2 WAE WCCP l2 only 1 gets traffic

Hello

I have 1 router WAN and 2 devices configured in WCCP. The configuration works very well except that only the first WAVE that sees the router and set the WCCP receives traffic. What I mean is that the two waves see the router and vice versa. When I set the WCCP link, the first WAVE to his establishment becomes WAE DRIVING and another doesn't get it packages. If I disconnect the WAE lead or change its configuration WCCP and put again, WCCP switches the other WAE and the other is now exclusevly receiving traffic. No load balancing is reached.

First of all here is my configuration:

1 router WAN Cisco ISR G2 2911 IOS 15.2 (1) T

WAAS in WAVE-274 cisco 2 version 4.3.3 configured in the same way for WCCP.

Router IP: 10.x.y.1/22

WAVE IPs: 10.x.y.9 and 10.x.y.7 22 and default gateway is the router 10.x.y.1

Users are on the same network 10.x.y.0/22 (is that a problem? I read in a WAAS setup guide the WAE cannot be in the same network as the users)

Second, here is the relevant config:

Router:

IP cef

WCCP IP 61

WCCP IP 62

interface GigabitEthernet0/0

Description * LAN connection *.

61 IP wccp redirect in

IP addr 10.x.y.1 255.255.252.0

!

interface GigabitEthernet0/1

Description * WAN connection *.

62 IP wccp redirect in

addr IP WAN_IP...

!

WAAS:

primary-interface GigabitEthernet 1/0

interface GigabitEthernet 1/0

IP address 10.x.y.9 255.255.252.0 (et.7 during the second WAVE)

!

interface InlineGroup 1/1

Shutdown

!

WCCP router-list 1 10.x.y.1

WCCP promiscuity of tcp router-list-num 1 redirect l2 l2-back

WCCP version 2

When I do the following on the router:

show ip wccp 61 detail

or see the ip wccp 62 retail

I see:

The WCCP customer information:

WCCP Client ID: 10.x.y.7

Protocol Version: 2.0

Status: usable

Redirect: L2

Package return: L2

Assignment: HASH

Initial hash Info: 00000000000000000000000000000000

FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Assigned hash of information: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

00000000000000000000000000000000

Allocation of hash: 128 (50.00%)

S/w redirected packets: 103912

Connection time: 03:34:05

GRE has bypassed the packages

Process: 0

CEF:                   0

Errors: 0

WCCP Client ID: 10.x.y.9

Protocol Version: 2.0

Status: usable

Redirect: L2

Package return: L2

Assignment: HASH

Initial hash of information: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

00000000000000000000000000000000

Assigned to Hash Info: 00000000000000000000000000000000

FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

Allocation of hash: 128 (50.00%)

S/w redirected packets: 0

Connection time: 01:46:24

GRE has bypassed the packages

Process: 0

CEF:                   0

Errors: 0

On the WAAS, settings of assignment of WCCP for load balancing is the default: hash. (Hash on Source IP (Service, 61) :))

the method of evacuation is IP forwarding

I have multiple connections from different source IP addresses and somehow they all end up on the same WAE axe:

ConnID Source IP: IP port: port Dest PeerID Accel RR

360 10.x.y.3:49463 10.q.w.36:52732 XX TMDL 16.1%

373 10.x.y.4:55005 10.q.w.36:52732 XX TMDL 24.8%

I checked several places and read the best practices; support for router platform... and it seems that the config is OK

http://www.Cisco.com/en/us/prod/collateral/contnetw/ps5680/ps6870/white_paper_c11-608042.html

Any ideas?

Thank you

Patrick


That question has been in the session 'ask the expert ':

https://supportforums.Cisco.com/message/3482826

Tags: Cisco DataCenter

Similar Questions

  • Only to get the pointer-nothing else; cannot be on/off switch. So, I use the socket on the wall?

    Can not get the computer; only to get the pointer so I turned off with the switch on the wall socket?

    Hello

    1. What is the brand and model of the computer you're using?
    2. what operating system is installed on the computer?
    3. any changes to the computer before the show?

     
    You can disconnect all external devices except the keyboard and mouse and check if you are able to boot to the desktop
     
    Method 1:
    I suggest you to start the computer in safe mode. Let us know if you face the issue in safe mode or not. Check out the link below to start the computer in safe mode:
    http://Windows.Microsoft.com/en-us/Windows7/start-your-computer-in-safe-mode
     
    Method 2:
    I suggest you start WinRE (Windows Recovery Environment) and perform the Startup Repair.
     
    To start in WINRE and for more information about Windows RE view the following link.
    http://Windows.Microsoft.com/en-us/Windows7/what-are-the-system-recovery-options-in-Windows-7
     
    Once you start in WINRE try Startup Repair and check if this may help solve the issue, to perform the startup repair using the link below:
    http://Windows.Microsoft.com/en-us/Windows7/Startup-Repair-frequently-asked-questions
     
    Also check out the following link:
     
    I hope this helps!
  • I need help fixing error 340... only, I get this message when I try to send an email... there at - there a way to fix this error free?

    I need help fixing error 340... only, I get this message when I try to send an email... is possible to fix this for free?

    You must ask Yahoo.
     
  • Has anyone else tried to get the English version of Windows 7 ISO of the MS download site? I have a valid key and the website let me only to get the Korean or French version

    Has anyone else tried to get the English version of Windows 7 ISO of the MS download site?  I have a valid key and the website let me only to get the Korean or French version.  English useful MS tech 'UN' told me that the English version is no longer supported and should I install one of these versions and then download the language package and install it.  Has anyone else been in this position?  It was a horrible experience with the online chat with technical support.

    Marcus,

    Some people have persevered with contact support via the link on the MS download site and have finally received the download links temporary for an English version.  [You will find these discussions if you looking for the Korean forum as most people in your situation included that word in their title of the question.  I don't remember one of these threads containing any additional info that would be of no use to you.]

    If that does not appeal to you & you still cannot find your original installation disks, then buy a disc-relocation

    1. Amazon now stock reinstallation DVD for just a quid [the link is for their UK site site American stocks also to them].
    2. These seem to be exactly what they claim they do not have a product key and that they are specifically described as being for reassembly only - in other words, they are not an attempt to distribute pirated Windows.
    3. You must use your own product key for activation.
    4. Make sure order you Windows 7 edition {Home Premium etc.} that is identified on your certificate of authenticity [the label that contains your product key].
    5. Some of the sellers provide 32 bit and 64 bit DVD, while others provide one or the other.  So make sure you order the right kind.
    6. These discs can do everything what a system repair disc can do, so you'll not need to make a separately.
  • Implementation Oracle DB software only, runInstaller gets permission denied.

    When you run Provisioning software Oracle DB only, runInstaller gets permission denied.

    / tmp/SIDB-1406037549676/Database/runInstaller-waitForCompletion - silent - noconfig-local - ignorePrereq - ignoreSysPrereqs - responsefile "/ tmp//SIDB-1406037549676/deploy.rsp" ORACLE_HOME_NAME = "Orasidb11g_home1_2014_07_22_09_59".

    SH: / tmp/SIDB-1406037549676/database/runInstaller: permission denied

    ERROR DURING INSTALLATION OF THE DB

    Users provided in the wizard configuration (oracle and oracle with sudo privileges) have been tested through OEM and are valid.

    The permissions on the runInstaller are:

    7867144 - rw - r - r-. 1 oracle oracle 3.2 K 15 August 2009/tmp/SIDB-1406037549676/database/runInstaller

    It seems that I am perplexed crowd of oracle.

  • I installed acrobat reader in window10 and demoted to the 8.1 window. After downgeading 8.1, acrobat reader does not run and also do not uninstall and reinstall. Only, I get the error message. What should I do?

    I installed acrobat reader in window10 and demoted to the 8.1 window. After downgeading 8.1, acrobat reader does not run and also do not uninstall and reinstall. Only, I get the error message. What should I do?

    Hi soyoungl9536964,

    Please try to run the cleanup tool "Download Adobe Reader and Acrobat tool - Adobe Labs" on your machine to remove all traces of the reader.

    Then, restart your machine and install the latest version of the player from here:

    Adobe Acrobat Reader DC install for all versions

    Let me know if any problem will persist.

    Kind regards

    Christian

  • I reside in the UAE UNITED from now, but in 6 months, I can move to another country, so my plan of photography 1 year will be? I need to buy only after getting a response to my request. Thank you

    I reside in the UAE UNITED from now, but in 6 months, I can move to another country, so my plan of photography 1 year will be? I need to buy only after getting a response to my request. Thank you

    Oh, one last thing, or is - it possible to buy sitting in the UNITED Arab Emirates, but giving details on the country that I will propose to (Canada) (connecting to Adobe, Canada)

    Hello

    You are fine as long as the country of your Adobe ID and country of your credit card match; and the country is one that we support for a creative cloud subscription. The fact that you are in a different country now is ok.

    Kind regards

    Sheena

  • I am a member of the CC, but only to get a free trial option once downloaded

    I am a member of the CC, but only to get a free trial option once downloaded.

    How can I fix it? Anyone

    Greg.Teague please see Sign in, activation or connection errors. CC, CS6, CS5.5 - http://helpx.adobe.com/x-productkb/policy-pricing/activation-network-issues.html for more information on how to solve the connection error preventing activation.

  • VPN site to Site only in passing traffic in one direction

    Hi guys

    I have a little problem, I hope you can help me with.

    I have a site at LAN VPN connection upward and running between a router and a Cisco ASA 5512 X Cisco 881 Zone firewall running. The tunnel is OK.

    The router:

    MAGURELE-R #sh crypto isa his
    IPv4 Crypto ISAKMP Security Association
    DST CBC conn-State id
    89.45.179.202 89.249.1.238 QM_IDLE 2098 ACTIVE

    IPv6 Crypto ISAKMP Security Association

    MAGURELE-R #.

    MAGURELE-R #sh crypto ipsec his

    Interface: FastEthernet4
    Tag crypto map: outside_map, local addr 89.45.179.202

    protégé of the vrf: (none)
    local ident (addr, mask, prot, port): (192.168.201.0/255.255.255.0/0/0)
    Remote ident (addr, mask, prot, port): (10.2.0.0/255.255.255.0/0/0)
    current_peer 89.249.1.238 port 500
    LICENCE, flags is {origin_is_acl},
    #pkts program: encrypt 0, #pkts: 0, #pkts digest: 0
    #pkts decaps: 15841, #pkts decrypt: 15841, #pkts check: 15841
    compressed #pkts: 0, unzipped #pkts: 0
    #pkts uncompressed: 0, #pkts compr. has failed: 0
    #pkts not unpacked: 0, #pkts decompress failed: 0
    Errors #send 0, #recv 0 errors

    local crypto endpt. : 89.45.179.202, remote Start crypto. : 89.249.1.238
    Path mtu 1500, mtu 1500 ip, ip mtu IDB FastEthernet4
    current outbound SPI: 0x6B607F06 (1801486086)
    PFS (Y/N): N, Diffie-Hellman group: no

    SAS of the esp on arrival:
    SPI: 0x53D22529 (1406281001)
    transform: aes - esp esp-md5-hmac.
    running parameters = {Tunnel}
    Conn ID: 9, flow_id: VPN:9 on board, sibling_flags 80000040, crypto card: outside_map
    calendar of his: service life remaining (k/s) key: (4284358/2828)
    Size IV: 16 bytes
    support for replay detection: Y
    Status: ACTIVE (ACTIVE)

    the arrival ah sas:

    SAS of the CFP on arrival:

    outgoing esp sas:
    SPI: 0x6B607F06 (1801486086)
    transform: aes - esp esp-md5-hmac.
    running parameters = {Tunnel}
    Conn ID: 10, flow_id: VPN:10 on board, sibling_flags 80000040, crypto card: outside_map
    calendar of his: service life remaining (k/s) key: (4284359/2828)
    Size IV: 16 bytes
    support for replay detection: Y
    Status: ACTIVE (ACTIVE)

    outgoing ah sas:

    outgoing CFP sas:
    MAGURELE-R #.

    I do not know the settings VPN is identical in both ends. But only the traffic over the side ASA is spent.

    I can see that traffic is hollow coming from the side ASA on the router:

    MAGURELE-R #sh connect | I have 10.2.0.254
    * 11:43:25.785 14 April: % s-6-IPACCESSLOGDP: list customer_access allowed icmp 10.2.0.254-> 192.168.201.1 (0/0), 1 packet
    * 11:48:52.025 14 April: % s-6-IPACCESSLOGDP: list customer_access allowed icmp 10.2.0.254-> 192.168.201.1 (0/0), 3 sachets
    * 11:58:52.025 14 April: % s-6-IPACCESSLOGDP: list customer_access allowed icmp 10.2.0.254-> 192.168.201.1 (0/0), 3 sachets
    MAGURELE-R #.

    But never any traffic of retur.

    Router IOS is: Cisco IOS software, software C880 (C880DATA-UNIVERSALK9-M), Version 15.2 (4) M2, VERSION of the SOFTWARE (fc2)

    I'm a little lost here. What could be the problem?

    Concerning

    Mikkel

    Had a look on your config. It seems that all trades are natted, according to me, it's why the traffic in return are not working/not can not get to the ASA. You must ensure traffic of 192.168.201.0/24 for 10.2.0.0/24 are not natted router.

    Change your ACL #199 as follows:

     access-list 199 deny ip 192.168.201.0 0.0.0.255 10.2.0.0 0.0.0.255 access-list 199 permit ip any any

    HTH,

  • Firefox only opens - get error message "this operation has been cancalled due to restrictions in effect on this account... »

    I can't open firefox - everytime I try I get the above error message. It started after no apparent change or updates to my system, just a normal life stops. I tried to change the .htm, .html etc. register file names and reinstall as suggested, but it does not work. The only way I can open firefox after I reinstalled and it automatically launches a browser.

    I can open firefox in a new user account that suggests something has changed in the account that I usually use, but I have no idea what since I didn't do myself any changes and you see nothing that suggests that it blocks firefox to open. I ran a virus scan and it is to come clean.

    Does anyone have any suggestions? I would be very grateful for help.

    Thank you.

    Thank you both for your responses. I had tried all possible ways of opening firefox, including the direct use of firefox.exe and had also tried the suggestions in the link above, but had previously worked.

    Having lived every suggestion I could find about the problem I'm afraid, I gave up looking and did a system restore that solved the problem!

  • do not get traffic of ASA AIP-SSM-20.

    Hello

    We have Cisco ASA 5510, and we recently added Cisco AIP - SSM. We have configured the sensor and did as well as ASA also but we don't get newspapers in ADM please help me on this.

    Please find attached Sersor Configuration and version of the IPS and ASA module.

    Kind regards

    Nathalie. M

    On the SAA, you need

    access-list aip-acl extended deny ip any any
    class-map aip-class
    match access-list aip-acl
    policy-map global_policy
    class aip-class
      ips inline fail-open
    service-policy global_policy global

    so that it sends traffic to the agreement in principle for inspection.

    I hope it helps.

    PK

  • Windows 7 installation problems, only to get less flashing score by putting in the installation CD

    I got my laptop fixed recently, the guy installed windows vista 64-bit, but he missed and windows does more (barely). Someone bought me a new drive for 32-bit windows 7. I get the disc into my CD drive and boot up my laptop, it goes to a black screen for a few minutes with only one under score flashing (_), finally he logs on me and tells me to activate my windows vista or is a black screen that says "Partition: 1" a few other things and he says "/ noexecute = optin", I hit enter and it connects me on vista again.

    I want to use my laptop, how to install windows 7 correctly?

    In the system Bios set you the cd drive as the first device to boot, then with the victory of dvd in the player you re - start and follow the instructions.

    Or when you first start the laptop maybe there's an option on the first screen to select boot from cd/dvd

    Of course, it depends on if your laptop unknown supports win7

  • When the company's clients try to download Creative Cloud using a paid only license get trial versions

    We have an enterprise Cloud creative license.  When some of our users to our Adobe Enterprise Portal and their company ID login allows you to download the product, they get only trial versions offered.  We had manually uninstall them other former Adobe products first, we confirmed that the correct E-mail is used, and we tried to create a new Adobe ID.  We are unable to install the full product even if our licenses are paid.  Any ideas why this happens?

    Screen Shot 2015-12-08 at 10.27.47 AM.png

    Please refer to: FAQ: what should I do if I have a subscription, but my application acts as if I had a trial?

  • On Firefox only, I get problems with a few Joomla sites using the JA_purity template. Error: has not been loaded because its MIME type "text/html", is not "text /".

    Hello

    I updated Firefox on my computer for 13.01. Now, he struggles to read about 2 sites - both are Joomla and based on the model of JA-purity. What happens is that it fails to load the CSS files to do with the side and the top of the Joomla site menus. The file comes up with this:

    because its MIME type "text/html", is not "text/css".
    Source file: http://extensions.joomla.org/
    Line: 0

    This error does not appear with other browsers and it displays perfectly in fact in all other browsers.

    I'm new on this but I read the following article and think it could be my problem

    https://developer.Mozilla.org/en/Incorrect_MIME_Type_for_CSS_Files

    Where Im stuck, it's that I did not fully understand what to make of this article, if I could get a step by step guide to fix this problem that would be greatly appreciated.

    I apologize in advance if the answer lies somewhere here - I have had a look and couldn't get out.

    Thank you
    Alex

    I don't see that the error and all style sheets seem to load.

    Reload Web pages, and ignore the cache.

    • Hold SHIFT and click reload.
    • Press 'Ctrl + F5' or 'Ctrl + Shift + R' (Windows, Linux)
    • Press 'Cmd + Shift + R' (MAC)

    Clear the cache and cookies from sites that cause problems.

    "Clear the Cache":

    • Tools > Options > advanced > network > storage (Cache) offline: 'clear now '.

    'Delete Cookies' sites causing problems:

    • Tools > Options > privacy > Cookies: "show the Cookies".
  • When I try to put the background that is not color. only, I get a black screen.

    everything about the definition of the background. accept all I get is a black screen.

    Hi Troy,

    MSE affect the definition of the background or order so you can exclude as the cause.

    When did start?  If the latter, try a system restore to before it started to see if that helps. If you use Windows 7, seehttp://www.sevenforums.com/tutorials/700-system-restore.html. If you are using Vista, seehttp://www.howtogeek.com/howto/windows-vista/using-windows-vista-system-restore/. If you are using XP, seehttp://support.microsoft.com/kb/306084. Sometimes this simple process made the rounds and sometimes that doesn't help - but it is easy and worth if she has recently begun.

    If this does not work, try to update the driver, firmware, or software for your video card and monitor by checking with the manufacturer of the computer to get the latest for your specific computer model and (your preference based on the serial number), as well as your version of Windows.  Be updated via Device Manager, save the changes, reboot and see if that helps.

    If this does not work, go to control panel / customization and a more basic theme or background plus standard (and other similar adjustments) try to see if you can find one that works (or partially to work).  Then you will know that the question is somewhere in this configuration and it can take time to find something suitable for you.

    I hope this helps.

    Good luck!

    Kosh

Maybe you are looking for