- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-16-2022 10:10 AM
Hello,
We have 2 transparent proxy appliances in use for guest communication.
We have updated one of the two WSA proxies to version 14.0.1-053
Since, this proxy no longer receives client connections.
Following this situation, the second proxy was not updated.
WCCP is a load balancer.
BR,
Jose
Solved! Go to Solution.
- Labels:
-
Web Security
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-19-2022 06:00 AM
Hi @jds5
[1] please enable the WCCP logging and set the logging to debug
By default, there are no WCCP log subscriptions enabled. Follow these steps to enable the WCCP logs and change the logging level.
- From the CLI or the GUI of the WSA, create a new log subscription.
- Select WCCP Module Logs as the log type.
- Select Debug as the Log Level.
- Submit and commit the changes.
check the logs for Error messages, maybe it gives you some hints,
[2] check if the licenses are still valid
[3] please check the output of wccpstat from CLI
[4] you are using Protocol Version: 2.00
kindly check this Link : WSA FAQ: How do you troubleshoot WCCP between a Cisco WSA and a Cisco router/switch? - Cisco
[5] if No luck, you need to capture packet from WSA and see from packet view.
Amirhossein Mojarrad
+++++++++++++++++++++++++++++++++++++++++++++++++++
++++ If you find this answer helpful, please rate it as such ++++
+++++++++++++++++++++++++++++++++++++++++++++++++++
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-16-2022 12:10 PM
In your case upgrade and not upgrade - both not working ?
upgraded not working, not upgraded working ?
you need to troubleshoot, is this request going to WSA ?
#show ip wccp XX detail
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-19-2022 02:45 AM
Hello,
Only one proxy has been updated to version 14.0.1-053
Since this update, this proxy no longer processes client connections.
The update of the second proxy was not performed.
#sh ip wccp XX 90 detail
WCCP Client information:
WCCP Client ID: X.X.X.X
Protocol Version: 2.00
State: Usable
Redirection: L2
Packet Return: L2
Assignment: MASK
Connect Time: 3d23h
Redirected Packets:
Process: 0
CEF: 0
Platform: 71424283
GRE Bypassed Packets:
Process: 0
CEF: 0
Mask Allotment: 4 of 4 (100.00%)
Assigned masks/values: 1/4
Mask SrcAddr DstAddr SrcPort DstPort
---- ------- ------- ------- -------
0000: 0x00000300 0x00000000 0x0000 0x0000
Value SrcAddr DstAddr SrcPort DstPort
----- ------- ------- ------- -------
0000: 0x00000000 0x00000000 0x0000 0x0000
0001: 0x00000100 0x00000000 0x0000 0x0000
0002: 0x00000200 0x00000000 0x0000 0x0000
0003: 0x00000300 0x00000000 0x0000 0x0000
BR,
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-19-2022 06:00 AM
Hi @jds5
[1] please enable the WCCP logging and set the logging to debug
By default, there are no WCCP log subscriptions enabled. Follow these steps to enable the WCCP logs and change the logging level.
- From the CLI or the GUI of the WSA, create a new log subscription.
- Select WCCP Module Logs as the log type.
- Select Debug as the Log Level.
- Submit and commit the changes.
check the logs for Error messages, maybe it gives you some hints,
[2] check if the licenses are still valid
[3] please check the output of wccpstat from CLI
[4] you are using Protocol Version: 2.00
kindly check this Link : WSA FAQ: How do you troubleshoot WCCP between a Cisco WSA and a Cisco router/switch? - Cisco
[5] if No luck, you need to capture packet from WSA and see from packet view.
Amirhossein Mojarrad
+++++++++++++++++++++++++++++++++++++++++++++++++++
++++ If you find this answer helpful, please rate it as such ++++
+++++++++++++++++++++++++++++++++++++++++++++++++++
