11-18-2005 02:40 AM
Hello,
customer wants to use WCCP and GRE for redirecting.
customer topologie:
Router 1 ---- Router 2 ----> G-WiN
| | |
| | | GRE fuer
Client 1
| | | L2redirect
for Client 2
| | |
Client 1 | +--- CE
|
Client 2
CE is configured as transparent.
Client 1 can use ce if GRE is configured. but client 2 get no connection to the internet.
any idea which is problem with that design ?
Thank you for any help
regards
Dietrich Schleyer
11-18-2005 06:07 AM
hi Dietrich,
I don't understand the topology from the description you provided. Is there any way you could attach a diagram to the post?
thanks,
Zach
11-22-2005 08:40 AM
Hello Zach, thank you for your answer. enclosed you find the configs. the 2 routers are connected via a transfer ip net.
Client ip addresses are :
Client 1 z.B. 141.99.80.70
Client 2 z.B. 141.99.2.22, 141.99.131.100
the design is : h-core = Router 1, g-core = Router 2
i will add tomorrow addizional information
regards
Dietrich
11-22-2005 03:47 PM
Thanks for posting the configurations. Where are the Client 2 IP addresses you listed coming from? I don't see that those addresses are directly connected to h-core. Is it possible this is just a routing issue? Can you provide the following from g-core:
sh ip ro 141.99.2.22
sh ip ro 141.99.131.100
regards,
Zach
11-24-2005 12:31 AM
Hello Zach,
customer sent me the output of the show commands:
G-Core#sh ip ro 141.99.2.22
Routing entry for 141.99.2.0/24
Known via "connected", distance 0, metric 0 (connected, via interface)
Routing Descriptor Blocks:
* directly connected, via Vlan2
Route metric is 0, traffic share count is 1
> sh ip ro 141.99.131.100
>
G-Core#sh ip ro 141.99.131.100
Routing entry for 141.99.131.0/24
Known via "static", distance 100, metric 0
Redistributing via ospf 254
Advertised by ospf 254 subnets
Routing Descriptor Blocks:
* 141.99.252.22
Route metric is 0, traffic share count is 1
In the config guide i didn´t understand the l2-redirection quite well.
Does l2 redirect insert the mac address of the ce as the destination address to avoid to establish a gre tunnel ? . Is that right ?
regards and thank you for your help
Dietrich
11-24-2005 12:38 AM
11-24-2005 05:24 AM
11-25-2005 08:21 PM
Dietrich,
Looking at the configuration on g-core-config, the redirect list used by WCCP is denying traffic sourced from 141.99.2.0/24 and 141.99.131.0/24. These two (2) entries would need to be removed from ACL 180 for traffic from these subnets to be redirected to the CE.
~Zach
11-27-2005 11:14 PM
Hello Zach,
customer told me, that if he deletes the entries in acl he has the problem which we are discussing:
client 1 can access the internet but
client 2 can´t access the internet
regards
Dietrich
11-28-2005 06:04 AM
Can you please perform a trace route from client 2?
thanks,
Zach
11-30-2005 10:11 PM
Hello Zach,
i have asked my customer for the traceroute.
Another advie: customer told me that client 2 is an existent proxy-server. Could be that a problem ?
thank you for your help
regards
Dietrich
11-30-2005 11:21 PM
Which target ip -address is useful ? Any IP-Address in the interbnet?
regards
Dietrich
12-03-2005 03:07 PM
Yes. Try one that works for client 1.
~Zach
12-06-2005 06:39 AM
Hello Zach,
i got a traceroutes from from the and one from Client 2 inot the internet::
Traceroute from 141.99.252.26 to 80.146.172.85 (80.146.172.85 isn't echoing)
ce#traceroute www.nk-networks.com
traceroute to 80.146.172.85 (80.146.172.85), 30 hops max, 38 byte packets
1 141.99.252.25 (141.99.252.25) 2.352 ms 0.305 ms 0.410 ms
2 ar-marburg3.x-win.dfn.de (188.1.16.20) 2.750 ms 3.155 ms 2.690 ms
3 188.1.18.10 (188.1.18.10) 6.607 ms 7.292 ms 8.055 ms
4 ar-goettingen3-te2-3.x-win.dfn.de (188.1.18.58) 7.890 ms 11.955 ms 9.891 ms
5 cr-hannover1.x-win.dfn.de (188.1.18.62) 6.354 ms 7.408 ms 6.474 ms
6 * 188.1.62.2 (188.1.62.2) 14.401 ms 16.609 ms
7 k-ea1.K.DE.net.DTAG.DE (62.154.55.158) 24.462 ms 26.855 ms *
8 80.148.148.67 (80.148.148.67) 13.904 ms 14.855 ms 15.960 ms
9 * * *
ce#
Traceroute from 141.99.2.22 to 80.146.172.85 (80.146.172.85 isn't echoing)
$ /usr/sbin/traceroute www.nk-networks.com
traceroute to www.nk-networks.com (80.146.172.85): 1-30 hops, 38 byte packets
1 141.99.2.254 (141.99.2.254) 0.976 ms 0.976 ms 0.0 ms
2 ar-marburg3.x-win.dfn.de (188.1.16.20) 2.93 ms 7.81 ms 4.88 ms
3 188.1.18.10 (188.1.18.10) 8.78 ms (ttl=249!) 10.7 ms (ttl=249!) 8.78 ms (ttl=249!)
4 ar-goettingen3-te2-3.x-win.dfn.de (188.1.18.58) 17.5 ms 4.88 ms 4.88 ms
5 cr-hannover1.x-win.dfn.de (188.1.18.62) 9.76 ms 8.78 ms 9.76 ms
6 188.1.62.2 (188.1.62.2) 14.6 ms 11.7 ms 7.81 ms
7 k-ea1.K.DE.net.DTAG.DE (62.154.55.158) 12.6 ms (ttl=246!) 18.5 ms (ttl=246!) 14.6 ms (ttl=246!)
8 80.148.148.67 (80.148.148.67) 35.1 ms (ttl=246!) 20.5 ms (ttl=246!) 13.6 ms (ttl=246!)
9 * * *
regards
Dietrich
12-08-2005 08:09 PM
You mentioned previously:
"customer told me that client 2 is an existent proxy-server"
Are you saying that Client 2 is configured to use a proxy for web access? This would most certainly prevent the traffic from being redirected, assuming that the proxy port being used is something other than 80.
Does the client wish to continue using the proxy server?
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: