Hi Rene
We have issues setting this WCCP up with vlan’s on a CISCO887VA with Adv IP services IOS and a GNU/Linux machine with squid, is our config correct when applying the ip wccp cmd’s to the vlan ?
interface Vlan10
description finance
ip address 192.168.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
interface Vlan20
description warehouse
ip address 192.168.20.1 255.255.255.0
ip wccp web-cache redirect in
ip nat inside
no ip virtual-reassembly in
!
interface Vlan30
description office
ip address 192.168.30.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
access-list 10 permit 192.168.0.0 0.0.0.255
access-list 10 permit 192.168.10.0 0.0.0.255
access-list 10 permit 192.168.20.0 0.0.0.255
access-list 10 permit 192.168.30.0 0.0.0.255
access-list 80 permit 192.168.0.203
access-list 120 remark ACL for WCCP proxy access
access-list 120 remark Squid proxies bypass WCCP
access-list 120 deny ip host 192.168.0.203 any
access-list 120 remark LAN clients proxy port 80 only
access-list 120 permit tcp 192.168.20.0 0.0.0.255 any eq www
access-list 120 remark all others bypass WCCP
access-list 120 deny ip any any
Our tunnel is up but we cannot ping the other side of the tunnel …
Our show interface output :
VDSL4#show interfaces tunnel 1
Tunnel1 is up, line protocol is up
Hardware is Tunnel
Interface is unnumbered. Using address of Vlan20 (192.168.20.1)
MTU 17912 bytes, BW 10000 Kbit/sec, DLY 50000 usec,
reliability 255/255, txload 1/255, rxload 1/255
Encapsulation TUNNEL, loopback not set
Keepalive not set
Tunnel source 192.168.30.1
Tunnel protocol/transport multi-GRE/IP
Key disabled, sequencing disabled
Checksumming of packets disabled
Tunnel TTL 255, Fast tunneling enabled
Tunnel transport MTU 1472 bytes
Tunnel transmit bandwidth 8000 (kbps)
Tunnel receive bandwidth 8000 (kbps)
Last input never, output never, output hang never
Last clearing of "show interface" counters 00:13:40
Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
Queueing strategy: fifo
Output queue: 0/0 (size/max)
What is the difference between the ip of “tunnel source” and “Interface is unnumbered” ip address ? How to modify these ip’s?
We got to ping between the two hosts. What are we doing wrong? Is it necessary to apply a route?
Our show ip wccp cmd output :
VDSL4#show ip wccp
Global WCCP information:
Router information:
Router Identifier: 192.168.30.1
Service Identifier: web-cache
Protocol Version: 2.00
Number of Service Group Clients: 1
Number of Service Group Routers: 1
Total Packets Redirected: 821
Process: 0
CEF: 821
Service mode: Open
Service Access-list: -none-
Total Packets Dropped Closed: 0
Redirect access-list: 120
Total Packets Denied Redirect: 0
Total Packets Unassigned: 0
Group access-list: -none-
Total Messages Denied to Group: 0
Total Authentication failures: 0
Total GRE Bypassed Packets Received: 0
Process: 0
CEF: 0
GRE tunnel interface: Tunnel0
VDSL4#show ip wccp web-cache detail
WCCP Client information:
WCCP Client ID: 192.168.0.203
Protocol Version: 2.00
State: Usable
Redirection: GRE
Packet Return: GRE
Assignment: HASH
Connect Time: 00:32:09
Redirected Packets:
Process: 0
CEF: 929
GRE Bypassed Packets:
Process: 0
CEF: 0
Hash Allotment: 256 of 256 (100.00%)
Initial Hash Info: 00000000000000000000000000000000
00000000000000000000000000000000
Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
It is quite confusing to get this work …