Due to a special Branch Routing setup, where we're using DMVPN on a separate router (with a SRE module) as a backup WAN connection for a MPLS conenction, we probably need to put both WCCP redirect statements on the tunnel interface, in order to avoid multiple redirection and routing loops - e.g. :
ip address 192.168.1.1 255.255.255.0
no ip redirects
ip mtu 1440
ip nhrp >statement(s)>
tunnel source FastEthernet0/0
tunnel mode gre multipoint
tunnel key 0
tunnel protection ipsec profile cisco
ip wccp 61 redirect out
ip wccp 62 redirect in
Of course we have ip wccp redirect exclude in on the SM interface and we're running with GRE negotiated return.
Will this work without breaking the DMVPN/NHRP setup ?
Is this a supported configuration ?
Does this have a bigger impact on router performance/CPU utilization than ordinary WCCP placement (router is a C2921-WAAS-SEC/K9) ?
Yes, this kind of setup is supported and should work fine.
As far as the performance is concerned, it should not make a difference, because unlike other platforms, the 2921 router will always do the WCCP redirection in software, regardless of the redirection in which it's configured.
Where would you apply the WCCP exclude statement if your WAAS subnet is off of a layer-3 switch and you're performing WCCP on the WAN routers with 61in/62out in the WAN interface? We have sale centers hanging off of our branch router so traffic can route to the local branch or to the MPLS from the SC. Right now, we we have WCCP 61in on the LAN side and 62in on the WAN side. Would it make sense to change it to 61in/62out on the WAN interface only?
This document will provide screenshots to outline the steps to setup
TACACS+ configuration to ACI and also the configuration required on
Cisco ACS server. Please find the official Cisco guide for configuring
TACACS+ Authentication to ACI:
Is it supported or NOT supported? It's a frequently asked question.
Before APIC, release 2.3(1f), transit routing was not supported within a
single L3Out profile. In APIC, release 2.3(1f) and later, you can
configure transit routing with a single L3Out pr...
Cisco Documents are usually accurate, but when it came to the document
on Cisco APIC Signature-Based Transactions it was slightly off the mark.
This document is for those novices to API like me who cant seem to
figure out how to go about performing signat...