How can i configure to redirect non-http traffic to CE?

[johnyoon75]

How can i configure to redirect non-http traffice to CE?

I alrealy searched Cisco Web. but i couldn't find to configure in the Cat6500.

I found some satements about that.

I have to configure Wccp version 2 and configure service number 98 in order to redirect web traffic doesn't use standard port such as 80 port.

But i couldn't find how to redrect other port such as ftp..something like that...

Do you have a good idea?

Have a nice day.

[jfoerster]

HI,

First of all make sure that the CAT supports WCCP. I.e. the SUP720 does, as far as I know ,not support WCCP. If it supports WCCP you've to configure sercie-number 60 the CAT and on the CE you can just enter wccp ftp router-list x. For some specific protocols the CE uses some special service-numbers but if you configure the well known ones on the CE the CE tells you what to configure on the router.

If you configure an other protocol you've to use access-lists on the rotuer side. More details are given at http://www.cisco.com/en/US/customer/products/hw/switches/ps708/products_configuration_guide_chapter09186a00800da707.html.

Hope that answers your question.

Kind regards,

Joerg

[johnyoon75]

Exactly right.

The Cat with sup720 does not support wccp.

Acually, i'm curious about that.

Anyway...

What't the mean service-number 60?

I konw another service-number as below..

0 Web cache

50 Boomerang

80 HTTP, RTSP

81 MMST

82 MMSU

90-97 User-configurable

98 Custom

99 Reverse proxy

These are posted at Cisco Web site.

Then... what kind service-number exsit except right above the list?

And, please tell me detail configuration about ftp or protocol does not use regular tcp/udp port.

[jfoerster]

HI,

the Cisco-SE is right. That's the way to do it.

If you use a well known service of the CE the CE tells you what you've to configure on the router!!

In regards of the Sup720 thingy I found a link in another posting stating that WCCP is not supported http://www.cisco.com/en/US/products/hw/switches/ps708/prod_bulletin09186a00801599bc.html

Regards,

Joerg

[mvoight]

Johnny,

What information are you looking for?

You can only make definitions for services 90-97.

What kind of traffic are you trying to redirect to the CE via WCCP? Service 60 is used for ftp.

The 5.1 Release Notes decribe this at

http://www.cisco.com/en/US/products/sw/conntsw/ps491/prod_release_note09186a00801cd957.html#wp114609

Look for the section on "Native FTP Caching Support"

On the CE, you configure "wccp ftp". On the router, you refer to it as service 60.

Note. the 5.1 release notes indicate there are changes to the 5.1 documentation.

[johnyoon75]

I'm gonna redirect several traffics such as 80, 8080, ftp, and port-based traffics.

I'm looking for sample configuration on Cat6500 or Router.

Do i have to configure "wccp 0", "wccp 60", "wccp 90-97", :wccp 98" specific interface at the same time?

wccp 0 is for nomal http

wccp 60 is for ftp

wccp 90-97 are for port-based application

wccp 98 is for non-normal http

I'm confused...

Thank you for helping...

Have a nice day.

[mvoight]

Yes, you would configure each of the desired services on the router globally and then put a wccp redirect in (or out) for each service on the appropriate interface or vlan. You would do this similar to the same way the release notes tell you how to configure native ftp redirection.

However, I am not sure what you mean by using services 90-97 for "port-base application". The WCCP protocol permits redirection for more applications than are supported by the Cisco Content Engine. So, if you want to redirect applcations via WCCP to a CE, they must be applications supported by the CE.

[mvoight]

You would just create other services and specify the port(s) in the port list for that service. Of course, the Caching device would have to be able to support the redirected traffic. For instance, CE requires ACNS 5.1 to support redirected normal ftp traffic. Prior to that the WCCP redirected traffic had to be ftp over http.

For HTTPS, the CE would just tunnel the traffic between client and server, unless you install the server's certificate on the CE. Other traffic types would be dropped.