WCCP

[Elijah Conn]

We have configured WCCP on our L2 4507 in order to redirect traffic through the proxy.  Recently we attempted to add exemptions to the rule through deny statements.  For some reason the IP's that we denied still redirect through the proxy.

ip wccp 0 group-list acl-wccp-proxies

ip wccp 60 group-list acl-wccp-proxies

ip wccp 70 group-list acl-wccp-proxies

ip access-list extended acl-wccp-proxies

Remark Deny redirection of web traffic to networks, then permit all traffic through proxy

deny ip any 172.16.1.0 255.255.255.0

deny ip any 172.16.27.0 255.255.255.0

deny ip any 172.16.13.0 255.255.255.0

permit ip host 10.1.32.51

Inter range vlan 35

ip wccp 0 redirect in

ip wccp 60 redirect in

ip wccp 70 redirect in

Thanks

[MARK BAKER]

You need to use the redirect-list option to specify an ACL to permit or deny traffic to your proxies. The group-list only specifies the IP addresses of the proxies themselves. Some devices or IOS versions don't support the redirect-list option.

ip wccp 0 redirect-list wccp-traffic group-list wccp-servers

Hope that helps,

Mark