Re: [squid-users] problem with wccp v2 and cisco

On Mon, Feb 25, 2008, Manoj_Rajkarnikar wrote:

> I have much simpler setup working on CentOS x86_64 2.6.23 and cisco
> 7204VXR IOS version 12.2(46a). squid version 2.6 STABLE17:

Which IOS release specifically? Could you throw me a "show version" ?
I'll start a wiki page with "known good" versions of IOS that work with
Squid.

(And those of you who are running Squid+WCCPv2, please fire off your
 "show version" and "show ip wccp" related outputs so I can update
 the list.)

Thanks!

Adrian

>
> * recompile kernel with CONFIG_NET_IPGRE=m
> * compile squid with wccpv2 support
> * setup gre0 interface with some unused private IP assigned to it
> * intercept in iptables :-
> iptables -t nat -A PREROUTING -i gre0 -p tcp -m tcp --dport 80 -j REDIRECT
> --to-port 3128
>
> As Henrik suggested me during this setup, IPGRE module in kernel
> automatically decapsulates the gre packets on the gre0 interface and it
> has been doing it so far.
>
> gre0 Link encap:UNSPEC HWaddr
> 00-00-00-00-FF-F8-00-00-00-00-00-00-00-00-00-00
> inet addr:192.168.172.2 Mask:255.255.255.252
> UP RUNNING NOARP MTU:1476 Metric:1
> RX packets:1970129052 errors:0 dropped:0 overruns:0 frame:0
> TX packets:0 errors:3666 dropped:0 overruns:0 carrier:0
> collisions:3666 txqueuelen:0
> RX bytes:305795313631 (284.7 GiB) TX bytes:0 (0.0 b)
>
> [root@dns2 ~]# cat /etc/sysconfig/network-scripts/ifcfg-gre0
> DEVICE=gre0
> BOOTPROTO=static
> BROADCAST=192.168.172.3
> IPADDR=192.168.172.2
> NETMASK=255.255.255.252
> NETWORK=192.168.172.0
> ONBOOT=yes
> TYPE=Ethernet
>
>
> This setup has been working nicely for me.
>
>
> Manoj
> >
> >
> >
> >Adrian
> >
>
> --

-- 
- Xenion - http://www.xenion.com.au/ - VPS Hosting - Commercial Squid Support -
- $25/pm entry-level VPSes w/ capped bandwidth charges available in WA -