I have two different locations (Site-A and Site-B) and i am trying to implement WAAS. In my design I placed the WAE devices (CM, core, edge) on different vlans and connected them physically to subinterfaces of the related ASA firewall on each site.
For my WAE devices the gateway is the related subinterface of the firewalls and the edge routers are the next hop. All WAE devices can communicate with each other. in the diagnostics tests all pass except the WCCP fail.
For WCCP test i am getting the following error message:
WARN BAD_WCCP_RTR WAE does not see router 10.10.10.1
Recommendation: Check if WCCP router address is correct, reachable and configured to use WCCP.
FAIL NO_WCCP_RTRS Device does not see any of WCCP routers
10.10.10.1 is the gateway for the WAE and it is the subinterface on the firewall.
I enabled WAAS inspection on the ASA firewalls. Do i need to add the routers to the WAE devices and enable wccp on the routers which are the next hop for my wae devices?
As i mentioned above i placed the WAE devices on one of the subinterface of the related firewall and then i have the routers after the firewall as a next hop.
Is that a correct design or i have to place the WAE devices between the firewall and the edge routers?
Thank you for your kind advice and assistance.
Thanks for your kind reply.
on the ASA the WCCP is enabled but on the remote site i have the edge WAE and the clients on different subinterfaces and vlans. in HQ i have the core WAE and the servers on different subisterfaces and vlans.
In the link above it says:
"WCCP redirect is supported only on the ingress of an interface. The only topology that the security appliance supports is when client and cache engine are behind the same interface of the security appliance and the cache engine can directly communicate with the client without going through the security appliance. "
does it mean that I have to put the edge WAE on the same vlan with the clients and the core WAE with the servers vlan?
Are you trying to use WCCP on the ASA to redirect traffic to WAAS? If so, the WCCP implementation in ASA is not compatible with WCCP on WAAS.
The biggest issue is that the WCCP implementation in ASA does not support WCCP services that preserve the client IP address.
true, i am trying to use WCCP on the ASA to redirect the traffic to WAAS.
Instead of connecting the WAAS device to the edge router I connected it to the ASA and trying to do the redirection (the router is the next hop).
If the WCCP implementation in ASA is not compatible with WCCP on WAAS then i should change my design and connect the WAAS to the router, not to the ASA.
Is that the case?
Hi Zach, I'm starting with a WAAS labo, I'm using a WAE-502 module which is embedded on the 2811 router, i'm confused especially the concept of subinterfaces. I understand when the WAAS is an external appliance connected to the router, but what happens when the card is embedded?
What is the right way to configure the integrated-service-modulo with a subinterface?
Thanks a lot for your help