cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1842
Views
0
Helpful
3
Replies

WCCP version 2 on Catalyst 4507 w/SupII+

David Salazar
Level 1
Level 1

Hello,

I am try to do a lab with WAAS but I have a switch Catalyst 4507 with Supervisor II+.

When I am doing the configuration, I can´t use the "ip wccp redirect exclude in" on the vlan where reside the WAAS.

The show version is:

MBO-SW-01#
MBO-SW-01#
MBO-SW-01#sh ver
Cisco IOS Software, Catalyst 4500 L3 Switch Software (cat4500-IPBASEK9-M), Version 12.2(53)SG1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Fri 30-Oct-09 14:39 by prod_rel_team
Image text-base: 0x10000000, data-base: 0x11D20300

ROM: 12.2(31r)SGA1
Dagobah Revision 226, Swamp Revision 34

MBO-SW-01 uptime is 4 weeks, 6 days, 22 hours, 14 minutes
Uptime for this control processor is 4 weeks, 6 days, 22 hours, 15 minutes
System returned to ROM by power-on
System restarted at 16:57:06 CCS Mon May 10 2010
System image file is "bootflash:/cat4500-ipbasek9-mz.122-53.SG1.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html you require further assistance please contact us by sending email to
export@cisco.com. WS-C4507R (MPC8245) processor (revision 10) with 262144K bytes of memory.
Processor board ID FOX1151GHMY
MPC8245 CPU at 266Mhz, Supervisor II+
Last reset from PowerUp
7 Virtual Ethernet interfaces
48 FastEthernet interfaces
26 Gigabit Ethernet interfaces
511K bytes of non-volatile configuration memory.

If

cisco

Configuration register is 0x102

MBO-SW-01#
MBO-SW-01#
MBO-SW-01#
MBO-SW-01#sh mod
Chassis Type : WS-C4507R

Power consumed by backplane : 40 Watts

Mod Ports Card Type                              Model              Serial No.
---+-----+--------------------------------------+------------------+-----------
1     2  Supervisor II+ 1000BaseX (GBIC)        WS-X4013+          JAE12035A3E
3    24  10/100BaseTX (RJ45)V, Cisco/IEEE       WS-X4224-RJ45V     JAE1038BPFF
4    24  10/100BaseTX (RJ45)V, Cisco/IEEE       WS-X4224-RJ45V     JAE1041D5JM
5    24  10/100/1000BaseT (RJ45)V, Cisco/IEEE   WS-X4524-GB-RJ45V  JAE11517SDQ

M MAC addresses                    Hw  Fw           Sw               Status
--+--------------------------------+---+------------+----------------+---------
1 001f.9e15.32c0 to 001f.9e15.32c1 4.5 12.2(31r)SGA 12.2(53)SG1      Ok      
3 0016.4617.b1b8 to 0016.4617.b1cf 2.3                               Ok      
4 0018.18b5.85e8 to 0018.18b5.85ff 2.3                               Ok      
5 0017.0ec4.6350 to 0017.0ec4.6367 2.3                               Ok     

Mod  Redundancy role     Operating mode      Redundancy status
----+-------------------+-------------------+----------------------------------
1   Active Supervisor   SSO                 Active                          

MBO-SW-01#

MBO-SW-01#sh ip wccp
Global WCCP information:
    Router information:
        Router Identifier:                   192.168.166.1
        Protocol Version:                    2.0

    Service Identifier: 61
        Number of Service Group Clients:     0
        Number of Service Group Routers:     0
        Total Packets s/w Redirected:        0
          Process:                           0
          CEF:                               0
        Redirect access-list:                -none-
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total Bypassed Packets Received:     0

    Service Identifier: 62
        Number of Service Group Clients:     0
        Number of Service Group Routers:     0
        Total Packets s/w Redirected:        0
          Process:                           0
          CEF:                               0
        Redirect access-list:                -none-
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total Bypassed Packets Received:     0

MBO-SW-01#
MBO-SW-01#
MBO-SW-01#
MBO-SW-01#sh ip wccp in
MBO-SW-01#sh ip wccp interfaces
WCCP interface configuration:
    FastEthernet3/5
        Output services: 0
        Input services:  1
        Mcast services:  0
        Exclude In:      FALSE

MBO-SW-01#

Who can I do, to get this work????

Thank a lot

3 Replies 3

Zach Seils
Level 7
Level 7

Hi David,

The "redirect exclude in" command is only required if you are using outbound redirection (ex: ip wccp 61 redirect out), which is not supported on the Catalyst 4500 WCCP implementation.

Regards,

Zach

Hi Zach,

Thanks for your answer, but I don´t have clearly the scenario of your answer.

I´m attaching the Logical Topology; and the configuration is this:

Configration of the Edge Site:

------------------------------------

MBO-RT-03#
MBO-RT-03#sh run
Building configuration...


Current configuration : 10757 bytes
!
version 12.4
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
service sequence-numbers
!
hostname MBO-RT-03
!
boot-start-marker
boot-end-marker
!
ip wccp 61
ip wccp 62
!
!
!
ip cef
!

interface FastEthernet0/0
description TRONCAL LAN
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.202

description *** Vlan for Connection with WAE / Edge ***
encapsulation dot1Q 202
ip address 10.201.201.1 255.255.255.248
ip wccp redirect exclude in
!
interface FastEthernet0/0.210

description *** Vlan for Users ***
encapsulation dot1Q 210
ip address 192.168.166.129 255.255.255.128
ip wccp 61 redirect in
!
interface FastEthernet0/1
description *** WAN LINK - EMULATION ***
bandwidth 128
ip address 10.100.100.2 255.255.255.252
ip wccp 62 redirect in
ip nbar protocol-discovery
ip flow ingress
load-interval 30
duplex auto
speed auto
traffic-shape rate 128000 128000 128000 1000
!

!
router eigrp 1600
passive-interface default
no passive-interface FastEthernet0/1
network 10.100.100.2 0.0.0.0
network 10.201.201.1 0.0.0.0
network 192.168.166.128 0.0.0.127
no auto-summary
!
control-plane
!
line con 0
privilege level 15
password 7 121A150402181B00787B7578
login authentication userauthen
line aux 0
line vty 0 4
session-timeout 5
privilege level 15
password 7 121A150402181B00787B7578
login authentication userauthen
!
scheduler allocate 20000 1000
end

MBO-RT-03#
MBO-RT-03#
MBO-RT-03#
MBO-RT-03#sh ip wccp
Global WCCP information:
    Router information:
        Router Identifier:                   192.168.166.129
        Protocol Version:                    2.0

    Service Identifier: 61
        Number of Service Group Clients:     1
        Number of Service Group Routers:     1
        Total Packets s/w Redirected:        39212
          Process:                           0
          CEF:                               39212
        Service mode:                        Open
        Service Access-list:                 -none-
        Total Packets Dropped Closed:        0
        Redirect Access-list:                -none-
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group Access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total Bypassed Packets Received:     0

    Service Identifier: 62
        Number of Service Group Clients:     1
        Number of Service Group Routers:     1
        Total Packets s/w Redirected:        38171
          Process:                           0
          CEF:                               38171
        Service mode:                        Open
        Service Access-list:                 -none-
        Total Packets Dropped Closed:        0
        Redirect Access-list:                -none-
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group Access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total Bypassed Packets Received:     0

MBO-RT-03#
MBO-RT-03#
MBO-RT-03#
MBO-RT-03#sh ip wccp inter
WCCP interface configuration:
    FastEthernet0/1
        Output services: 0
        Input services:  1
        Mcast services:  0
        Exclude In:      FALSE

    FastEthernet0/0.210
        Output services: 0
        Input services:  1
        Mcast services:  0
        Exclude In:      FALSE

    FastEthernet0/0.202
        Output services: 0
        Input services:  0
        Mcast services:  0
        Exclude In:      TRUE

MBO-RT-03#
MBO-RT-03#
MBO-RT-03#sh ver
Cisco IOS Software, 2801 Software (C2801-ADVENTERPRISEK9-M), Version 12.4(24)T2, RELEASE SOFTWARE (fc2)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2009 by Cisco Systems, Inc.
Compiled Mon 19-Oct-09 18:21 by prod_rel_team

ROM: System Bootstrap, Version 12.3(8r)T8, RELEASE SOFTWARE (fc1)

MBO-RT-03 uptime is 4 hours, 55 minutes
System returned to ROM by reload at 11:39:53 CCS Wed Jun 16 2010
System image file is "flash:c2801-adventerprisek9-mz.124-24.T2.bin"


This product contains cryptographic features and is subject to United
States and local country laws governing import, export, transfer and
use. Delivery of Cisco cryptographic products does not imply
third-party authority to import, export, distribute or use encryption.
Importers, exporters, distributors and users are responsible for
compliance with U.S. and local country laws. By using this product you
agree to comply with applicable laws and regulations. If you are unable
to comply with U.S. and local laws, return this product immediately.

A summary of U.S. laws governing Cisco cryptographic products may be found at:
http://www.cisco.com/wwl/export/crypto/tool/stqrg.html you require further assistance please contact us by sending email to
export@cisco.com. 2801 (revision 5.0) with 240640K/21504K bytes of memory.
Processor board ID FTX0926W2NP
2 FastEthernet interfaces
1 Serial(sync/async) interface
1 Virtual Private Network (VPN) Module
2 Voice FXO interfaces
3 DSPs, 40 Voice resources
DRAM configuration is 64 bits wide with parity disabled.
191K bytes of NVRAM.
62720K bytes of ATA CompactFlash (Read/Write)

If

Cisco

Configuration register is 0x2102

MBO-RT-03#

And the Core Site has a 4507R with this configuration:

-------------------------------------------------------------------

MBO-SW-01#sh run
Building configuration...

Current configuration : 33778 bytes
!
! Last configuration change at 16:54:12 CCS Wed Jun 16 2010 by dsalazar
! NVRAM config last updated at 16:05:21 CCS Wed Jun 16 2010 by dsalazar
!
version 12.2
service nagle
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime localtime
service timestamps log datetime localtime
service password-encryption
service compress-config
service udp-small-servers
service tcp-small-servers
service sequence-numbers
!
hostname MBO-SW-01
!
boot-start-marker
boot system flash bootflash:/cat4500-ipbasek9-mz.122-53.SG1.bin
boot-end-marker
!
logging buffered 1024000
logging console critical
enable secret 5 $1$vzCG$bkRWJO0nJuUvYq5mmU8G00
!
username cps privilege 15 password 7 011016174B18110B731C1F59
username CNAC_User privilege 0 password 7 096F602829040401595C557A
aaa new-model
!
!
aaa authentication login default local-case group radius enable
aaa authentication dot1x default group radius
aaa authorization network default group radius
!
!
qos
   qos aggregate-policer Prueba 128000 bps 1000 byte conform-action transmit exceed-action drop
ip subnet-zero
ip wccp 61
ip wccp 62
!
policy-map QoS_Prueba
class class-default
  police aggregate Prueba
!
!
!
interface FastEthernet3/5

description *** WAN LINK - Emulation ***
no switchport
bandwidth 128
ip address 10.100.100.1 255.255.255.252
ip wccp 62 redirect in
load-interval 30
service-policy output QoS_Prueba
!

interface Vlan2

description *** Vlan of Server ***
ip address 192.168.162.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
ip wccp 61 redirect in
!

interface Vlan910

description *** Vlan for WAE / Core and Mgmt ***
ip address 10.200.200.1 255.255.255.248
!
!
router eigrp 1600
passive-interface default
no passive-interface Vlan1
no passive-interface Vlan710
no passive-interface FastEthernet3/5
no auto-summary
eigrp stub connected summary
eigrp event-logging
network 10.0.2.1 0.0.0.0
network 10.100.100.1 0.0.0.0
network 172.16.0.1 0.0.0.0

!

MBO-SW-01#
MBO-SW-01#sh ip wccp
Global WCCP information:
    Router information:
        Router Identifier:                   192.168.166.1
        Protocol Version:                    2.0

    Service Identifier: 61
        Number of Service Group Clients:     0
        Number of Service Group Routers:     0
        Total Packets s/w Redirected:        0
          Process:                           0
          CEF:                               0
        Redirect access-list:                -none-
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total Bypassed Packets Received:     0

    Service Identifier: 62
        Number of Service Group Clients:     0
        Number of Service Group Routers:     0
        Total Packets s/w Redirected:        0
          Process:                           0
          CEF:                               0
        Redirect access-list:                -none-
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total Bypassed Packets Received:     0

MBO-SW-01#
MBO-SW-01#sh ip wccp in
MBO-SW-01#sh ip wccp interfaces
WCCP interface configuration:
    FastEthernet3/5
        Output services: 0
        Input services:  1
        Mcast services:  0
        Exclude In:      FALSE

    Vlan2
        Output services: 0
        Input services:  1
        Mcast services:  0
        Exclude In:      FALSE

MBO-SW-01#


As you can see on the Catalyst 4507R the following stats are 0

     Number of Service Group Clients:     0
     Number of Service Group Routers:     0

for the services 61 and 62.

In the Router that start reflect a diferent value.

I can appreciate a technical information about how can I configure WCCP for the comunication between the Catalyst 4507 with Sup II+ with the WAE 474.

I probed with other router instead the catalyst 4507 and the configuration and communication were succesfully; that was for verify posible error of configuration on WAEs; but the final objetive is to use the catalyst 4507R.

Thank for your assistance.

Do you have IP connectivity between the local WAEs and 10.200.200.1 on the 4500?  The configuration of the 4500 looks fine, but as you noted, there are no WAEs registered with it.

Can you provide the output of the WAE configurations as well?

Zach

Review Cisco Networking for a $25 gift card