Hi I am trying to use a cisco cache engine module
in a 2611 with wccp and client IP spoofing enabled. Everything seems to work fine apart from
1. Proxy protocol redirected packets always appear to be coming from the cache engine rather than from the client IP ie the IP spoofing is not working for the proxy redirects.
2.Websites with authentication do not work when a client with another proxy configured rather than the cache engine is redirected by wccp to the cache engine.
The basic config is below:
Router:
ip wccp web-cache
ip wccp 95
ip wccp 98
interface FastEthernet0/0
description interface to Internet
ip address 192.168.27.9 255.255.255.0
no ip redirects
ip wccp web-cache redirect out
ip wccp 98 redirect out
interface FastEthernet0/1
description intreface to internal network
ip address 192.168.160.1 255.255.255.0
ip wccp 95 redirect out
interface Content-Engine1/0
ip address 192.168.158.1 255.255.255.0
ip wccp redirect exclude in
service-module external ip address 192.168.159.1 255.255.255.0
service-module ip address 192.168.158.2 255.255.255.0
service-module ip default-gateway 192.168.158.1
On the cache engine:
http proxy incoming 8080
ftp proxy incoming 8080
https proxy incoming 8080
!
!
wccp router-list 1 192.168.160.1
wccp port-list 1 80 8080
wccp web-cache router-list-num 1
wccp custom-web-cache router-list-num 1 port 8080
wccp service-number 95 router-list-num 1 port-list-num 1 application cache hash-source-ip match-source-port
wccp version 2
wccp spoof-client-ip enable
!
proxy-protocol transparent default-server
Thanks
