Wacky integration of PIX,Content engine and router

[nomanbari]

Dear All,

I have got a situation...The situation is

that I have a pix515e, Content Engine and

Cisco 2620xm router...The 3 attachments contain each of the systems configuration..They are arranged in the following way..

There is a 192.168.0.0 network ID running on the PIX inside network which is getting translated by pix to 172.16.1.11-172.16.2.254. The e0 of pix has got an IP address of 172.16.1.7. PIX firewall's gateway is the router's ethernet interface which is 172.16.1.3. I have allowed tcp etc traffic for the inside network.

After PIX there is a content engine 565A which is getting connected via its gigabit interface with IP address of 172.16.1.2 to the network with wccp config.

The router is running 172.16.1.3 on its ethernet interface with the wccp configuration on WAN facing interface..

The problem is that I am able to access the Internet from inside of the PIX.. The PIX is translating perfectly...When the traffic reaches the router, it also translates into public addresses perfectly..The user's are accessing Internet without any problem..and i can see the nat maintained on router and pix..

But the problem is that when i write sh wccp gre on content engine, it doesn't show any activity..This is the problem that content engine is not responding the way it should..

Right now I am lost why the CE isn't working... If anyone has faced this scenerio before then any help will be greatly appreciated...

Hoping for a response which resolves this...

Regards,

Noman Bari

[johansens]

I think you have missed a step in the router-config:

Check this config:

! Set WCCPv2

ip wccp version 2

! Enable the web-cache service

ip wccp web-cache

! Restrict which CE's is used

ip wccp web-cache group-list 10

!

interface FastEthernet0/0

! Enable route-cache to switch in/out on the same interface (may or may not be needed)

ip route-cache same-interface

!

interface Serial0/1

! Enable WCCP on outgoing requests

ip wccp web-cache redirect out

!

! This is the ACl which specifies which CE's are allowed used.

access-list 10 permit host 172.16.1.2

!

Have you tried this before?

[nomanbari]

Hi,

Thank you for your response... I saw this, the very next morning I had posted my request for help..

I had also posted in the emerging technologies>content networking section also and there you will see how I solved the glitch..

http://forums.cisco.com/eforum/servlet/NetProf?page=netprof&type=Subscriptions&loc=.1dd894a4/1&forum=Emerging%20Technologies&topic=Content%20Networking

But I still thank you for your help..

Regards,

Noman Bari