cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
493
Views
0
Helpful
1
Replies

transparent redirection ip spoofing

mark007uk
Level 1
Level 1

I have a problem with Cisco cache engine module nm-ce-bp in a 2811 router with ACNS 5.5 At present it is doing transparent caching .The problem is that source IP address of the packet showing up on our firewall shows as cache engine IP address instead of client IP address. I enabled ip spoofing and the firewall still shows the caching engine ip address as the source ip address

caching engine config

wccp router-list 1 10.20.0.1

wccp port-list 1 80

wccp web-cache router-list-num 1

wccp service-number 95 router-list-num 1 port-list-num 1 application cache hash-source-ip

match-source-port

wccp version 2

wccp spoof-client-ip enable

router wccp config

ip wccp 95

ip wccp web-cache

interface Ethernet1

<<<*** Interface connected to the external gateway.

ip address 10.1.1.203 255.255.255.0

ip wccp web-cache redirect out

media-type 10BaseT

!

interface Ethernet2

<<<*** Interface connected to the clients.

ip address 10.20.210.1 255.255.255.0

ip wccp 95 redirect out

media-type 10BaseT

!

interface Ethernet3

no ip address

media-type 10BaseT

!

interface Ethernet4

no ip address

shutdown

media-type 10BaseT

!

interface Ethernet5

no ip address

shutdown

media-type 10BaseT

!

interface FastEthernet0

<<<*** Interface connected to the Content Engines.

ip address 10.20.0.1 255.255.255.0

ip wccp redirect exclude in

full-duplex

!

is it possible to get the client ip address as the source ip or is this just the way transparent redirection works

cheers for any info

1 Reply 1

Zach Seils
Level 7
Level 7

Mark,

Your configuration looks correct. Is the CE by chance intercepting proxy-style requests?

Zach

Review Cisco Networking for a $25 gift card