NME-WAE-502 wccp config example?

[scott.hammond]

I have a branch deployed with an appliance using WCCP and I just purchased a module for a smaller site. I am having trouble equating my appliance wccp config over to the module. Read all the white papers but I am missing something really simple.

In the appliance deployment I have a subinterface on my router with a dedicated segment for the appliance (lets say .1 on the router and .5 on the appliance)

On the module I am not able to give the IN 1/0 interface an IP on the same segment as my subinterface, hence my confusion. none of the documents I have read really address the config to that level of detail (IP schemes)

I have given the module a dummy IP and its configured other than the fact that im not sure how to IP it vs the router to get the traffic to flow properly.

a config example would be greatly appreciated.

Thanks,

-Scott

[ahskhan · Accepted solution]

Hi,

Please see below example from a LAB.

Building configuration...

Current configuration : 284 bytes
!
interface Integrated-Service-Engine2/0
ip address 172.16.12.1 255.255.255.0
ip wccp redirect exclude in
service-module ip address 172.16.12.10 255.255.255.0
!Application: Restarted at Tue Dec  7 18:56:10 2010
service-module ip default-gateway 172.16.12.1
no keepalive

WCCP Configuration:

ip wccp 61
ip wccp 62

WCCP redirect on interface:    <---- (LAN Interface)

Current configuration : 151 bytes
!
interface GigabitEthernet0/0.140
encapsulation dot1Q 140
ip address 172.16.4.1 255.255.255.0
ip wccp 61 redirect in
ip wccp 62 redirect out
end

Note: When applying WCCP redirect, please confirm if redirect "out" is supported. on IOS router it works fine, however switches like 45K do not have support for it.

Hope this helps.

[scott.hammond]

that makes sense. Looks like I dont need a dedicated sub-interface in this style deployment, I can just use my normal data interface and define all the waas specific stuff on the module.

I dont have a redirect in and out on my ethernet in my existing appliance deployment. I have "in" on the LAN and the "out" statements on the WAN interfaces.

Is that acceptable? (im guessing your lab router is strictly ethernet connected)

[ahskhan]

Hi,

     In the LAB my WAN and LAN both are Gig interface / Sub interface. You can either have 61/62 redirect in/out on same interface OR 61 redirect in on LAN and 62 redirect in on WAN. Important thing is to have both 61 and 62 services applied on the router so we can intercept complete TCP flow. Thanks.

Ahsan

[scott.hammond]

Here is the router using wccp with the appliance, see if this looks okay.

ip wccp 61 redirect-list 111
ip wccp 62 redirect-list 111

!

interface Multilink1
bandwidth 3072
ip address x.x.x.x 255.255.255.252
ip wccp 62 redirect in
no peer neighbor-route
ppp chap hostname p1672490-1810058
ppp multilink
ppp multilink group 1
ppp multilink fragment disable
!
service-policy output wanQOS
!
interface GigabitEthernet0/0
description DATA
ip address 10.75.121.3 255.255.255.0
ip helper-address 10.60.6.119
ip wccp 61 redirect in
ip flow ingress
duplex auto
speed auto
standby 0 ip 10.75.121.1
standby 0 priority 110
standby 0 preempt
!
!
interface GigabitEthernet0/0.74
description waas

encapsulation dot1Q 74
ip address 10.74.121.2 255.255.255.0
ip helper-address 10.60.6.119
ip wccp redirect exclude in
ip flow ingress
standby 0 ip 10.74.121.1
standby 0 priority 110
standby 0 preempt
!
interface GigabitEthernet0/0.76
description VOICE

encapsulation dot1Q 76
ip address 10.76.121.3 255.255.255.0
ip helper-address 10.60.6.119
ip wccp redirect exclude in
ip flow ingress
standby 0 ip 10.76.121.1
standby 0 priority 110
standby 0 preempt

access-list 111 deny   ip 10.60.200.0 0.0.0.255 any <--callmanager segment
access-list 111 deny   ip 10.76.0.0 0.0.255.255 any
access-list 111 permit ip any any

[ahskhan]

Hi,

  WCCP configuration looks OK for appliance. Once you have NME installed you my shutdown / remove interface GigabitEthernet0/0.74 and replace it with NME configuration posted before. Thanks.

Ahsan

[scott.hammond]

got it.

My only question is the wccp router-list string....

in the appliance it points to the sub-interface, so in the module it will point to the IN 1/0 interface?

[ahskhan]

Hi,

  This is correct, router-list should point to service-module IP (int 1/0) when using NME. Thanks.

Ahsan

[scott.hammond]

thanks for the help