Interception of WAAS WCCP on 6509

Similar Questions

• Best practices with streams WCCP of WAAS

  Hello

  I have a module WAAS SRE 910 in 2911 router that intercepts packets this router with WCCP.

  All packets are received by the external interface (gi 0/2, connected to a switch with port configured in vlan WCCP) and are sent back to the router via the internal interface (IG 1/0 connected directly to the router):

  WAAS # sh interface IG 1/0

  Internet address: 10.0.1.1

  Subnet mask: 255.255.255.0

  State of the admin: to the top

  Operating status: running

  Maximum transfer unit size: 1500

  Entry errors: 0

  Entry packets dropped: 0

  Packets received: 20631

  Output errors: 0

  Output packets dropped: 0

  Load interval: 30

  Input rate: 239 bps, 0 packets/s

  Output: 3270892 bps, 592 packets/s

  Packets sent: 110062

  Auto-negotiation: on

  Full Duplex: Yes

  Speed: 1000 Mbit/s

  WAAS # sh interface 2/0 gi

  Internet address: 10.0.2.1

  Subnet mask: 255.255.255.0

  State of the admin: to the top

  Operating status: running

  Maximum transfer unit size: 1500

  Entry errors: 0

  Entry packets dropped: 0

  Packets received: 86558

  Output errors: 0

  Output packets dropped: 0

  Load interval: 30

  Input rate: 2519130 bps, 579 packets/s

  Output rate: 3431 bps, 2 packets/sec

  Packets sent: 1580

  Auto-negotiation: on

  Full Duplex: Yes

  Speed: 100 Mbps

  The default route configured in module WAAS is 0.0.0.0/0 to 10.0.1.254 (interface of the router).

  It would be better that the packets leave module WAAS of the external interface (instead of the internal interface)?

  Is there a best practice recommended by Cisco on this?

  Thank you.

  Stéphane

  Hi Stephane,

  That's right, internal interface means SM1/0.

  The best way is to have traffic at the start of the internal interface module so that we are sure, it hits the redirect exclude statement and that we do not have the crest of the loops because WCCP.

  Kind regards

  Nicolas

• Redirect WCCP and Performance hit on 3750

  Maybe it's more of a "resizing" qtn more than anything else.

  Yesterday, I activated wccp redirect on a stack of distribution has collapsed/3750 of base, in an office with 150users. WAI is model 612.

  As soon as the configuration of the redirect has been applied, I found the network slowing significantly and received an event alert CPU of NEM, reports that CPU on 3750 stack exceeds the set threshold (65%). Put the threshold on the one hand, the cli is terribly slow and so I removed immediately redirect to the relevant interfaces. He bought the network back to normal in terms of performance.

  Is this a calibration problem or maybe a bad configuration or something else...?

  
  

  WAE:

  EDGE-WAE-01 #show worm
  Cisco Wide Area Application Services (WAAS) software
  Copyright (c) 1999-2009 by Cisco Systems, Inc.
  Cisco Wide Area Application Services Software Release 4.1.3 (build b55 April 18, 2009)
  Version: oe612 - 4.1.3.55

  00:13:45 compiled April 18, 2009 by cnbuild

  System has been restarted on Tue Apr 27 04:30:10 2010.
  The system was 6 hours, 21 minutes, 0 seconds.

  EDGE-WAE-01 #show inv

  PID: WAE-612-K9 VID: 0 SN: KQLLZBL
  EDGE-WAE-01 #sh worm
  Cisco Wide Area Application Services (WAAS) software
  Copyright (c) 1999-2009 by Cisco Systems, Inc.
  Cisco Wide Area Application Services Software Release 4.1.3 (build b55 April 18, 2009)
  Version: oe612 - 4.1.3.55

  00:13:45 compiled April 18, 2009 by cnbuild

  System has been restarted on Tue Apr 27 04:30:10 2010.
  The system was 6 hours, 31 minutes, 8 seconds.

  EDGE-WAE-01 # poster run | WCCP Inc.

  WCCP router-list of the 1 10.10.50.1
  WCCP promiscuity of tcp router-list-num 1 l2-redirect
  WCCP version 2
  !
  evacuation-method interception-method wccp negotiated return

  !

  ---------------------------------------------------------------------------------------

  3750:

  edge-cre-01 #show sdm prefer
  The current model is "routing Office" model.
  The chosen model optimizes resources in
  the switch to sustain this level of features for
  8 routed interfaces and 1024 VLANS.

  !

  processor of WS-C3750G-24TS-1U (PowerPC405) Cisco (revision F0) with K 131072 bytes of memory.

  512K bytes of memory simulated by flash not volatile configuration.

  SW Version SW Image model switch ports
  ------ ----- -----              ----------            ----------
  * WS-C3750G-24TS-1U 12.2 1 28 (50) SE3 C3750-IPSERVICESK9-M
  2 28 WS-C3750G-24TS-1U 12.2 SE3 (50) C3750-IPSERVICESK9-M

  Switch 02
  ---------------

  Switch availability: 3 days, 4 hours, 39 minutes

  Configuration register is 0xF

  edge-cre-01 # poster run | WCCP Inc.
  61 TN-WAAS-OUT list redirect IP WCCP
  62 TN-WAAS-IN redirect-list IP WCCP

  !

  edge-cre-01 #show run | start the standard TN-WAAS-OUT ip access list

  Standard TN-WAAS-OUT of access list IP
  10.10.10.0 permit 0.0.1.255
  permit 10.10.25.0 0.0.0.255
  !
  TN-WAAS-IN extended IP access list
  permit tcp 10.20.0.0 0.1.255.255 10.10.10.0 0.0.1.255
  permit tcp 10.20.0.0 0.1.255.255 10.10.25.0 0.0.0.255
  permit tcp 10.128.16.0 0.0.0.255 10.10.10.0 0.0.1.255

  Here is a list of best practices to follow to do forwarding of wccp on hardware platforms such as the 3750.  I found it in the link below.

  http://www.Cisco.com/Web/services/news/ts_newsletter/tech/ChalkTalk/archives/200806.html

  The following best practices should be applied to the implementation of WCCP on a hardware platform:

  • L2 transfer
  • Assignment of mask
  • Interception of incoming traffic
  • No ' exclude ip wccp redirect in.

  Your configuration "output method negotiated return of interception-method wccp" will appeal to a WCCP GRE tunnel to create of the 3750 to CAI.  All traffic will be then be redirected a software based on this configuration line.

  "Game of negotiated return as the method of evacuation. With this specification, the Cisco WAE uses GRE to return traffic redirected to the router intercepting. Note: in this case, WCCP negotiated WCCP GRE return method. »

  Found here: https://www.cisco.com/en/US/prod/collateral/contnetw/ps5680/ps6870/prod_white_paper0900aecd806d976a_ps6474_Products_White_Paper.html

  I'd stick to best practices that Zach has described in the link at the beginning of this post.  It's a very well written on the WCCP redirect article.

  Concerning

• command ' ip wccp redirect exclude in. "

  Hi all, I'll have trouble understanding how the command ' ip wccp redirect exclude in "and hoped someone would be able to give me more information on this subject.

  I know that it must be on the interface/subnet where WAAS is connected when "redirect" is used on another interface. I also know that it is used to prevent forwarding loops. What I don't understand is, why it is only necessary when 'redirect' is used, and not when "redirect to" is used?

  Thank you all.

  Hello

  Outbound loops are caused because, before the traffic is sent out of  an interface, it is first redirected back in to the network to the WAAS  for optimisation. Once optimisation is done, the WAAS then sends the  traffic back to the router. If the "ip wccp redirect exclude in" command  is not used on the interface that the WAAS is  connected to, when the traffic reaches the router's interface that has  the outbound redirection, it will then re direct the traffic back to the  WAAS and the whole process will start again (and will continue to  loop).
  If,  however, the "ip wccp redirect exclude in" command was put on the  router's interface that connects to the WAAS, when the WAAS sent the  optimised traffic back to the router, instead of the router sending it  back to the WAAS again, the router will know that the traffic should not  be optimised (or re-optimised in this case) so it sends the data out of  the network towards the WAAS at the remote site.
  

  Your understanding is 100% correct. This is precisely what is happening.

  Now, in  regards to inbound redirection, the reason why the "ip wccp redirect  exclude in" command (or a similar one) isn't required for inbound  redirection is because the traffic never reaches a redirected interface  twice, therefore a loop cannot form. For example, with outbound  redirection, the traffic hits the outbound interface, then gets sent to  the WAAS, then gets sent back to that same outbound interface that has  the redirection on it. However, with inbound redirection, the traffic  hits the inbound interface, it is then sent to the WAAS, the WAAS then  sends it back to the router and instead of the traffic being sent back  to the same interface that intercepted the traffic (as is the case with  outbound redirection), the traffic is instead sent out a different  interface on the router and therefore it is not intercepted again.

  Again, it is correct.

  Concerning

  Daniel

• SRI-WAAS and AppNav

  Hi all

  Situation is the following. I have 2 routers x 4351-AX with the SSD upgrades and memory etc. Let's finish MPLS and other internet DMVPN or similar and both with RSR-WAAS configured.

  Is there an argument to have these set up a stand-alone WAAS devices or should they be in a cluster of AppNav? There are advantages and disadvantages to each method here?

  As Akamai Connect running on just the unit facing internet, does that mean it shouldn't be part of a cluster of AppNav?

  Thanks in advance.

  You should have configured cluster AppNav SRI-WAAS part. You can not have WCCP on the single Appnav SRI-WAAS interception.

  The new WAAS codes may work with Akamai to connect.

  http://www.Cisco.com/c/en/us/solutions/collateral/enterprise-networks/in...

  http://www.Cisco.com/c/en/us/TD/docs/app_ntwk_services/WAAS/WAAS/V551/No...

• SRI-WAAS with two routers

  Hello!

  Is it possible to have two routers (including one with RSR-WAAS and the other without) on a remote site router without ISR-WAAS to use the ISR-WAAS of the other router? (I have only finddual router with dual WAAS SRI in the CVD).

  Concerning

  Michael

  Hi Michael,

  Yes it is possible.

  However, the Redirect method depends on what type of router without ISR-WAAS is:

  another report of research international-4000:

  You can use AppNav (the two routers in the same groups of Application Controller & the SRI-WAAS as the sole member af of the AV/Waas node group).

  almost any other router:

  You can use WCCP on both routers redirecting to the SRI-WAAS.

  Best regards

  Finn

• Problem WCCP or routing

  Hello

  We have two centres of data logical LAN even.

  Two routers ISP and two WAE 674 and the help of WCCP "evacuation-method negotiated return of interception-method wccp.

  See the attached file.

  The problem is when one of the interface WAN 'line' falls down, some of the network is not accessible from the side LAN and some.

  We use BGP as routing protocol in the ISP routers.

  Any suggestion for the problem?

  Jan

  

  Hi Jan,

  What is suspect here is the WCCP.

  When you configure, it allocates buckets if you use hash assignment. If you use a mask, it calculates the mask according to your destination / source ip address.

  Now, what I understand is - if WAN fails, some networks is not accessible.

  When LAN goes down, WCCP breaks down and starts running smooth.

  A few questions:

  1. what happens if LAN drops but WAN remains upward? WCCP remains active state / usable?

  2 when WAN breaks down and the remains of the LAN upward, your WCCP is still in PLACE and so it continues to transmit packets of same WAN interface but because this interface is down, the packages ultimately die / gets blackholed.

  3 another speculation is: asymmetric routing. When WAN is down but LAN is in place, you transfer a portion of the traffic off LAN but as WAN falls down, return packets can arrive on a different interface and creates an asymmetric routing.

  To reduce this problem, please enter interface in three stages:

  1 WAN - LAN - UP, down, is accessible from router ID?

  2. IN WAN, LAN - down, is accessible router ID?

  3. WAN downwards, towards the low LAN, is the accessible router ID?

  CLI to capture logs:

  2. show ip wccp
  3 view the details of interface ip wccp
  4 show ip wccp service
  5 show ip wccp details
  6. specify ip wccp internal (*)
  7 show running-config
  8 show ip wccp hash<61 62="">
  9 sh wccp mask tcp-promised
  10 HS tech

  In addition, as you use GRE encapsulation for redirection of WCCP, the router uses the router address IP ID as its IP source address. The router ID IP address is the loopback address higher on the router, or if the loopback interface is not configured, the router ID IP address is the highest address of the physical interfaces. The router address IP ID is used as the source address for redirected packets from the router to the Cisco WAE and accordingly, it is also used as a destination address for the Cisco WAE to the router traffic, therefore, you must be sure that a route is defined between the router Cisco WAE. This is done by configuring a static route on the Cisco WAE to address IP router ID. The router ID can be identified with wccp routers see command on the Cisco WAE.

  As in your case, you have multiple routers, a static route must be added to each router IDs. These router command to configure static routes is:

  WAE (config) # ip route
  Can you please try above and let us know if it works?
  Kind regards.

• WAE WAAS-7341 improved 5.3.3 to 5.3.5 and lost half of corporate communications

  Remote sites running running, 274 s or 674 s.  All 674 s run WCCP, all 274 s inline, main office running "inline" 7341, CM is on a 274 in the main office, it's always about 5.3.5.

  So passage of 5.3.3 to 5.3.5 broke 60% of all corporate communications.  I have since downgraded to 5.3.3 however back, to 5.3.5 all SSL traffic has failed, Exchange e-mail failed, SAP Logon failed and a portion of the CIFS traffic failed.

  I turned off WCCP, in a site remote, everything has worked, on return, everything has failed.  Interfaces of the inline in the main office Shutdown worked.  Downgraded the main office of 5.3.5 to 5.3.3 and all worked, same places running 5.3.5 had no communication problems when the seat was demoted in 5.3.3.

  I like downgraded most of my places to 5.3.3 still 4 5.3.5 running.  Don't know if anyone else had problems in upgrading to 5.3.5 and just wanted to put out there.  I've been on a version more version 4.1.x - 5.3.x and have never had such a complete and total failure, as I had to 5.3.5.  There have been incidents during updates where I lost SSL or had problems with e-mail and there was always a quick work around to solve.  This time, I didn't know how to look for a solution to "the sky is falling!"  And decommissioning took less time than the composition of this post.

  Everyone has upgraded to 5.3.5?  Have you had problems after the upgrade?

  Hello

  Please see the next section of the 5.3.5 release notes.

  I guess your 7341 principal is "inline". There is a known issue with inline card:

  http://www.Cisco.com/c/en/us/TD/docs/app_ntwk_services/WAAS/WAAS/v535/WS...

  5.3.5a version just came out with the fix.

  If you are deploying the WAVE-274/474/574 or WAE-674/7371/7341 devices with a card online as a device of edge or core wide area acceleration engine (WAE), Cisco does not recommend that you upgrade to Wide Area Application Services software Cisco, Version 5.3.5. This can cause data corruption when data are sent to the client. For more information, see CSCun85976 . This does not affect your deployment if you use the WAVE-274/474/574 or WAE-674/7371/7341 devices Cisco WAAS AppNav or with the Communication for the Web (WCCP) Cache Protocol or if you use devices WAVE-294/594/694/7541/7571/8541.

  Hope that helps,

  Patrick Mubarak

  #42150 CCIE (security)

• WAAS in 2921 SRI - G2

  Hi all

  I have a 2921 with a switch module of the ether 16port and need to install the SM - SRE 710 for WAAS.

  2921 G0/1 is the WAN 10.1.1.1 and internal port G1/0 LAN 10.1.2.1

  How can I assign IP addresses to the SRE module so that I can use WCCP to direct traffic to the correct interface.

  Or is this not possible with already installed ESM.

  Hello

  I think it works very well.

  Through the SM0 interface you configure the IP address of router-side (command "ip address... ") as well as the IP address side WAAS ("module of service address ip... ") and WAAS side gateway by default ('service-module ip default-gateway '). You must use a subnet here, which is not used anywhere else on your network. See also here:
  http://www.Cisco.com/c/en/us/TD/docs/routers/access/interfaces/software/feature/guide/ISM-SM-SRE.html#wp1140891

  In order to configure WCCP redirect, that's all that is necessary. Of course, you must also adjust the routing in your networkf to ensure that the new subnet is accessible, you can reach WAAS on the SRE for the purposes of management (including the management of a WAAS CM).

  Side of WAAS would then give you the IP address of router-side of the SM0 interface in the list of WCCP router.

  Kind regards
  Michael

• that waas made, if there is no match on «optimization class-map "and"optimisation of policies"?»

  I was doing a capture of packets on waas, the OCAP shows ip address source & destination but also the flow of two-way packets without problem.

  However, when I did the 'stat conn show' on waas, I saw the traffic in question.  Why?

  Is it because traffic is not matched by 'optimization class-map "and 'optimisation of policies'?".

  If this is the case, what is waas?  My first thought was that waas he will switch to PT (pass-through), but it does not look like it

  Someone anyone have idea?

  Thank you

  Hello

  More traffic that we use in the world today is already predefined by cisco. If traffic does not fall into one of the predefined class card and then she should use the generic TCP optimization + compression - (TGDL/T/TG/TDL/PT underway or wrost you should see them in EXTERNAL CUSTOMER/asymmetrical PT / PT no equal).

  Can you please let us know if the traffic is TCP or UDP traffic?

  If you don't see traffic asymmetrical EXTERNAL CUSTOMER/PT/PT no equal then you need to check the workflow package routing path.  If you don't see one of the above mentioned class, then you should check the configuration of WCCP/Inline.

  Kind regards

  Bala

• 2 WAE WCCP l2 only 1 gets traffic

  Hello

  I have 1 router WAN and 2 devices configured in WCCP. The configuration works very well except that only the first WAVE that sees the router and set the WCCP receives traffic. What I mean is that the two waves see the router and vice versa. When I set the WCCP link, the first WAVE to his establishment becomes WAE DRIVING and another doesn't get it packages. If I disconnect the WAE lead or change its configuration WCCP and put again, WCCP switches the other WAE and the other is now exclusevly receiving traffic. No load balancing is reached.

  First of all here is my configuration:

  1 router WAN Cisco ISR G2 2911 IOS 15.2 (1) T

  WAAS in WAVE-274 cisco 2 version 4.3.3 configured in the same way for WCCP.

  Router IP: 10.x.y.1/22

  WAVE IPs: 10.x.y.9 and 10.x.y.7 22 and default gateway is the router 10.x.y.1

  Users are on the same network 10.x.y.0/22 (is that a problem? I read in a WAAS setup guide the WAE cannot be in the same network as the users)

  Second, here is the relevant config:

  Router:
  

  IP cef

  WCCP IP 61

  WCCP IP 62

  interface GigabitEthernet0/0

  Description * LAN connection *.

  61 IP wccp redirect in

  IP addr 10.x.y.1 255.255.252.0

  !

  interface GigabitEthernet0/1

  Description * WAN connection *.

  62 IP wccp redirect in

  addr IP WAN_IP...

  !

  WAAS:
  

  primary-interface GigabitEthernet 1/0

  interface GigabitEthernet 1/0

  IP address 10.x.y.9 255.255.252.0 (et.7 during the second WAVE)

  !

  interface InlineGroup 1/1

  Shutdown

  !

  WCCP router-list 1 10.x.y.1

  WCCP promiscuity of tcp router-list-num 1 redirect l2 l2-back

  WCCP version 2

  When I do the following on the router:

  show ip wccp 61 detail

  or see the ip wccp 62 retail

  I see:

  The WCCP customer information:

  WCCP Client ID: 10.x.y.7

  Protocol Version: 2.0

  Status: usable

  Redirect: L2

  Package return: L2

  Assignment: HASH

  Initial hash Info: 00000000000000000000000000000000

  FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

  Assigned hash of information: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

  00000000000000000000000000000000

  Allocation of hash: 128 (50.00%)

  S/w redirected packets: 103912
  

  Connection time: 03:34:05

  GRE has bypassed the packages

  Process: 0

  CEF:                   0

  Errors: 0

  WCCP Client ID: 10.x.y.9

  Protocol Version: 2.0

  Status: usable

  Redirect: L2

  Package return: L2

  Assignment: HASH

  Initial hash of information: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

  00000000000000000000000000000000

  Assigned to Hash Info: 00000000000000000000000000000000

  FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

  Allocation of hash: 128 (50.00%)

  S/w redirected packets: 0
  

  Connection time: 01:46:24

  GRE has bypassed the packages

  Process: 0

  CEF:                   0

  Errors: 0

  On the WAAS, settings of assignment of WCCP for load balancing is the default: hash. (Hash on Source IP (Service, 61) :))

  the method of evacuation is IP forwarding

  I have multiple connections from different source IP addresses and somehow they all end up on the same WAE axe:

  ConnID Source IP: IP port: port Dest PeerID Accel RR

  360 10.x.y.3:49463 10.q.w.36:52732 XX TMDL 16.1%

  373 10.x.y.4:55005 10.q.w.36:52732 XX TMDL 24.8%

  I checked several places and read the best practices; support for router platform... and it seems that the config is OK

  http://www.Cisco.com/en/us/prod/collateral/contnetw/ps5680/ps6870/white_paper_c11-608042.html

  Any ideas?

  Thank you

  Patrick

  
  

  That question has been in the session 'ask the expert ':

  https://supportforums.Cisco.com/message/3482826

• Direction WAAS (547) lack of CM... can not add

  Hello

  One of our devices WAAS branch had the wrong host name, and I've edited our DNS/GANYMEDE and updated the hostname in the WAAS himself.

  I went to the plant manager and delete the old entry and is gone to the branch WAAS, cms enabled, disabled / enable tcp promiscuity 61/62 and WCCP is in place. I can see redirect happening on WAAS and the router but the Manager of the plant doesn't have an entry for the device WAAS. I can also ping the central Director of the WAAS and vice versa. Everything seems to work good optimization, but I can't understand why I can't see the hostname of the box in the GUI of CM. It's been two days and he does not appear.

  Here is the info from cms on the WAAS (IP omitted) branch.

  waxxx-1 a #sho cms Info

  Device registration information:

  Device ID = 321765

  Registered device did = WAAS Application Engine

  WAAS Central coach =                       

  Recorded with WAAS Central Manager =

  CMS information services:

  Cms_ce service is running

  Should I remove the partitions on the WAAS branch or something? I am at a loss.

  Thank you.

  Hi Julie,.

  Try to unregister the force cms.

  Kind regards

  Kanwal

• Traffic classifier UDP WAAS

  Hello community,

  Maybe my question completely basic and simple but I am confused about what I want to do.

  I checked that WAAS optimize non - TCP traffic, but I would like to know if is possible to classification a UDP traffic. In the capture of two WAAS, I see trundle taking traffic devices.

  I tried to create a Class-Map and a policy, but I do not see the 'game' in this traffic. Maybe the Class Map and policy are used only for TCP traffic.

  Is there a way of classification WAAS UDP traffic.

  WAAS version 5.1.1 WAVE-694

  Thank you in advance.

  No this is not possible.  Engine scripts WAAS intercepts the non - TCP traffic.  So you can't classify / report about it.

• WAAS-DMM installation

  Hello

  We develop a media solution in our laboratory. I was asked to mount a disk WAAS in the DMM. And I got a single Module of NME-WAE-522-K9. We use a small software module AXP internally so that it will download the external data CMS files to the local network. In the meantime, I tried to configure a WAAS using the WAE module I. I have configured the WAE with WCCP v2... It runs in the accelerator mode. I have activated the company and licensed video.

  After having done that, I tried to give the ip address of wae the option "Mount WAAS" DMM. But I got error when I do that.  I guess I can use the same device WAE as Cache CIFS to ride like WAAS in DMM.  I have attached the screenshot to configure WAE and the preposition along wit HLA DMM screen.

  Please advice.

  Thank you

  JK

  JR,

  I'm not an expert of WAAS, so I won't be able to help you... but

  for troubleshooting don't worry on the DMM or the DMS stuff

  yet.  You will need to ensure the WAAS works first.

  You use the laptop first to try to set up the CIFS share you configured

  WAAS.  Once you can mount and copy files to and from the

  WAAS share from your laptop, then move to the next step with the

  DMS stuff.  Don't forget to save the credentials to access

  the part (if any).

  Then can you access the share with success of your laptop and copy

  files to and from?

  See you soon!

  T.

• I'm looking for the third order intercept point

  How to find the point of interception of third order of my iphone 6? There is a sheet with all the technical specifications in relation to the my phone gsm modem. Thank you

  No, Apple does not publish or release this level of technical specifications to the public.  Since the 3rd order intercept is a purely mathematical concept for such low power as a smart phone device, I imagine that these kinds of data are unknown outside of Apple's own engineering group (or Foxconn I guess)?