Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

WCCP redirect's on DMVPN tunnel interfaces?


Due to a special Branch Routing setup, where we're using DMVPN on a separate router (with a SRE module) as a backup WAN connection for a MPLS conenction, we probably need to put both WCCP redirect statements on the tunnel interface, in order to avoid multiple redirection and routing loops - e.g. :

interface Tunnel0

ip address

no ip redirects

ip mtu 1440

ip nhrp >statement(s)>

tunnel source FastEthernet0/0

tunnel mode gre multipoint

tunnel key 0

tunnel protection ipsec profile cisco

ip wccp 61 redirect out

ip wccp 62 redirect in


Of course we have ip wccp redirect exclude in on the SM interface and we're running with GRE negotiated return.

  1. Will this work without breaking the DMVPN/NHRP setup ?
  2. Is this a supported configuration ?
  3. Does this have a bigger impact on router performance/CPU utilization than ordinary WCCP placement (router is a C2921-WAAS-SEC/K9) ?

Thanks in advance

Best regards


Cisco Employee

WCCP redirect's on DMVPN tunnel interfaces?

Hi Finn,

Yes, this kind of setup is supported and should work fine.

As far as the performance is concerned, it should not make a difference, because unlike other platforms, the 2921 router will always do the WCCP redirection in software, regardless of the redirection in which it's configured.

I hope this helps


WCCP redirect's on DMVPN tunnel interfaces?

Hi Daniel,

Thanks for your fast response.


New Member

WCCP redirect's on DMVPN tunnel interfaces?

Hello Daniel

Where would you apply the WCCP exclude statement if your WAAS subnet is off of a layer-3 switch and you're performing WCCP on the WAN routers with 61in/62out in the WAN interface? We have sale centers hanging off of our branch router so traffic can route to the local branch or to the MPLS from the SC. Right now, we we have WCCP 61in on the LAN side and 62in on the WAN side. Would it make sense to change it to 61in/62out on the WAN interface only?

Cisco Employee

WCCP redirect's on DMVPN tunnel interfaces?

Hi John,

If your WAE is L3 away from your router, the "redirect exclude-in" command needs to be added in the interface through which the traffic from the WAE is arriving.

By the way, for the future, if the question is not related to the previous one, it would be better to open a separate thread to keeps things clear.



CreatePlease to create content