Introduction The WAAS system consists of a set of devices called wide area application engines (WAEs) that work together to optimize TCP traffic over your network. WAAS Central Manager GUI is used to centrally configure and monitor the WAEs and application policies in your network. The Cisco WAAS uses redirect method and assignment method to move packets between router to waas and to load balance packets among WAAS respectively.
Problem Swapped a new WAAS appliance (WAVE-694-K-9) in place of an older appliance as part of an upgrade. The replacement and registering the new appliance to the Central Manager seemed to go as planned as the new appliance has successfully registered and assumed the identity of the old device. The new device is also showing 'online' in Central Manager. Also made sure that the "ip wccp redirect 61/62" commands are back on the router interfaces where the redirect should happen. However it seems that redirection is not happening. The command, "show ip wccp" on the router shows no packet count incrementing on the router and other commands run on the waas is not showing any sessions.
Description Check the output of following troubleshooting command
waas01#show wccp status WCCP Interception : Configured State : Enabled Services Enabled on this WAE: -NONE-
Make sure that you have configuration for services like wccp tcp promiscous 61/62 etc enabled on WAE.
Also check if the WAE and the router can ping each other. On the router check wccp details.
rtr01#show ip wccp Global WCCP information: Router information: Router Identifier: Protocol Version: 2.0 Service Identifier: 61 Number of Service Group Clients: 0 Number of Service Group Routers: 0 Total Packets s/w Redirected: 2617588181 Process: 50164 CEF: 2617538017 Service mode: Open Service Access-list: -none- Total Packets Dropped Closed: 0 Redirect Access-list: wccp-bypass-inside Total Packets Denied Redirect: 5652247 Total Packets Unassigned: 77807 Group Access-list: -none- Total Messages Denied to Group: 0 Total Authentication failures: 0 Total Bypassed Packets Received: 2 Service Identifier: 62 Number of Service Group Clients: 0 Number of Service Group Routers: 0 Total Packets s/w Redirected: 4222284950 Process: 6049274 CEF: 4216235676 Service mode: Open Service Access-list: -none- Total Packets Dropped Closed: 0 Redirect Access-list: wccp-bypass-outside Total Packets Denied Redirect: 6031946 Total Packets Unassigned: 4069 Group Access-list: -none- Total Messages Denied to Group: 0 Total Authentication failures: 0 Total Bypassed Packets Received: 3
Resolution The router doesn't seem to recognize WAE, which means that WAE is not configured properly. Check that the config of wccp on WAE is correct.
In L3OUT we can use OSPF, EIGRP, Or BGP when choosing routing protocols. In case of Multi-tenancy , We need to use multiple instances of the routing protocol (OSPF/EIGRP). one instance for each tenant since each one is in a different VRF. This makes sense...
Hello,I have ACI fabric (APIC v5.1) and legacy backbone routers (NX-OS 9.3). ACI config is trivial: one user tenant, one VRF and one L3Out with static routing to the backbone using L3 routed interface.Now, I have to extend second VRF from NX-OS backbone t...
Hi Our security team is asking if it's possible to deploy a NDR solution in our datacenter fabric to ingest "all traffic" for analysis. All they're asking is to SPAN all traffic on each Leaf switch into the NDR device. I've made it clear that th...
Hi All We have a pair of N7Ks waiting to be upgraded. The N7Ks currently have single SUPs. We have ordered a pair of new SUPs . Not sure what the version of the IOS is in the new SUPs. What is the best way to get the new SUPs installe...