03-15-2012 01:09 PM
Hi,
Branch router is connected to Central Office via IPsec tunnel, on LAN interface there is ip wccp 61 redirect in configured. Where should the ip wccp 62 redirect in be configured - on the physical WAN interface or on the tunnel interface or should I configure ip wccp 61 redirect in and ip wccp 62 redirect out on the router's LAN interface? Can there be some negative impact if redirection is configured on virtual tunnel interface or physical interface with crypto map applied?
03-23-2012 05:23 PM
I have done this on a ton of routers using VTI tunnels with IPSec encryption applied. Works like a charm
Interface Gi0/X
ip wccp 61 redirect in
Interface Tunnel X
ip wccp 62 redirect in
09-03-2013 06:40 AM
What happens if you put "ip wccp 62 redirect in" on the WAN interface?
Would router be able to see the traffic?
Also isn't it also a valid config to apply "ip wccp 62 redirect out" on the LAN (Gi0/x) interface as well?
09-11-2013 12:45 PM
Hi regarding this question, you may configure the service 61 out and 62 in on the WAN interface, but need to remember to configure the ip wccp redirect exclude in on the interface where the WAAS appliance is connected to in order to avoid a possible loop. As well remember that the egress ( redirect out) may lead to high CPU utilization on the router since it will get the traffic leaving the router and switch it back in order to perform the inspection for WCCP and to realize if the packet needs to be redirected to WAAS.
This works well, even though Cisco recommends to use redirect 61 in on the LAN interface and 62 in on the WAN interface for a better performance on the router.
Hope this helps.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide