Cisco WCCP Squid Transparent Proxy

Hi Rene

We have issues setting this WCCP up with vlan’s on a CISCO887VA with Adv IP services IOS and a GNU/Linux machine with squid, is our config correct when applying the ip wccp cmd’s to the vlan ?

interface Vlan10
 description finance
 ip address 192.168.10.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in
interface Vlan20
 description warehouse
 ip address 192.168.20.1 255.255.255.0
 ip wccp web-cache redirect in
 ip nat inside
 no ip virtual-reassembly in
!
interface Vlan30
 description office
 ip address 192.168.30.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly in


access-list 10 permit 192.168.0.0 0.0.0.255
access-list 10 permit 192.168.10.0 0.0.0.255
access-list 10 permit 192.168.20.0 0.0.0.255
access-list 10 permit 192.168.30.0 0.0.0.255
access-list 80 permit 192.168.0.203
access-list 120 remark ACL for WCCP proxy access
access-list 120 remark Squid proxies bypass WCCP
access-list 120 deny   ip host 192.168.0.203 any
access-list 120 remark LAN clients proxy port 80 only
access-list 120 permit tcp 192.168.20.0 0.0.0.255 any eq www
access-list 120 remark all others bypass WCCP
access-list 120 deny   ip any any

Our tunnel is up but we cannot ping the other side of the tunnel …

Our show interface output :

VDSL4#show interfaces tunnel 1
Tunnel1 is up, line protocol is up
  Hardware is Tunnel
  Interface is unnumbered. Using address of Vlan20 (192.168.20.1)
  MTU 17912 bytes, BW 10000 Kbit/sec, DLY 50000 usec,
     reliability 255/255, txload 1/255, rxload 1/255
  Encapsulation TUNNEL, loopback not set
  Keepalive not set
  Tunnel source 192.168.30.1 
  Tunnel protocol/transport multi-GRE/IP
    Key disabled, sequencing disabled
    Checksumming of packets disabled
  Tunnel TTL 255, Fast tunneling enabled
  Tunnel transport MTU 1472 bytes
  Tunnel transmit bandwidth 8000 (kbps)
  Tunnel receive bandwidth 8000 (kbps)
  Last input never, output never, output hang never
  Last clearing of "show interface" counters 00:13:40
  Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
  Queueing strategy: fifo
  Output queue: 0/0 (size/max)

What is the difference between the ip of “tunnel source” and “Interface is unnumbered” ip address ? How to modify these ip’s?

We got to ping between the two hosts. What are we doing wrong? Is it necessary to apply a route?

Our show ip wccp cmd output :

VDSL4#show ip wccp
Global WCCP information:
    Router information:
        Router Identifier:                   192.168.30.1

    Service Identifier: web-cache
        Protocol Version:                    2.00
        Number of Service Group Clients:     1
        Number of Service Group Routers:     1
        Total Packets Redirected:            821
          Process:                           0
          CEF:                               821
        Service mode:                        Open
        Service Access-list:                 -none-
        Total Packets Dropped Closed:        0
        Redirect access-list:                120
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total GRE Bypassed Packets Received: 0
          Process:                           0
          CEF:                               0
        GRE tunnel interface:                Tunnel0
VDSL4#show ip wccp web-cache detail
WCCP Client information:
        WCCP Client ID:          192.168.0.203
        Protocol Version:        2.00
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Connect Time:            00:32:09
        Redirected Packets:
          Process:               0
          CEF:                   929
        GRE Bypassed Packets:
          Process:               0
          CEF:                   0
        Hash Allotment:          256 of 256 (100.00%)
        Initial Hash Info:       00000000000000000000000000000000
                                 00000000000000000000000000000000
        Assigned Hash Info:      FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

It is quite confusing to get this work …