cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
12631
Views
5
Helpful
2
Comments
pevaneyn
Cisco Employee
Cisco Employee

 

Introduction

 

The Web Cache Communication Protocol (WCCP) was initially designed as a component of IOS whose purpose was to intercept HTTP traffic traversing a router and redirect that traffic to a local cache with the aim of reducing access times to web sites and conserving wide area bandwidth. Typically the packets are redirected from their  destination web server on the Internet to a content engine that is local  to the client. In some WCCP deployment scenarios, redirection of  traffic may also be required from the web server to the client. WCCP  enables you to integrate content engines into your network  infrastructure. With the introduction of WCCPv2 the scope of the protocol widened to include traffic types other than HTTP allowing the protocol to be used as a more general interception mechanism. In WCCPv2 clients specify the nature of the traffic to be intercepted and forwarded to external devices which are then in a position to provide services, based upon the traffic type, such as WAN optimisation and application acceleration.

This document should give the current  suported features and options for WCCP. It is structured per device as  using a matrix would be unwealdy.

 

For modern versions of IOS there is 'show ip wccp capabilities' which gives more or less the same info.

 

HW: hardware accelerated

We give the minum version if > 12.4 or > 12.2(18)SXF

 

Catalyst 7600

 

Minimum version: 12.2(16)SXF16 12.2(33)SXI

IPv6 support: 15.1(3)S

Recommended settings: IN/MASK/L2/L2

WCCP: version 1 and version 2

MD5 security: Yes

Closed Services: NOT SUPPORTED

Variable Timers: NOT SUPPORTED

Configurable Router ID: 15.1(3)S

Multicast IPv4: yes

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups: 256

Maximum number of routers: 32

Maximum number of clients: 32

 

Interception Methods:

 

VRF Avare IPv4: 15.1(3)S

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4: Full extended ACL

Interception ACL IPv6: NOT SUPPORTED

IN interception: HW

Out Interception: SW

Exclude redirect In: Yes

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment: SW

IPv4 Redirection WCCP GRE: SW

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE: SW

IPv4 Return Generic GRE: HW

IPv4 Return IP Forward: HW

IPv4 Return L2: 12.2(33)SRA

 

Catalyst 6500 Sup 2T

 

Minimum version: 15.0(1)SY

IPv6 support: 15.1(1)SY

Recommended settings: IN/MASK/L2/L2

WCCP: version 1 and version 2

MD5 security: Yes

Closed Services: ?

Variable Timers: 15.1(1)SY

Configurable Router ID: 15.1(1)SY

Multicast IPv4: yes

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups: 256

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: Yes

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4:  Full extended ACL

Interception ACL IPv6: Full extended ACL from 15.1(1)SY

IN interception: HW

Out Interception:  HW

Exclude redirect In:  Yes

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment: SW

IPv4 Redirection WCCP GRE: HW

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE: HW

IPv4 Return Generic GRE:  HW

IPv4 Return IP Forward: HW

IPv4 Return L2:  HW

 

Catalyst 6500 Sup720

 

Minimum version: 12.2(33)SXH

IPv6 support: 15.1(1)SY

Recommended settings: IN/MASK/L2/L2

WCCP:  version 1 and version 2

MD5 security:  Yes

Closed Services: NOT SUPPORTED

Variable Timers: 15.1(1)SY

Configurable Router ID:  15.1(1)SY

Multicast IPv4:  Yes

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups: 256

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: NOT SUPPORTED

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4: Full Extended

Interception ACL IPv6:

IN interception: HW

Out Interception: SW

Exclude redirect In: Yes

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment: SW

IPv4 Redirection WCCP GRE: HW

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE: SW

IPv4 Return Generic GRE: HW

IPv4 Return IP Forward: HW

IPv4 Return L2: HW

 

 

Catalyst 6500 sup32

 

Minimum version: 12,2(18)SXF16

IPv6 support: NOT SUPPORTED

Recommended settings: IN/MASK/L2/IP forward

WCCP: Version 1 and Version 2

MD5 security: Yes

Closed Services: NOT SUPPORTED

Variable Timers: NOT SUPPORTED

Configurable Router ID:  NOT SUPPORTED

Multicast IPv4: Yes

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups: 256

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: NOT SUPPORTED

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4: Full Extended ACL

Interception ACL IPv6:  NOT SUPPORTED

IN interception: HW

Out Interception: SW

Exclude redirect In: Yes

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment: SW

IPv4 Redirection WCCP GRE: HW from 12.2(33)SXH before NOT SUPPORTED

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE: HW from 12.2(33)SXH before NOT SUPPORTED

IPv4 Return Generic GRE: HW

IPv4 Return IP Forward: HW

IPv4 Return L2: HW from 12.2(33)SXH before NOT SUPPORTED

 

Catalyst 6500 Sup2

 

Minimum version: 12,2(18)SXF16

IPv6 support: NOT SUPPORTED

Recommended settings: IN/MASK/L2/L2

WCCP: Version 1 and Version 2

MD5 security: Yes

Closed Services: NOT SUPPORTED

Variable Timers: NOT SUPPORTED

Configurable Router ID: NOT SUPPORTED

Multicast IPv4: Yes

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups: 256

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: NOT SUPPORTED

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4: Full Extended ACL

Interception ACL IPv6: NOT SUPPORTED

IN interception: HW

Out Interception: SW

Exclude redirect In: Yes

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment: SW

IPv4 Redirection WCCP GRE: SW

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE: SW

IPv4 Return Generic GRE: HW

IPv4 Return IP Forward: HW

IPv4 Return L2: HW

 

Catalyst 4500 Sup IV and V

 

Minimum version: 12.2(46)SG

IPv6 support: NOT SUPPORTED

Recommended settings: IN/MASK/L2/L2

WCCP: Version 2

MD5 security: Yes

Closed Services: NOT SUPPORTED

Variable Timers: NOT SUPPORTED

Configurable Router ID:

Multicast IPv4: Yes

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups: 8

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4:NOT SUPPORTED

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4: NOT SUPPORTED

Interception ACL IPv6: NOT SUPPORTED

IN interception: HW

Out Interception: NOT SUPPORTED

Exclude redirect In: Yes

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment: NOT SUPPORTED

IPv4 Redirection WCCP GRE:  NOT SUPPORTED

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE: NOT SUPPORTED

IPv4 Return Generic GRE: NOT SUPPORTED

IPv4 Return IP Forward: NOT SUPPORTED

IPv4 Return L2: HW

 

Catalyst 4500 Sup VI

 

Minimum version: 15,0(2)SG

IPv6 support: NOT SUPPORTED

Recommended settings: IN/MASK/L2/L2

WCCP: Version 2

MD5 security: Yes

Closed Services: NOT SUPPORTED

Variable Timers: Yes

Configurable Router ID: Yes

Multicast IPv4: Yes

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups: 8

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: NOT SUPPORTED

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4: Full Extended ACL from 15.0(2)SG1

Interception ACL IPv6:  NOT SUPPORTED

IN interception: HW

Out Interception: HW

Exclude redirect In: Yes

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment: NOT SUPPORTED

IPv4 Redirection WCCP GRE:  NOT SUPPORTED

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE:  NOT SUPPORTED

IPv4 Return Generic GRE:  NOT SUPPORTED

IPv4 Return IP Forward: NOT SUPPORTED

IPv4 Return L2: HW

 

Catalyst 4500 Sup VII

 

Minimum version: 15.1(1)SG

IPv6 support:  NOT SUPPORTED

Recommended settings: IN/MASK/L2/L2

WCCP: Version 2

MD5 security: Yes

Closed Services:  NOT SUPPORTED

Variable Timers: Yes

Configurable Router ID: Yes

Multicast IPv4: Yes

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups: 8

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: Yes

VRF Aware IPv6:  NOT SUPPORTED

Interception ACL IPv4: Full Extended

Interception ACL IPv6:

IN interception: HW

Out Interception: HW

Exclude redirect In: Yes

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment:  NOT SUPPORTED

IPv4 Redirection WCCP GRE: SW

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE: SW

IPv4 Return Generic GRE:  NOT SUPPORTED

IPv4 Return IP Forward:  NOT SUPPORTED

IPv4 Return L2: HW

 

Catalyst 3750/3560

 

Minimum version:  12.2(46)SE

IPv6 support: NOT SUPPORTED

Recommended settings: IN/MASK/L2/L2

WCCP: Version 2

MD5 security: NOT SUPPORTED

Closed Services:  NOT SUPPORTED

Variable Timers: NOT SUPPORTED

Configurable Router ID: NOT SUPPORTED

Multicast IPv4:  Yes

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups: 8

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: NOT SUPPORTED

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4: No denies, denies on 3750X/E and 3560X/E above 12.2(58)SE

Interception ACL IPv6: NOT SUPPORTED

IN interception: HW

Out Interception: NOT SUPPORTED

Exclude redirect In: NOT SUPPORTED

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment: NOT SUPPORTED

IPv4 Redirection WCCP GRE: NOT SUPPORTED

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE: NOT SUPPORTED

IPv4 Return Generic GRE: NOT SUPPORTED

IPv4 Return IP Forward: NOT SUPPORTED

IPv4 Return L2: HW

 

Catalyst 3550

 

Minimum version: 12.2(46)SE

IPv6 support:  NOT SUPPORTED

Recommended settings: IN/MASK/L2/L2

WCCP: Version 2

MD5 security: NOT SUPPORTED

Closed Services: NOT SUPPORTED

Variable Timers:NOT SUPPORTED

Configurable Router ID: NOT SUPPORTED

Multicast IPv4: NOT SUPPORTED

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups:

Maximum number of routers:

Maximum number of clients:

 

 

Interception Methods:

 

VRF Avare IPv4: NOT SUPPORTED

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4: Extended ACL, no denies

Interception ACL IPv6: NOT SUPPORTED

IN interception: HW

Out Interception: NOT SUPPORTED

Exclude redirect In: NOT SUPPORTED

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment:NOT SUPPORTED

IPv4 Redirection WCCP GRE: NOT SUPPORTED

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE: NOT SUPPORTED

IPv4 Return Generic GRE: NOT SUPPORTED

IPv4 Return IP Forward: NOT SUPPORTED

IPv4 Return L2: HW

 

ISR G1 or Cisco 7200 router

 

Minimum version: 12.4(10)

IPv6 support: NOT SUPPORTED

Recommended settings: IN/HASH/WCCP GRE/WCCP GRE

WCCP: Version 1 and Version 2

MD5 security: Yes

Closed Services: 12.4(9)T

Variable Timers: NOT SUPPORTED

Configurable Router ID: NOT SUPPORTED

Multicast IPv4: Yes

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups: 256

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: 15.0(1)M

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4: Full Extended

Interception ACL IPv6: NOT SUPPORTED

IN interception: SW

Out Interception: SW

Exclude redirect In: 12.1(3)T

 

Redirection Methods:

 

MASK Assignment: SW from 12.4(20)T recommended at least 12.4(24)T

HASH Assigment: SW

IPv4 Redirection WCCP GRE: SW

IPv4 Redirection L2: SW from 12.4(20)T recommended at least 12.4(24)T

IPv4 Return WCCP GRE: SW

IPv4 Return Generic GRE:  NOT SUPPORTED

IPv4 Return IP Forward: SW

IPv4 Return L2: SW from 12.4(20)T recommended at least 12.4(24)T

 

ISR G2 with NME

 

Minimum version: 15.0(1)M1

IPv6 support:  15.2(3)T

Recommended settings:

WCCP: Version 1 and Version 2

MD5 security: Yes

Closed Services: Yes

Variable Timers: 15.2(3)T

Configurable Router ID: 15.2(3)T

Multicast IPv4: Yes

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups: 256

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: Yes

VRF Aware IPv6: 15.2(3)T

Interception ACL IPv4: Full Extended ACL

Interception ACL IPv6: Full Extended ACL from 15.2(3)T

IN interception: SW

Out Interception: SW

Exclude redirect In: Yes

 

Redirection Methods:

 

MASK Assignment: SW

HASH Assigment: SW

IPv4 Redirection WCCP GRE: SW

IPv4 Redirection L2: SW

IPv4 Return WCCP GRE: SW

IPv4 Return Generic GRE:

IPv4 Return IP Forward: SW

IPv4 Return L2: SW

 

ISR G2 with SM-SRE

 

Minimum version: 15.0(1)M2

IPv6 support: 15.2(3)T

Recommended settings:

WCCP: Version 1 and Version 2

MD5 security: Yes

Closed Services: Yes

Variable Timers: 15.2(3)T

Configurable Router ID: 15.2(3)T

Multicast IPv4:  Yes

Multicast IPv6:NOT SUPPORTED

Maximum number of service groups: 256

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: Yes

VRF Aware IPv6: 15.2(3)T

Interception ACL IPv4: Full Extended ACL

Interception ACL IPv6: Full Extended ACL from 15.2(3)T

IN interception: SW

Out Interception: SW

Exclude redirect In: Yes

 

Redirection Methods:

 

MASK Assignment: SW

HASH Assigment: SW

IPv4 Redirection WCCP GRE: SW

IPv4 Redirection L2: SW

IPv4 Return WCCP GRE: SW

IPv4 Return Generic GRE:  NOT SUPPORTED

IPv4 Return IP Forward: SW

IPv4 Return L2: SW

 

Nexus 7000

 

Minimum version: NX-OS 4.2(1)

IPv6 support:   NOT SUPPORTED

Recommended settings: IN/MASK/L2/L2

WCCP: Version 2

MD5 security: Yes

Closed Services:  NOT SUPPORTED

Variable Timers: NX-OS 5.1(1)

Configurable Router ID:  NOT SUPPORTED

Multicast IPv4: NOT SUPPORTED

Multicast IPv6:  NOT SUPPORTED

Maximum number of service groups: 256

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: Yes

VRF Aware IPv6:  NOT SUPPORTED

Interception ACL IPv4: Full Extended ACL (beware of limited TCAM space)

Interception ACL IPv6:

IN interception: HW

Out Interception: HW

Exclude redirect In: Yes

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment: NOT SUPPORTED

IPv4 Redirection WCCP GRE: NOT SUPPORTED

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE: NOT SUPPORTED

IPv4 Return Generic GRE: NOT SUPPORTED

IPv4 Return IP Forward: HW

IPv4 Return L2: HW

 

ASR1000

 

Minimum version: IOS-XE 2.2

IPv6 support: NOT SUPPORTED

Recommended settings: IN/MASK/L2/L2

WCCP: Version 2

MD5 security: Yes

Closed Services: From IOS-XE 3.1.0S

Variable Timers: From IOS-XE 3.1.0S

Configurable Router ID: From IOS-XE 3.1.0S

Multicast IPv4: From IOS-XE 3.1.0S

Multicast IPv6: NOT SUPPORTED

 

Maximum number of service groups: 256

Maximum number of routers: 32

Maximum number of clients: 32

 

 

Interception Methods:

 

VRF Avare IPv4: From IOS-XE 3.1.0S

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4: From IOS-XE 3.1.0S: Full Extended ACL, no port ranges

Interception ACL IPv6:  NOT SUPPORTED

IN interception: HW

Out Interception: HW From IOS-XE 3.1.0S

Exclude redirect In: From IOS-XE 3.1.0S

 

Redirection Methods:

 

MASK Assignment: HW

HASH Assigment: NOT SUPPORTED

IPv4 Redirection WCCP GRE: HW

IPv4 Redirection L2: HW

IPv4 Return WCCP GRE: HW

IPv4 Return Generic GRE:  NOT SUPPORTED

IPv4 Return IP Forward: HW

IPv4 Return L2: HW

 

ASA Firewall

 

Minimum version: 7.2(1)

IPv6 support: NOT SUPPORTED

Recommended settings: IN/HASH/WCCP GRE

WCCP: Version 2

MD5 security: Yes

Closed Services: NOT SUPPORTED

Variable Timers: NOT SUPPORTED

Configurable Router ID: NOT SUPPORTED

Multicast IPv4: NOT SUPPORTED

Multicast IPv6: NOT SUPPORTED

Maximum number of service groups:

Maximum number of routers:

Maximum number of clients:

 

 

Interception Methods:

 

VRF Avare IPv4: NOT SUPPORTED

VRF Aware IPv6: NOT SUPPORTED

Interception ACL IPv4: Yes

Interception ACL IPv6: NOT SUPPORTED

IN interception: SW

Out Interception: NOT SUPPORTED

Exclude redirect In: NOT SUPPORTED

 

Redirection Methods:

 

MASK Assignment: NOT SUPPORTED

HASH Assigment: SW

IPv4 Redirection WCCP GRE: SW

IPv4 Redirection L2: NOT SUPPORTED

IPv4 Return WCCP GRE: SW

IPv4 Return Generic GRE: NOT SUPPORTED

IPv4 Return IP Forward: NOT SUPPORTED

IPv4 Return L2: NOT SUPPORTED

Comments
Andrew Gabriel
Level 1
Level 1

Is there an updated version of this covering the ISR 4000 series routers? Or can someone help with the recommended WCCP settings for the ISR 4000 series? Will L2 redirects work fine with minimal CPU load?

jewfcb001
Level 4
Level 4

@andrew 
I looking for the same answer . Please suggest us . 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking for a $25 gift card