cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
Popup Hotspot Using ISR 1000 with WiFi/LTE for Teleworkers and Micro Branchesr
603
Views
0
Helpful
1
Replies
Highlighted
Beginner

ACL deny statement on WCCP redirect-list Cisco 3650

Is ACL deny statement supported for WCCP redirect-list configuration in Cisco 3650? 

Model: WS-C3650-24TS

SW Version: 03.07.04.E

License : IPservices

here's part of my configuration to make it clear:

!

ip wccp 0 redirect-list 126 group-list 10 password 7 XXXXXXXXXXXXXXX

!

interface g1/0/23

ip wccp 0 redirect in

!

access-list 10 permit 10.12.30.114 //proxy server IP address
access-list 126 deny ip host 10.12.30.114 any //to ensure connection from proxy server isn't redirected
access-list 126 deny ip 10.12.18.0 0.0.1.255 any //subnets that i dont want to be proxied
access-list 126 permit tcp 10.12.0.0 0.0.255.255 any eq www
access-list 126 permit tcp 10.12.0.0 0.0.255.255 any eq 443
access-list 126 permit tcp 10.12.0.0 0.0.255.255 any eq 8080
access-list 126 deny ip any any

Everyone's tags (3)
1 REPLY 1
Highlighted
Hall of Fame Expert

It appears to be supported as

It appears to be supported as long as you are not using it for outbound traffic (ip wccp redirect out).

see this document for example:

http://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118006-configure-wccp-00.html

HTH

CreatePlease to create content
Content for Community-Ad