WCCP redirect's on DMVPN tunnel interfaces?

[finn.poulsen]

Hi,

Due to a special Branch Routing setup, where we're using DMVPN on a separate router (with a SRE module) as a backup WAN connection for a MPLS conenction, we probably need to put both WCCP redirect statements on the tunnel interface, in order to avoid multiple redirection and routing loops - e.g. :

interface Tunnel0

ip address 192.168.1.1 255.255.255.0

no ip redirects

ip mtu 1440

ip nhrp >statement(s)>

tunnel source FastEthernet0/0

tunnel mode gre multipoint

tunnel key 0

tunnel protection ipsec profile cisco

ip wccp 61 redirect out

ip wccp 62 redirect in

exit

Of course we have ip wccp redirect exclude in on the SM interface and we're running with GRE negotiated return.

1. Will this work without breaking the DMVPN/NHRP setup ?
2. Is this a supported configuration ?
3. Does this have a bigger impact on router performance/CPU utilization than ordinary WCCP placement (router is a C2921-WAAS-SEC/K9) ?

Thanks in advance

Best regards

Finn

[Daniel Arrondo Ostiz]

Hi Finn,

Yes, this kind of setup is supported and should work fine.

As far as the performance is concerned, it should not make a difference, because unlike other platforms, the 2921 router will always do the WCCP redirection in software, regardless of the redirection in which it's configured.

I hope this helps

Daniel

[finn.poulsen]

Hi Daniel,

Thanks for your fast response.

/Finn

[johng231]

Hello Daniel

Where would you apply the WCCP exclude statement if your WAAS subnet is off of a layer-3 switch and you're performing WCCP on the WAN routers with 61in/62out in the WAN interface? We have sale centers hanging off of our branch router so traffic can route to the local branch or to the MPLS from the SC. Right now, we we have WCCP 61in on the LAN side and 62in on the WAN side. Would it make sense to change it to 61in/62out on the WAN interface only?

[Daniel Arrondo Ostiz]

Hi John,

If your WAE is L3 away from your router, the "redirect exclude-in" command needs to be added in the interface through which the traffic from the WAE is arriving.

By the way, for the future, if the question is not related to the previous one, it would be better to open a separate thread to keeps things clear.

Regards

Daniel