topic Re: WCCP Redirect list ACL mask for WAAS in Application Networking

WCCP Redirect list ACL mask for WAAS

Paul Pinto — Fri, 15 Jan 2010 10:28:43 GMT

Good day,

I would like to conform if the following would be correct to implement for WCCP redirection list on 6500. We have over 800 branches and we also need to manage the intra-server traffic in the Data Center which we do not want to be re-directed.

ip access-list extended WCCPLIST-61
permit tcp 10.112.0.0 0.0.31.255 any

ip access-list extended WCCPLIST-62
permit tcp any 10.112.0.0 0.0.31.255

So, as an example, would these masks work for us, as the number of entries otherwise would be exhaustive.

Just want to confirm that the mask in the ACL doesn't have to match exactly.

Thanks in advance.

Re: WCCP Redirect list ACL mask for WAAS

Zach Seils — Fri, 15 Jan 2010 15:16:46 GMT

Hi Paul,

The redirect configuration you are planning to use looks fine. This will cause any TCP traffic to/from 10.112.0.0/19 to be redirected.

Regards,

Zach

Re: WCCP Redirect list ACL mask for WAAS

Paul Pinto — Mon, 18 Jan 2010 18:26:24 GMT

Hi Zach,

Thanks for the response and confirmation.

I was wanting to make sure that it is not required to have the masks match the source masks, resulting in the exhaustive list (operational nightmare).

A quick question on the ACL for WCCP redirect-list. Should we not see hits on specific entry's (e.g.permit tcp 10.113.9.0 0.0.0.31 any for the 61 redirect list, and the same for the permit tcp any 10.113.9.0 0.0.0.31 for the 62 redirect list).

If we don't, no traffic? We see flows on the branch WAE, although very few (not many users), but no hits on the ACL on the DC 6500. Is this due them being handled in hardware maybe, TCAM's?

Any input would be apprecited.

Thanks again.

Paul.

Re: WCCP Redirect list ACL mask for WAAS

Paul Pinto — Sun, 24 Jan 2010 11:22:49 GMT

OK, just had to dig around in the old filing cabinet of the mind a bit. Got the commands required and can confirm the ACL hits.

Thanks anyway.

Paul.