

wccp router-list 1 10.17.71.1

wccp tcp-promiscuous router-list-num 1 mask-assign assign-method-strict

wccp version 2

egress-method negotiated-return intercept-method wccp

Based on your current configuration (redirect in & redirect out on the same int) I suggest to use "redirect exclude in " on the interface going to the WAAS device to avoid possible routing loops. reference: http://www.ciscopress.com/articles/article.asp?p=1192686&seqNum=2

BR!

syjeon · ‎07-26-2012

Thanks for your best support.