WSA FAQ: How do you troubleshoot WCCP between a Cisco WSA and a Cisco router/switch?

Available Languages

Download Options

  • PDF     (7.8 KB)
    View with Adobe Reader on a variety of devices
Updated:July 1, 2014
Document ID:117870

Bias-Free Language

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.

Introduction

This document describes how to troubleshoot Web Cache Communication Protocol (WCCP) between a Cisco Web Security Appliance (WSA) and a Cisco router.

WSA FAQ: How do you troubleshoot WCCP between a Cisco WSA and a Cisco router/switch?

When WCCP packet redirection is not working between the WSA and a Cisco router, the first place to look is the WCCP logs on the WSA. By default, there are no WCCP log subscriptions enabled. Follow these steps to enable the WCCP logs and change the logging level.

  1. From the CLI or the GUI of the WSA, create a new log subscription.
  2. Select WCCP Module Logs as the log type.
  3. Select Debug as the Log Level.
  4. Submit and commit the changes.

Once the logs are configured, WCCP related information can be viewed in the WCCP log.

Additional troubleshooting may be required from the Cisco router/switch if the issue can not be identified from the WCCP log on the WSA. Here is a table of commands that can be run on a Cisco router/switch to view WCCP information.

Router Commands

Command  Result
show ip wccp Displays global WCCP statistics
show ip wccp <service ID> Displays information about all known Content Engines 
show ip interface   Displays whether web cache redirecting is enabled on an interface
show ip wccp / show ip wccp <service ID>  Displays a count of the number of packets redirected
clear ip wccp Clears the counter displayed by the show ip wccp and show ip wccp web-caches


WCCP Debug and Detail Commands

 Debug Command  Result
show ip wccp web-cache detail Display cache server and WCCP router statistics for a particular service group
show ip wccp <service ID> view  Displays service group information
debug ip wccp events Displays information about significant WCCP events
debug ip wccp packets Displays information about every WCCP packet received or sent by the router


Special Commands for Debugging (IP Spoofing, etc.)

 Command  Result
show ip wccp <service ID> service  Shows more data than 'detail.' Hidden command

Related Information

Revision History

Revision Publish Date Comments
1.0
01-Jul-2014
Initial Release
TAC Authored

Contributed by Cisco Engineers

  • Josh Wolfer and Jeff Richmond
    Cisco TAC Engineers.

Was this Document Helpful?

FeedbackFeedback

Contact Cisco

This Document Applies to These Products