This document will outline a simple WCCP configuration on a Cisco ASA (Adaptive Security Appliance) via the Cisco ASDM graphical interface. This document assumes that “Transparent Redirection” has been previously configured on the IronPort S-Series.
For this example, the IronPort S-Series is configured with the following settings:
On the IronPort S-Series, under the “Network” tab and “Transparent Redirection”, “Transparent Redirection Device Type” is set to “WCCP v2 Router”.
With the “Service Profile” added, the “Service” is set to “Standard service ID: 0 web-cache (destination port 80)” and the “Router IP Addresses” is set to “192.168.15.1”
[img:d8912c6ee2]http://users.ctinet.net/cki/ironport/asa-wccp1.jpg[/img:d8912c6ee2]
Start by launching the “Cisco ADSM Launder” application. If the “Cisco ADSM Launder” application is not already loaded, in most cases this can be obtained by opening a web browser and establishing an https connection to the ASA’s IP address.
In this example it would be https://192.168.15.1
Once the “Cisco ASDM Launder” application is installed and loaded, login to the Cisco ASA by providing the “IP Address”, “Username”, and “Password” and select the “OK” button to proceed.
[img:d8912c6ee2]http://users.ctinet.net/cki/ironport/asa-wccp2.jpg[/img:d8912c6ee2]
When logged in, the “Home” screen which will display a general overview device dashboard of the Cisco ASA device.
[img:d8912c6ee2]http://users.ctinet.net/cki/ironport/asa-wccp3.jpg[/img:d8912c6ee2]
Proceed by selecting the “Configuration” button located to the right of the “Home” button. Then select the “Device Management” section located in the bottom left hand corner.
Next, under the “Device Management” navigation tree, expand “Advanced” and “WCCP”.
[img:d8912c6ee2]http://users.ctinet.net/cki/ironport/asa-wccp4.jpg[/img:d8912c6ee2]
Next, click the “Add” button located on the right hand side.
[img:d8912c6ee2]http://users.ctinet.net/cki/ironport/asa-wccp5.jpg[/img:d8912c6ee2]
The “Add WCCP Redirection” dialog box will appear. Select the interface you will be redirecting traffic from by clicking the “Interface” drop down box. Then click the “New” button.
[img:d8912c6ee2]http://users.ctinet.net/cki/ironport/asa-wccp6.jpg[/img:d8912c6ee2]
The “Add Service Group” dialog box will appear. Next to “Service” select the “Web Cache” radio button. Then click the “OK” button.
[img:d8912c6ee2]http://users.ctinet.net/cki/ironport/asa-wccp7.jpg[/img:d8912c6ee2]
Once returned to the “Add WCCP Redirection” dialog box, note the “Interface” and “Service Group” sections now have values.
[img:d8912c6ee2]http://users.ctinet.net/cki/ironport/asa-wccp8.jpg[/img:d8912c6ee2]
Finally, click the “OK” button to finish configuring WCCP on the Cisco ASA.
To check that WCCP is configured correctly and redirecting traffic, telnet (or SSH) to the Cisco ASA and login with “enable mode” privileges.
Run the command “show wccp”. If all is setup correctly the “Router Identifier” IP address will display along with an incrementing count next to “Total Packets Redirected”.
[img:d8912c6ee2]http://users.ctinet.net/cki/ironport/asa-wccp9.jpg[/img:d8912c6ee2]
Furthermore, at the CLI type “show wccp web-cache detail”. This will show the “WCCP Cache –Engine Information”. Ensure the value next “State” reads “Usable”.
[img:d8912c6ee2]http://users.ctinet.net/cki/ironport/asa-wccp10.jpg[/img:d8912c6ee2]
