Re: [squid-users] WCCP configuration

Hi,

"CEF: 11336 "

Indicates that all requests ended up going direct ie the router presumed
your cache could not serve the request.

Increase debugging levels on the cache with "debug_options 80,3" and on
the cisco with debug ip wccp packets and debug ip wccp events and
monitor both.

Off the bat I'd ask why you are trying to use tproxy and wccp - my
feeling is that its somewhat self defeating, but I digress.

I feel you need an ACL that explicitly denies ANYTHING from the caches
from travelling via WCCP. eg:

ip wccp web-cache redirect-list cache-users
ip access-list extended cache-users
 deny ip host 10.1.1.20 any
permit ip any any

Where 10.1.1.20 would be the cache server.

Regards,

Regardt

viveksnv_at_aol.in wrote:
> OS - Fedor8
> Kernal - 2.6.20
> Cttproxy - 2.6.20
> Cisco Router - IOS 12.4
>
> We have compiled squid+Tproxy and it works fine. Tunelling has been
> done between the squid machine and the router. We need to configure WCCP.
>
> The WCCP config in squid:-
>
> wccp2_router xxx.xx.xxx.xxx
> wccp_version 4
> wccp2_forwarding_method 1
> wccp2_return_method 1
> wccp2_assignment_method 1
> wccp2_service dynamic 80
> wccp2_service_info 80 protocol=tcp flags=src_ip_hash priority=240
> ports=80
> wccp2_service dynamic 90
> wccp2_service_info 90 protocol=tcp flags=dst_ip_hash,ports_source
> priority=240 ports=80
>
>
> Router Eth0 - connected to lan. Eth1 - connecte to squid.
>
> Router WCCP Configuration.
>
> Eth0 - ip wccp web-cache redirect out
> ip wccp web-cache redirect in
>
> Eth1 - ip wccp redirect exclude in
>
> We tried the above commands in all combination possible, interchanging
> the commands but in vain. Internet just doesn't work in WCCP
>
> sh ip wccp
> Global WCCP information:
> Router information:
> Router Identifier: xxx.xx.xxx.x
> Protocol Version: 2.0
>
> Service Identifier: web-cache
> Number of Service Group Clients: 1
> Number of Service Group Routers: 1
> Total Packets s/w Redirected: 11336
> Process: 0
> Fast: 0
> CEF: 11336
> Redirect access-list: -none-
> Total Packets Denied Redirect: 0
> Total Packets Unassigned: 9198
> Group access-list: -none-
> Total Messages Denied to Group: 0
> Total Authentication failures: 0
> Total Bypassed Packets Received: 0
>
> Is there any simple way of configuring WCCP. We have beating round the
> bush all day long to configure wccp.
> ________________________________________________________________________
> You are invited to Get a Free AOL Email ID. - http://webmail.aol.in
>
>
Received on Wed Jan 07 2009 - 16:51:19 MST