wccp on core

[Ron Baduach]

Hi ,

First of all , if it's not the right forum , please move it the the proper

we got some device on the network , that his user request from us [the lab team] , to configure WCCP on his vlan .

this device's distribution switch , is N5K , that connected to the Core switch [7600]

we can't configure the WCCP on the N5K [not supported] , so we configure it on the "upper" device [the core switch] .

is it matters ? should it work ? ........ [for now it's not working]

(If you need some more details , please let me know )

[Francesco Molino]

Hi

Yes you're right, WCCP is not supported on Nexus 5k. Just to understand a bit your network, does your nexus5k is acting as layer 2 only or layer 3?

I assume that hosts on Nexus 5k must go through your core switch in order to access internet, right?

In that case, it doesn't matter that you're doing WCCP on the core switch. If you had a design where internet connection is directly on Nexus 5k (that's acting as L3), then you need to play with routing to forward traffic to core switch before going outside.

For WCCP, the configuration is very simple. Before explanation, let's assume some things:

- interface g0/0 ==> Inside interface of users

- interface g0/1 ==> Outside interface for internet

- 192.168.0.0/16 ==> Is your LAN inside network

- 192.168.10.1 ==> IP of your Web Cache server

1. To enable WCCP:

ip wccp web-cache

2. Define acl for user traffic and forwarding this traffic to web cache server:

access-list 100 deny ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255

access-list 100 permit ip 192.168.0.0 0.0.255.255 any

   ==> This is an example acl. If you want to filter only http traffic going outside, the acl will looks like:

        access-list 100 permit tcp 192.168.0.0 0.0.255.255 any eq http

ip wccp web-cache redirect-list 100

3. Define webcache server list:

access-list 5 permit host 192.168.10.1

ip wccp web-cache group-list 5

5. Active wccp on your interface

a. If you do it on your inside interface:

interface g0/0

ip wccp web-cache redirect in

OR

b. If you do it on your outside interface:

interface g0/1

ip wccp web-cache redirect out

If you web cache server is on the same interface as users on your router, you need to add the command:

ip route-cache same-interface

Thanks

Hope this more clear.

PS: Please don't forget to rate and mark as correct answer if this solved your issue

[Ron Baduach]

Wow ! thanks for this reply .

I'll check it with my current configuration

Just to understand , what is the "Web cache server" ? is it the server i want to go out to it ?

[Francesco Molino]

Web cache server is the server on which you want to redirect the traffic like WSA, Squid,...

Thanks 

PS: Please don't forget to rate and mark as correct answer if this solved your issue