Wacky integration of PIX,Content engine and router

[nomanbari]

Dear All,

I have got a situation...The situation is

that I have a pix515e, Content Engine and

Cisco 2620xm router...The 3 attachments contain each of the systems configuration..They are arranged in the following way..

There is a 192.168.0.0 network ID running on the PIX inside network which is getting translated by pix to 172.16.1.11-172.16.2.254. The e0 of pix has got an IP address of 172.16.1.7. PIX firewall's gateway is the router's ethernet interface which is 172.16.1.3. I have allowed tcp etc traffic for the inside network.

After PIX there is a content engine 565A which is getting connected via its gigabit interface with IP address of 172.16.1.2 to the network with wccp config.

The router is running 172.16.1.3 on its ethernet interface with the wccp configuration on WAN facing interface..

The problem is that I am able to access the Internet from inside of the PIX.. The PIX is translating perfectly...When the traffic reaches the router, it also translates into public addresses perfectly..The user's are accessing Internet without any problem..and i can see the nat maintained on router and pix..

But the problem is that when i write sh wccp gre on content engine, it doesn't show any activity..This is the problem that content engine is not responding the way it should..

Right now I am lost why the CE isn't working... If anyone has faced this scenerio before then any help will be greatly appreciated...

Hoping for a response which resolves this...

Regards,

Noman Bari

[jfoerster]

HI,

first of all verify if the CE can reach the router and if the WCCP (GRE tunneling) is up (show wccp routers etc.)

Afterwards verify if the PIX is blocking/dropping anything.

Kind Regards,

Joerg

[nomanbari]

Dear Joerg,

Thank you for your response... That night when I had posted my request for help, I went back to my hotel room, took a shower and focused on CE and router communication and what was configured on them (by some another consultant)...

And then it struck to me that wccp was never enabled on the router in the global config(see the router config in my 1st posting)... once this glitch was removed, everthing now works .. This was never a pix issue bcuz I could see that it was working the way its suppose to work,xlating was happening, people were surfing the web and stuff but the show commands on CE and router weren't showing any activity..

The following link on configuring Cisco Cache Software helped me enormously and I recommend to everyone working on CE..

http://www.cisco.com/en/US/products/sw/conntsw/ps547/products_configuration_guide_book09186a0080087140.html

Through this process I learned a very important lesson though...when you are troubleshooting a problem, never trust the configurations that have been done by the guy before you...start everything from the scratch by going through the documentation..

and ofcourse this extremely useful Cisco Forum also...

Regards,

Noman Bari