How to configure WAAS WCCP if Layer 3 link between router and switch

[gwhuang5398]

I have a site where the LAN switch behind WAN router is a Layer 3 switch, and the link between the switch and router is now a Laye 3 link. Router will do WCCP interception, and WAE will be connected to the LAN switch. Since the swich is Layer 3 switch, so the WAE default gateway (vlan intreface) is on the switch.

I have only configured WCCP when the link between switch and router is a Layer 2 trunk, where WAE default gateway would be a router sub-inteface. How to make WCCP work between WAE and router when the link is Layer 2 instead of trunk?

Thanks a lot

[Daniel Laden]

You will want to review 'egress-method negotiated-return intercept-method wccp'. This will return all traffic to the router in a WCCP GRE tunnel.

(config) egress-method

http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v413/command/reference/glob_cfg.html#wp1241244

Configure the WAE with an IP address that is appropriate for the Switch L3 segment and use the Switch L3 interface as the default gateway.

Configure WCCP to use GRE/GRE/HASH with egress-method GRE. GRE is cpu intensive on the router so this solution may have scalability issues.

-Dan

[gwhuang5398]

Thanks a lot Dan. So with GRE tunnel as WAE egress method back to router, as long as the router has route to WAE vlan on the switch, WCCP should be fine between WAE and router. Is that correct?

Since WCCP is between router and WAE, the IOS version on the Layer 3 switch (3750, 3560, 4506, or 6509) should be irrelevant. Is that correct? Just want to make sure I don't need to do any switch IOS compatibility check for WCCP.

For the situation where the router - switch link is a Layer 2 trunk, is it still necessary to have egress method GRE on WAE? or the default method IP-forwrding?

Thanks again.

[Daniel Laden]

So with GRE tunnel as WAE egress method back to router, as long as the router has route to WAE vlan on the switch, WCCP should be fine between WAE and router. Is that correct?

-Correct.

Since WCCP is between router and WAE, the IOS version on the Layer 3 switch (3750, 3560, 4506, or 6509) should be irrelevant. Is that correct?

-Correct.

For the situation where the router - switch link is a Layer 2 trunk, is it still necessary to have egress method GRE on WAE? or the default method IP-forwrding?

-If the WAE is on a dedicated interface, Ip forward is good. If you share an interface with clients, you need GRE.

-Dan