waas configuration with NME

robertsoto · ‎05-11-2011

I have a branch deployed with an appliance using WCCP and I just purchased a module for a smaller site. I am having trouble equating wccp config over to the module. Read all the white papers but I am missing something really simple.

I will apreciate to help me about this issue, I have two week with the same issue.

I send the configuration the remote BRANCH and the topology..

I wait for your coments , specially with the words marks.

ip wccp 61 redirect-list CRONOS
ip wccp 62

interface Loopback1
description Loopback BGP
ip address 192.168.249.8 255.255.255.255
!
interface GigabitEthernet0/0
description Interface LAN
ip address 192.168.161.4 255.255.255.0
no ip proxy-arp
ip accounting output-packets
ip wccp 61 redirect in
ip wccp 62 redirect out
ip route-cache flow
duplex auto
speed auto
standby 1 ip
standby 1 priority 220
standby 1 preempt
service-policy input LAN-PANA2-MARQ
service-policy output WAN-PANA2-QOS
!
interface GigabitEthernet0/1
description ENLACE TLC_ASB_50
ip address 192.168.167.13 255.255.255.252
no ip proxy-arp
duplex auto
speed auto
service-policy input LAN-PANA2-MARQ
!
interface Serial0/0/0
description Enlace a PERU
bandwidth 2048
ip address 192.168.114.9 255.255.255.252
ip accounting output-packets
ip wccp 61 redirect in
ip wccp 62 redirect in
ip flow ingress
ip flow egress
encapsulation ppp
load-interval 30
shutdown
!
interface Serial0/0/1
no ip address
shutdown
clock rate 2000000
!
interface Integrated-Service-Engine1/0
ip address 192.168.165.129 255.255.255.128
ip wccp redirect exclude in
service-module ip address 192.168.165.140 255.255.255.128
service-module ip default-gateway 192.168.165.129
no keepalive
!
router eigrp 12
redistribute static
redistribute bgp 250 metric 10000000 1 255 255 1500
network 192.168.161.0
network 192.168.167.12 0.0.0.3
network 192.168.249.0
no auto-summary
!
!
!
ip flow-cache timeout active 1
ip flow-export source Loopback1
ip flow-export version 9
ip flow-export destination 130.1.8.30 2055

p access-list extended CRONOS
permit ip host 192.168.161.13 192.168.112.0 0.0.0.255
permit ip host 192.168.161.16 192.168.112.0 0.0.0.255
permit ip host 192.168.161.23 192.168.112.0 0.0.0.255
permit ip host 192.168.161.91 192.168.112.0 0.0.0.255
permit ip host 192.168.161.71 192.168.112.0 0.0.0.255
permit ip host 192.168.161.72 192.168.112.0 0.0.0.255
permit ip host 192.168.161.76 192.168.112.0 0.0.0.255
permit ip host 192.168.161.77 192.168.112.0 0.0.0.255!

Regards,

Daniel Arrondo Ostiz · ‎05-12-2011

Hi Robert,

There is no real different between having an NME or an external WAE directly connected. Just consider the NME as a WAE directly connected on the Integrated-Service-Engine interface.

With that said, you considered too many WCCP redirection statements that will probably end up in a redirection loop. Normally, one of the following aproaches is taken:

Inbound redirection for one service on the WAN interface and inbound redirection for the other service on the LAN interface
Inbound redirection for one service and outbound for the other in the WAN interface
Inbound redirection for one service and outbound for the other in the LAN interface

Apart from this, there is another thing you should take into account. You always want to redirect both directions of the traffic, so, if you use a redirect list for one of the services, for the other one you should use another redirect list with the statements swapped.

Regards

Daniel

robertsoto · ‎05-12-2011

Daniel,

I send a topology, for your opinio and best practice the how configurate the WAAS in WCCP.

I hope your help for this issue,

It posible to configure this command in the router WAN (ip wccp 62 redirect in) and the router WAAS ((ip wccp 62 redirect out , (ip wccp 61 redirect in)?.

Or I need more commands for this configuration.

Yesterday I sent the configuration the R1, today I send you agein.

ip wccp 61 redirect-list CRONOS

ip wccp 62

!

interface Loopback1

description Loopback BGP

ip address 192.168.249.8 255.255.255.255

!

interface GigabitEthernet0/0

description Interface LAN

ip address 192.168.161.4 255.255.255.0

no ip proxy-arp

ip accounting output-packets

ip wccp 61 redirect in

ip wccp 62 redirect out

ip route-cache flow

duplex auto

speed auto

standby 1 ip

standby 1 priority 220

standby 1 preempt

service-policy input LAN-PANA2-MARQ

service-policy output WAN-PANA2-QOS

!

interface GigabitEthernet0/1

description ENLACE TLC_ASB_50

ip address 192.168.167.13 255.255.255.252

no ip proxy-arp

duplex auto

speed auto

service-policy input LAN-PANA2-MARQ

!

interface Serial0/0/0

description Enlace a PERU

bandwidth 2048

ip address 192.168.114.9 255.255.255.252

ip accounting output-packets

ip wccp 61 redirect in

ip wccp 62 redirect in

ip flow ingress

ip flow egress

encapsulation ppp

load-interval 30

shutdown

!

interface Serial0/0/1

no ip address

shutdown

clock rate 2000000

!

interface Integrated-Service-Engine1/0

ip address 192.168.165.129 255.255.255.128

ip wccp redirect exclude in

service-module ip address 192.168.165.140 255.255.255.128

service-module ip default-gateway 192.168.165.129

no keepalive

I wait your answers,

Thanks

Best Regards,

Daniel Arrondo Ostiz · ‎05-13-2011

Hi Robert,

I'm sorry but I don't understand what you are asking now. Can you please be more specific?

Daniel

robertsoto · ‎05-13-2011

Dear, Daniel.

My question is : It´s correct to configurate los "ip wccp" in the interfaces agree the topology?. Yesterday I sent a topology, please you should check this file.

I willl to apreciate your answers and thanks for your help.

Best Regards,

Robert Soto.

De acuerdo al grafico adjunto, te agradeceria por favor tu opion, si esta bien si los comandos los configuro como se muestra en el graifco.

Gracias,

Daniel Arrondo Ostiz · ‎05-16-2011

Hi Robert,

The configuration you sent is the original one, which indicates that you ignored my first reply in which I already told you the configuration was wrong.

Please, review my first answer and let me know if you need further clarification. I'll be happy to answer any questions you have, but I'm not goint to provide you a full configuration, among other reasons, because I don't know your exact requirements.

Regards

Daniel

robertsoto · ‎05-16-2011

Daniel,

The last Friday I sent a topology and I need to know if you see this file, because In this file I sent my topology agree your answer, but I want to know if OK,

I will apreciate your answer,

Best Regards,

Robert Soto