Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

WCCP on 3560

Hi guys,

I'm trying to configure the wccp protocol on a 3560 to test a new web proxy.

According to Cisco, I should configure L2 forwarding/return with mask assignment, am I right?

So here what I did (VLAN 200 hosts the clients that I want to proxy):

ip wccp 91 redirect-list 100 password 7 blablabla

interface Vlan200
 ip address 10.10.10.1 255.255.252.0
 ip wccp 91 redirect in

access-list 100 remark ACL for WCCP proxy access
access-list 100 permit tcp 10.10.8.0 0.0.3.255 any eq www
access-list 100 permit tcp 10.10.8.0 0.0.3.255 any eq 443
access-list 100 deny   ip any any

Now, here's the output of show ip wccp:

Global WCCP information:
    Router information:
        Router Identifier:                   192.168.50.100
        Protocol Version:                    2.0

    Service Identifier: 91
        Number of Service Group Clients:     1
        Number of Service Group Routers:     1
        Total Packets s/w Redirected:        0
          Process:                           0
          CEF:                               0
        Redirect access-list:                100
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total Bypassed Packets Received:     0

And show ip wccp 91 detail:

WCCP Client information:
        WCCP Client ID:          10.10.253.5
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             L2
        Packet Return:           GRE
        Packets Redirected:    0
        Connect Time:          00:15:24
        Assignment:            MASK

        Mask  SrcAddr    DstAddr    SrcPort DstPort
        ----  -------    -------    ------- -------
        0000: 0x00000015 0x00000015 0x0000  0x0000

        Value SrcAddr    DstAddr    SrcPort DstPort CE-IP
        ----- -------    -------    ------- ------- -----
        0000: 0x00000000 0x00000000 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0001: 0x00000000 0x00000001 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0002: 0x00000000 0x00000004 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0003: 0x00000000 0x00000005 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0004: 0x00000000 0x00000010 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0005: 0x00000000 0x00000011 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0006: 0x00000000 0x00000014 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0007: 0x00000000 0x00000015 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0008: 0x00000001 0x00000000 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0009: 0x00000001 0x00000001 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0010: 0x00000001 0x00000004 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0011: 0x00000001 0x00000005 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0012: 0x00000001 0x00000010 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0013: 0x00000001 0x00000011 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0014: 0x00000001 0x00000014 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0015: 0x00000001 0x00000015 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0016: 0x00000004 0x00000000 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0017: 0x00000004 0x00000001 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0018: 0x00000004 0x00000004 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0019: 0x00000004 0x00000005 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0020: 0x00000004 0x00000010 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0021: 0x00000004 0x00000011 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0022: 0x00000004 0x00000014 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0023: 0x00000004 0x00000015 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0024: 0x00000005 0x00000000 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0025: 0x00000005 0x00000001 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0026: 0x00000005 0x00000004 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0027: 0x00000005 0x00000005 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0028: 0x00000005 0x00000010 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0029: 0x00000005 0x00000011 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0030: 0x00000005 0x00000014 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0031: 0x00000005 0x00000015 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0032: 0x00000010 0x00000000 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0033: 0x00000010 0x00000001 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0034: 0x00000010 0x00000004 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0035: 0x00000010 0x00000005 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0036: 0x00000010 0x00000010 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0037: 0x00000010 0x00000011 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0038: 0x00000010 0x00000014 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0039: 0x00000010 0x00000015 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0040: 0x00000011 0x00000000 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0041: 0x00000011 0x00000001 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0042: 0x00000011 0x00000004 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0043: 0x00000011 0x00000005 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0044: 0x00000011 0x00000010 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0045: 0x00000011 0x00000011 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0046: 0x00000011 0x00000014 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0047: 0x00000011 0x00000015 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0048: 0x00000014 0x00000000 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0049: 0x00000014 0x00000001 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0050: 0x00000014 0x00000004 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0051: 0x00000014 0x00000005 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0052: 0x00000014 0x00000010 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0053: 0x00000014 0x00000011 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0054: 0x00000014 0x00000014 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0055: 0x00000014 0x00000015 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0056: 0x00000015 0x00000000 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0057: 0x00000015 0x00000001 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0058: 0x00000015 0x00000004 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0059: 0x00000015 0x00000005 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0060: 0x00000015 0x00000010 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0061: 0x00000015 0x00000011 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0062: 0x00000015 0x00000014 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)
        0063: 0x00000015 0x00000015 0x0000  0x0000  0x0A0AFD05 (10.10.253.5)

 

As you can see, no packets are being redirected. I also noticed a couple of issues:

1) Router ID is set to a loopback address and not the ip set on VLAN 301 (it's 10.10.253.252). We use that loopback for bgp/ospf routing

2) Probably because of that, the client sets GRE as return mode, because it's ttrying to route the packet to a different network ip and not the connected one.

Still, the output is telling me "Usable"... so why it's not redirecting packets??

Any suggestion?

PS

On my 3560, the command ip wccp source-interface is unknown, so I'm not able to force the WCCP Router ID...

 

Best regards

Dario

Everyone's tags (1)
44
Views
0
Helpful
0
Replies
CreatePlease to create content