IOS Firewall and Cisco WAAS

[cgarringer]

I have a IOS firewall on a 2921 router, zone-based config.   The remote and main sites have Cisco WAAS , running 4.4.1 software.    I am using WCCP redirection on the WAAS/router combination.    If I leave it off the firewall passes SSH correctly to the devices on the other side of the firewall.    If I enable WCCP the SSH connections fail.   The SSH to the router itself is fine, I am not using the self zone for router protection.    I had seen a few posts on WAAS but the only one mentioning a config statement in the firewall was on 4.0 WAAS and the command is no longer on the IOS firewall.    Is this supposed to work transparently or am I missing a config?

The system is

main site WAAS - WCCP to router - Router------ MPLS 3rd party -------router w/IOS firewall (2921 15.1 code) - wccp redirection to WAAS - infrastructure subnet (with wAAS, switches)

Any help is appreciated, thanks,

[mirober2 · Accepted solution]

Hello,

These links should answer your questions:

WAAS Support for the Cisco IOS Firewall

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_data_zbf/configuration/15-2mt/sec-zone-pol-fw.html#GUID-46F240D2-10D3-4339-AD43-B53D4E05E8E0

Configuring the Cisco IOS Firewall with WAAS

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_data_zbf/configuration/15-2mt/sec-zone-pol-fw.html#GUID-54DCAD6D-CD5C-4F88-BC55-6C2FE1B6BE2E

Example: Cisco IOS Firewall Configuration with WAAS

http://www.cisco.com/en/US/docs/ios-xml/ios/sec_data_zbf/configuration/15-2mt/sec-zone-pol-fw.html#GUID-806C4FA1-225D-4309-BB0F-81E4A58847FD

-Mike

[cgarringer]

That did it. Thanks for the help. FYI - in 15.x the ip inspect waas enable command is hidden, it does not show on the ip inspect ? list

Sent from Cisco Technical Support iPad App