?????? : 思科 500 系列内容引擎

配置在Catalyst 3550上的WCCP版本2

2015 年 8 月 28 日 - 机器翻译
其他版本: PDFpdf | 英语 (2014 年 10 月 2 日) | 反馈


目录


简介

本文为WEB缓存通信协议(WCCP)版本2提供一配置示例在Catalyst 3550以Cisco内容引擎560。

开始使用前

规则

有关文档规则的详细信息,请参阅 Cisco 技术提示规则

先决条件

本文档没有任何特定的前提条件。

使用的组件

使用以下软件和硬件版本,此配置开发并且测试了。

  • 运行Cisco IOS�软件版本12.1(11)EA1a的Cisco Catalyst 3550

  • Cisco内容引擎560运行的Cisco应用&内容网络软件(ACNS)版本4.2.3

本文档中的信息都是基于特定实验室环境中的设备创建的。本文档中使用的所有设备最初均采用原始(默认)配置。如果您是在真实网络上操作,请确保您在使用任何命令前已经了解其潜在影响。

配置

本部分提供有关如何配置本文档所述功能的信息。

注意: 要查找本文档所用命令的其他信息,请使用命令查找工具仅限注册用户)。

网络图

本文档使用下图所示的网络设置。

/image/gif/paws/29461/diagram.jpg

配置

本文档使用如下所示的配置。

  • Catalyst 3550

  • 内容引擎560

Catalyst 3550
GIULIO#sh run
Building configuration...
Current configuration : 3426 bytes
!
version 12.1
no service pad
service timestamps debug uptime
service timestamps log uptime
!
hostname GIULIO
!
enable password ww
!
ip subnet-zero
ip routing



!--- Only TCP port 80 may be redirected.
!--- You need to issue the sdm prefer extended-match command
!--- on the switch. Refer to the Verify and Troubleshoot section for 
!--- further information.


ip wccp web-cache
!
!
spanning-tree extend system-id
!
!
!
interface FastEthernet0/1
�no switchport
�ip address 10.48.66.217 255.255.254.0
!
interface FastEthernet0/2
�no ip address
!
interface FastEthernet0/3
�no ip address
!
interface FastEthernet0/4
�no ip address
!
interface FastEthernet0/5
�no ip address
!
interface FastEthernet0/6
�no ip address
!���������
interface FastEthernet0/7
�no ip address
!
interface FastEthernet0/8
�no ip address
!
interface FastEthernet0/9
�no ip address
!
interface FastEthernet0/10
�no ip address
!
interface FastEthernet0/11
�no ip address
!
interface FastEthernet0/12
�no ip address
!
interface FastEthernet0/13
�no ip address
!
interface FastEthernet0/14
�no ip address
!
interface FastEthernet0/15
�no ip address
!
interface FastEthernet0/16
�no switchport
�ip address 33.33.33.33 255.255.255.0
�duplex full
�speed 100
!
interface FastEthernet0/17
�no ip address
!
interface FastEthernet0/18
�no ip address
!���������
interface FastEthernet0/19
�no ip address
!
interface FastEthernet0/20
�no ip address
!
interface FastEthernet0/21
�no ip address
!
interface FastEthernet0/22
�no ip address
!
interface FastEthernet0/23
�no ip address
!
interface FastEthernet0/24
�no ip address
!
interface FastEthernet0/25
�no ip address
!
interface FastEthernet0/26
�no ip address
!
interface FastEthernet0/27
�no ip address
!
interface FastEthernet0/28
�no ip address
!
interface FastEthernet0/29
�no ip address
!
interface FastEthernet0/30
�no ip address
!
interface FastEthernet0/31
�no ip address
!
interface FastEthernet0/32
�no ip address
!
interface FastEthernet0/33
�no ip address
!
interface FastEthernet0/34
�no ip address
!
interface FastEthernet0/35
�no ip address
!
interface FastEthernet0/36
�no ip address
!
interface FastEthernet0/37
�no ip address
!
interface FastEthernet0/38
�no ip address
!
interface FastEthernet0/39
�no ip address
!
interface FastEthernet0/40
�no ip address
!
interface FastEthernet0/41
�no ip address
!
interface FastEthernet0/42
�no ip address
!
interface FastEthernet0/43
�no ip address
!
interface FastEthernet0/44
�no ip address
!
interface FastEthernet0/45
�no ip address
!
interface FastEthernet0/46
�no ip address
!
interface FastEthernet0/47
�no ip address
!
interface FastEthernet0/48


!--- On this WCCP implementation, only input redirection is allowed.


�no switchport
�ip address 1.1.1.1 255.255.255.0
�ip wccp web-cache redirect in
!
interface GigabitEthernet0/1
�no ip address
!
interface GigabitEthernet0/2
�no ip address
!
!



!--- This access list 100, if associated as 'in' to Fa0/48, 
!--- can show if packets are reaching the Catalyst from the PC client.


access-list 100 permit tcp any eq www any log
access-list 100 permit tcp any any eq www log

access-list 100 permit any any any log

ip default-gateway 10.48.66.1
ip classless
ip route 0.0.0.0 0.0.0.0 10.48.66.1
ip http server
!
!
!
!
line con 0
�exec-timeout 0 0
�password cisco
line vty 0 4
�exec-timeout 0 0
�password ww
�login
line vty 5 15
�login
!
end

GIULIO#

内容引擎560
agra#sh run 
  hostname agra 
  ! 
  ! 
  ! 
  ! 
  ! 


!--- The Standby feature on the Content Engine  is optional in the 
!--- implementation, but it works fine with the Catalyst.

  interface FastEthernet 0/0 
  �ip address 122.122.122.1 255.255.255.0 
  �standby 1 ip 33.33.33.31 255.255.255.0
  �standby 1 priority 120 
  �no autosense 
  �bandwidth 100 
  �full-duplex 
  �exit 
  interface FastEthernet 0/1 
  �ip address 122.122.123.1 255.255.255.0 
  �standby 1 ip 33.33.33.31 255.255.255.0  
  �standby 1 priority 80 
  �no autosense 
  �bandwidth 100 
  �full-duplex 
  �exit 
  ! 
  ! 
  ip default-gateway 33.33.33.33 
  ! 
  primary-interface FastEthernet 0/0 
  ! 
  ! 
  ! 
  ! 


!--- The logging console is only used for troubleshooting, as it may cause 
!-- high CPU on the Content Engine in production.
� 
  logging console enable 
  logging console priority debug 
  ! 
  ! 
  ! 
  ! 
  ! 
  ! 
  ! 
  
  wccp router-list 1 33.33.33.33 
  wccp web-cache router-list-num 1 l2-redirect 

!--- The assign-method-strict is not necessary.

  wccp version 2 


!--- Catalyst 3550 implementation of WCCP allows only Layer 2 redirection, 
!--- and not generic routing encapsulation (GRE). In addition, only TCP 
!--- port 80 may be redirected. 

  ! 
  ! 
  username admin password 1 bVmDmMMmZAPjY 
  username admin privilege 15 
  ! 
  ! 
  ! 
  ! 
  authentication login local enable primary 
  authentication configuration local enable primary 
  ! 
  !               

agra#

验证与故障排除

此部分提供您能使用确认的信息您的配置是和进一步排除故障的工作正常。

  • 为了启用在Catalyst交换机的WCCP重定向,您需要发出sdm prefer extended-match命令(和重新启动交换机)。通过发出show sdm prefer命令,您能发现TCAM/ASIC硬件的实际部署在交换机的。

  • 当WCCP的实施在Catalyst 3550的被限制,发出show ip wccp命令不显示重定向的数据包数量。此索引依然是在0。并且,同一Catalyst也许有多个内容引擎在缓存场,但是仅一WCCP Catalyst允许。输出show ip wccp命令在Catalyst如下所示。

    GIULIO#sh ip wccp 
    
    Global WCCP information: 
      ��� Router information: 
      ������� Router Identifier:������������������  33.33.33.33 
      ������� Protocol Version:�������������������  2.0 
    
    ��� Service Identifier: web-cache 
      ������� Number of Cache Engines:�������������  1 
      ������� Number of routers:���������������������1 
      ������� Total Packets Redirected:��������������0 
      ������� Redirect access-list:����������������  -none- 
      ������� Total Packets Denied Redirect:�������  0 
      ������� Total Packets Unassigned:��������������0 
      ������� Group access-list:�������������������  -none- 
      ������� Total Messages Denied to Group:���     0 
      ������� Total Authentication failures:���������0 
      �
                                  Statistics - Requests
                                                    Total             % of Requests
                                ---------------------------------------------------
         Total Received Requests:                       4                         -
                  Forced Reloads:                       0                       0.0
                   Client Errors:                       0                       0.0
                   Server Errors:                       0                       0.0
             URL Blocked (Reset):                       0                       0.0
                     URL Blocked:                       0                       0.0
          Sent to Outgoing Proxy:                       0                       0.0
    Failures from Outgoing Proxy:                       0                       0.0
    Excluded from Outgoing Proxy:                       0                       0.0
                 ICP Client Hits:                       0                       0.0
                 ICP Server Hits:                       0                       0.0
                   If-Range Hits:                       0                       0.0
               HTTP 0.9 Requests:                       4                     100.0
               HTTP 1.0 Requests:                       0                       0.0
               HTTP 1.1 Requests:                       0                       0.0
           HTTP Unknown Requests:                       0                       0.0
               Non HTTP Requests:                       0                       0.0
              Non HTTP Responses:                       0                       0.0
          Chunked HTTP Responses:                       0                       0.0
            Http Miss Due To DNS:                       0                       0.0
         Http Deletes Due To DNS:                       0                       0.0
    
    
    agra#sho stat http savings 
                             Statistics - Savings
                            Requests                          Bytes
             -----------------------------------------------------------
      Total:                       4                           3132
       Hits:                       3                           2349
       Miss:                       1                            783
    Savings:                    75.0 %                         75.0 %
    
    
    agra#sho stat netstat 
    Active Internet connections (w/o servers)
    Proto Recv-Q Send-Q Local Address           Foreign Address         State      
    tcp        0      0 33.33.33.31:8999        10.48.66.123:2011       ESTABLISHED 
    
    udp        0      0 127.0.0.1:10000         127.0.0.1:32346         ESTABLISHED 
    
    udp        0      0 127.0.0.1:10001         127.0.0.1:32347         ESTABLISHED 
    
    udp        0      0 127.0.0.1:10002         127.0.0.1:32345         ESTABLISHED
  • 如果访问列表100应用对在快速以太网0/48的入站数据流,应该传送信息类似于以下到客户端浏览器发送的每HTTP数据包的控制台对互联网:

    *Mar� 1 04:19:09: %SEC-6-IPACCESSLOGP: list 109 permitted tcp 1.1.1.2(1828)    -> 10.48.66.125(80), 1 packet �    
    
    
  • 在内容引擎,以下命令允许您由内容引擎发现发送的数据包编号:

    • show statistics http requests

    • show statistics netstat

    • 显示统计信息http储蓄

    所有信息包被派出对互联网有一源IP地址相同与内容引擎,除了,当内容引擎在旁路模式时,并且请求由客户端PC源IP地址发送。

相关的思科支持社区讨论

思科支持社区是您提问、解答问题、分享建议以及与工作伙伴协作的论坛。


相关信息


Document ID: 29461