topic Re: Only 'web-cache' gets redirected - no other service groups.. in Application Networking

Only 'web-cache' gets redirected - no other service groups...

jkeeffe — Thu, 24 Jun 2004 18:21:02 GMT

I have a Netcache configured for transparent caching for port 80 and 443. The Netcahce IP is 164.72.49.253. We have a 6509, sup720 IOS. 12.2(17a)SX3, configured to redirect web-cache and 1 to the Netcache. Here is the config:

ip wccp web-cache

ip wccp 1

The 6509 interface that controls the subnet the netcache is on is configured thus:

interface Vlan1

ip address 164.72.49.131 255.255.255.128

ip wccp web-cache redirect out

ip wccp 1 redirect out

We have a PC on another subnet connected to the 6509 that we are using to test the config, and we can only get port 80 to be redirected to the Netchace. HTTPS port 443 never gets redirected. Service group 1 is configed on the Netcache as tcp port 443.

Here is the output of 'sh ip wccp':

ENGLAB-6513-Native#sh ip wccp

Global WCCP information:

Router information:

Router Identifier: 164.72.232.1

Protocol Version: 2.0

Service Identifier: web-cache

Number of Cache Engines: 1

Number of routers: 1

Total Packets Redirected: 3431

Redirect access-list: -none-

Total Packets Denied Redirect: 0

Total Packets Unassigned: 0

Group access-list: -none-

Total Messages Denied to Group: 0

Total Authentication failures: 0

Service Identifier: 1

Number of Cache Engines: 1

Number of routers: 1

Total Packets Redirected: 0

Redirect access-list: -none-

Total Packets Denied Redirect: 0

Total Packets Unassigned: 0

Group access-list: -none-

Total Messages Denied to Group: 0

Total Authentication failures: 0

ENGLAB-6513-Native#sh ip wccp 1 detail

WCCP Cache-Engine information:

Web Cache ID: 164.72.49.253

Protocol Version: 2.0

State: Usable

Redirection: GRE

Packet Return: GRE

Assignment: HASH

Initial Hash Info: 00000000000000000000000000000000

00000000000000000000000000000000

Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Hash Allotment: 256 (100.00%)

Packets Redirected: 0

Connect Time: 00:33:23

ENGLAB-6513-Native#sh ip wccp web-cache detail

WCCP Cache-Engine information:

Web Cache ID: 164.72.49.253

Protocol Version: 2.0

State: Usable

Redirection: GRE

Packet Return: GRE

Assignment: HASH

Initial Hash Info: 00000000000000000000000000000000

00000000000000000000000000000000

Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Hash Allotment: 256 (100.00%)

Packets Redirected: 2911

Connect Time: 23:37:29

What would cause the router to no redirect service-group 1 packets to the Netcache?

Re: Only 'web-cache' gets redirected - no other service groups..

jfoerster — Fri, 25 Jun 2004 08:21:09 GMT

HI,

the IOS has some predefined service for WCCP. Give it a try using ip wccp 70 and define service group 70 for https on your netcache.

cheers,

Joerg

Re: Only 'web-cache' gets redirected - no other service groups..

Gilles Dufour — Fri, 25 Jun 2004 10:26:19 GMT

The sup720 does not support wccp yet.

The commands are available and some functionalities may work but currently the sup720 does not support wccp.

http://www.cisco.com/en/US/products/hw/switches/ps708/prod_bulletin09186a00801599bc.html

Regards,

Gilles.

Re: Only 'web-cache' gets redirected - no other service groups..

jfoerster — Fri, 25 Jun 2004 12:48:05 GMT

Hi Gilles,

I missed that one 😞 But would it be possible to use a self customized wccp group in the way he described it or do i have to use the predefinied ones. I had trouble with selfdefined groups using ftp on a normal router. After i found out, that a certain wccp group is predefined it worked properly.

Cheers,

Joerg

Re: Only 'web-cache' gets redirected - no other service groups..

jkeeffe — Fri, 25 Jun 2004 15:59:48 GMT

Thanks for info.

Do you know when WCCP will be supported on the Sup720?

Re: Only 'web-cache' gets redirected - no other service groups..

Gilles Dufour — Sat, 26 Jun 2004 07:50:32 GMT

FTP is a special case I would say due to its nature of a separate data/control channels.

I used self defined groups to intercept various tcp port and it always worked.

Another thing to check is if the router supports selfdefined groups - ie: the 3550 only supports webcache - nothing else.

Regards,

Gilles.