Re: VRF-Aware WCCP

ng-hlong · ‎11-30-2004

I want to put one Cache-Engine at PE router to provide caching services for different VPNs.

Customer will have Separate VPN to access Internet, Cache-engine is put at common VRF & accesible from Customer sites in different VPNs

Can't find any related document, & don't have Lab to test. Anyone experience this, please confirm for me.

Thanks a lot

Long

sachinga.hcl · ‎06-01-2009

The VRF awareness for 12.4(T) is still probably 8-12 months out. VRF aware WCCP features are definitely in the pipeline, but nothing has been publically published on availability timelines.

It's now publically available on the forum... but , I've only found it on the 3750 and 3550 documentation.

at the 3750 you will need to place the redirect statement on each of the VLANs, ip wccp 61 redirect in

Kindly find here GRE Tunnel with VRF Configuration Example:

http://www.cisco.com/en/US/tech/tk436/tk428/technologies_configuration_example09186a00801e1294.shtml

I have gotten as far as the WAE registering the router:

"WCCP configuration for TCP Promiscuous service 61 and 62 succeeded.

WCCP configuration for TCP Promiscuous succeeded.Please remember to

configure WCCP service 61 and 62 on the corresponding router."

wae01#sh wccp router

Router Information for Service: TCP Promiscuous 61

Routers Configured and Seeing this Wide Area Engine(1)

Router Id Sent To Recv ID

0.0.0.0 209.1.1.1 0000022F

--------------------------

The router registers the WAE as a WCCP client:

router04#

"*Feb 4 18:56:09.892: %WCCP-5-SERVICEFOUND: Service 61 acquired on WCCP

client 209.1.1.2"

"*Feb 4 18:56:09.892: %WCCP-5-SERVICEFOUND: Service 62 acquired on WCCP

client 209.1.1.2"

The router however cannot figure out what its ID is and does not see

itself as a WCCP group router.

router04#sh ip wccp

Global WCCP information:

Router information:

Router Identifier: -not yet determined-

Protocol Version: 2.0

Service Identifier: 61

Number of Service Group Clients: 1

Number of Service Group Routers: 0

Total Packets s/w Redirected: 0

Process: 0

Fast: 0

CEF: 0

Redirect access-list: ACCELERATED-TRAFFIC

Total Packets Denied Redirect: 0

Total Packets Unassigned: 25957

Group access-list: -none-

Total Messages Denied to Group: 0

Total Authentication failures: 0

Total Bypassed Packets Received: 0

--------------------------

This is a short summary of important commands for working with VRF's.

View the VRF instances and the associated interfaces.

ml-mr-c6-gs#show ip vrf

Name Default RD Interfaces

blurvrf 100:2 Vlan215

Vlan326

tgvrf 100:1 Vlan132

Vlan325

TenGigabitEthernet1/1

ml-mr-c6-gs#

Show the routing table for a specific VRF.

ml-mr-c6-gs#show ip route vrf tgvrf

Routing Table: tgvrf

Codes: C - connected, S - static, R - RIP, M - mobile, B - BGP

D - EIGRP, EX - EIGRP external,

---More--

Gateway of last resort is 128.117.243.57 to network 0.0.0.0

O E2 192.52.106.0/24 [110/1] via 128.117.243.57, 1d19h, Vlan325

O E2 192.168.150.0/24 [110/160] via 128.117.243.57, 1d19h, Vlan325

172.17.0.0/29 is subnetted, 3 subnets

O E2 172.17.1.16 [110/0] via 128.117.243.57, 1d19h, Vlan325

O E2 172.17.1.8 [110/1] via 128.117.243.57, 1d19h, Vlan325

O E2 172.17.1.0 [110/1] via 128.117.243.57, 1d19h, Vlan325

--More--

Debugging should otherwise be similar to a regular switch or router.

Final Teragrid VRF Design and Diagrams

http://www.cisl.ucar.edu/nets/devices/routers/cisco/vrf/final.shtml

Teragrid Testbed Design

http://www.cisl.ucar.edu/nets/devices/routers/cisco/vrf/testbed.shtml

Cisco 4500 Series Switch Cisco IOS s/w config guide 12.1(20)EW

Configuring VRF-Lite

http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/12.1/20ew/configuration/guide/vrf.html

sachin garg

Report Inappropriate Content · ‎10-06-2009

Hello,

From the above conversation, I understand that WCCP won't work with VRF. Is that correct?

Thanks!!

lmcruzhsa · ‎09-22-2010

Hi, I have exactly the same scenario, were you able to go ahead with it?

Did you find any solution to make it work?

sachinga.hcl · ‎09-22-2010

Hi Luis,

Could you please specify a bit more about your platform .

If this is regarding 6500 platform then VRF-aware WCCP will not be supported on the 6500 platform until the next-generation Supervisor (SUP-2T).

Sachin

lmcruzhsa · ‎09-22-2010

7600 with 12.2SRC5

7206VX with 12.2SRE1 < just this IOS has support for WCCP over VRF

7206VX with 12.2SRC5

harindhafdo · ‎09-27-2010

can you pls paste the specific VRF aware WCCP config for 7600 ? I could not find any "VRF" specific configuration in the IOS for WCCP.

ahskhan · ‎10-12-2010

Looking at your descriprtion, here is what you need.

http://www.cisco.com/en/US/docs/ios/ios_xe/ipapp/configuration/guide/ipapp_wccp_xe.html#wp1088147

IOS 15.x has support on VRF aware WCCP.

Hope this will answer your question.

Ahsan

Giuseppe Larosa · ‎10-26-2010

Hello Ahsan,

this is good news but I'm afraid that IOS 15 doesn't run on a C7600 or C6500

However, I agree that configuration can be similar and can be of help.

on C7600 last 12.2(33)SRE should be fine

roughly the config should be similar to:

SUMMARY STEPS

1. enable

2. configure terminal

3. ip wccp [vrf vrf-name] {web-cache | service-number} [group-address group-address] [redirect-list access-list] [group-list access-list] [password password]

4. ip wccp [vrf vrf-name] source-interface source-interface

5. interface type number

6. ip wccp [vrf vrf-name] {web-cache | service-number} redirect {out | in}

7. exit

8. interface type number

9. ip wccp redirect exclude in

if the vrf option is supported the IOS may be fine otherwise an IOS upgrade is needed.

Edit:

command reference confirms 12.2(33)SRE /15.0

http://www.cisco.com/en/US/docs/ios/ipapp/command/reference/iap_i2.html#wp1079903

Hope to help

Giuseppe

ahskhan · ‎10-26-2010

Hi,

Correct, i did not realize that you have 76xx/cat6K. VRF Aware wccp is not available on SUP720, however you can still do this by leaking the route from VRF to gloabl routing table. Did you tried it?

Ahsan

ar · ‎09-20-2011

Hi. Any update on what 7600 IOS can support VRF-aware WCCP? also any issues with WCCP on 7600? i tested this before and CPU is shooting up.

thansk

rsimoni · ‎09-22-2011

Allan,

it is supported now since 15.1(3)S [15.1(3)S0a is available on CCO download page]

For the high CPU the answer is already documented on community support pages.

To quickly recap in order to use full hardware acceleration the WCCP Assignement method MUST be 'Mask' and the Redirection direction MUST be 'Ingress'.

If those requirements are not fulfilled redirected traffic is handled in software by the CPU with consequent higher utilization.

If you have other doubts on this please create a new post as this is one is about wccp vrf awareness which has nothing to do with cpu utilization. We would like to avoid to have long and messy threads.

regards,

Riccardo

j.leinonen · ‎09-28-2011

So am I getting this correct, if I have 6500 series with sup720, I cannot get VRF Aware wccp?

I mean is it planned to have it or never will have it?

Br. Jari

rsimoni · ‎09-28-2011

Hi Jari,

Sachin already replied to this a few posts ago.

VRF-aware WCCP is supported on the Sup2T with 12.2(50) SYA code or greater and there is no plan to have the feature supported on Sup720.

regards,

Riccardo