Question:
Need a sample WCCP router configuration
Environment:
- Cisco Web Security Appliance (WSA)
- WCCP
Below is a working example of Cisco router configuration using WCCP with a Cisco Web Security Appliance (WSA)
NOTE: For additional information regarding WCCP and configuration, please see the following Cisco support article here.
Add the below commands to enable WCCP protocol on the Cisco router.
ip wccp web-cache redirect-list 120 password anything
access-list 120 permit ip host 192.168.112.14 any
- The "redirect-list" option specifies an access-list to filter which traffic is to be redirected to WCCP web-cache device.
- The "password" command is optional. If added, make sure that it matches the WCCP password configured on the WSA.
This configuration will configure WCCP to run with the "web-cache" service ID and will only redirect 192.168.112.14, due to the implicit deny at the end of all ACLs.
NOTE: Make sure that the router IP address configured on WSA is the primary IP address (Router ID) of the Cisco router.
Proxy logs or WCCP logs on the WSA will show the following transaction every 10 seconds:
INFO : prox::INFO: wccp2_here_i_am sent to router 10.8.86.254 -- 1 replie(s) pending...
INFO : prox::INFO: Wccp2_i_see_you received from 10.8.86.254 156 bytes...
Below is a sample output of the debug and show commands on Cisco router (Specific data will vary based on configuration):
Router# debug ip wccp packets
WCCP-PKT: Received valid Here_I_Am packet from 192.168.25.4 w/rcvd_id 00003532
WCCP-PKT: Sending I_See_You packet to 192.168.25.4 w/ rcvd_id 00003534
Router# debug ip wccp events
WCCP-EVNT: Built I_See_You msg body w/1 usable web caches, change # 0000000A
WCCP-EVNT: Web Cache 192.168.25.3 added
WCCP-EVNT: Built I_See_You msg body w/2 usable web caches, change # 0000000B
Router# show ip wccp web-cache detail
WCCP Cache-Engine information:
IP Address: 10.1.1.2
Protocol Version: 2.0
State: Usable
Initial Hash Info: 0000000000000000000000000000000000000000000000000000000000000000
Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Hash Allotment: 256 (100.00%)
Packets Redirected: 40807
Connect Time: 11:05:17
Router# show ip wccp web-cache view
WCCP Routers Informed of: 10.1.1.1
WCCP Cache Engines Visible: 10.1.1.2
WCCP Cache Engines NOT Visible: -none-
Feedback