cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
244
Views
0
Helpful
5
Replies
Highlighted
Beginner

ASA WCCP Redirection with 2 WSA Appliances

I'd like to use ASA WCCP to redirect to a couple of Cisco WSA appliances for redundancy. I want to have a dedicated Primary WSA appliance which will service all WCCP requests and a Backup WSA appliance only to be used If the Primary fails.

 

I have both WSA in the same service group. WCCP requests are randomly being load balanced across both WSA's. I have tried manipulating the WCCP weights on the WSA's and traffic still load balances.

 

I also tried a separate service group for each WSA and the traffic is still being load balanced.

 

Is it possible to redirect all WCCP packets to a Primary WSA and only use the backup in the event of a primary WSA failure.

 

Any thoughts appreciated.

 

Ian

5 REPLIES 5
VIP Advisor

Re: ASA WCCP Redirection with 2 WSA Appliances

here is the example guide for your requirement :

https://www.cisco.com/c/en/us/td/docs/security/asa/special/wccp/guide/asa-wccp.html

 

Look also some caveats also, why not implement Active/Active ?

when the device fails WCCP automatically remove from List.

 

BB
*** Rate All Helpful Responses ***
Beginner

Re: ASA WCCP Redirection with 2 WSA Appliances

Hi BB,

 

Thanks for your update. Within the document I cannot find ta solution that would give me an active/standby WCCP for my WSA appliances.

 

The WSA are in different DC's and the bandwidth between DC's is limited. Therefor I would prefer to use the WSA in the Primary DC and only use the Standby WSA in DC2 in the event of a WSA failure in DC1.

 

thanks

 

Ian

VIP Advisor

Re: ASA WCCP Redirection with 2 WSA Appliances

Do you have any high level topology to look, how your failover exiting enviroment works ? so we can advise best possible way to deploy.

BB
*** Rate All Helpful Responses ***

Re: ASA WCCP Redirection with 2 WSA Appliances

WSA- GUI

Transparent Redirection Device - > Edit Device - >Choose WCCP -. Summit ->Commit

Add Service -
Dynamic service ID : 90
Port number: 80, 443

option :
-Redirect based on destination port
-Load balance based on server address

Router IP Address : 192.168.60.179

Advanced -
Load-Balacing method (Allow Hash only)
Forwarding Method (Allow GRE only)
Return Method (Allow GRE only)

Summit - > Commit

WSA-CLI
advancedproxyconfig
WCCP


ASA
access-list WCCP_REDIRECT_IN line 1 extended permit tcp 192.168.60.0 255.255.255.0 any eq www
access-list WCCP_REDIRECT_IN line 2 extended permit tcp 192.168.60.0 255.255.255.0 any eq 443
wccp 90 redirect-list WCCP_REDIRECT_IN
wccp interface inside ?
wccp interface inside 90 redirect in

sh wccp

 

Beginner

Re: ASA WCCP Redirection with 2 WSA Appliances

good