Content Engine Problem

Dear All,
My apologies if this posting is on the wrong board.
I've a problem with our content engine returning an error of:
"Tre reply from server is not valid"
The URL of the site is http://hiring.monster.co.uk/jobs/createtitle.aspx?mode=qb.
I've attached a screenshot of the error message.
Any advice or help would be greatly appreciated.
Thank you in advance.
Sinh

This symptom is observed on a router on which Web Cache
Communication Protocol (WCCP) is enabled and Cisco Express Forwarding (CEF)
switching is disabled. If the caches are Cisco caches, they will be running
software prior to ACNS 4.2.5.
solution: Ensure that CEF switching is enabled on the router. If this is not possible, the impact of the problem on the cache will be minimized if the authentication bypass function is disabled.also try upgrading IOS to 12.1(18.01)E which may solve the issue.

Similar Messages

Rate Limiting - Will Content Engine 590 solve my problem?

We have a Cache Engine 550 deployed in our network which is great for reducing traffic on the Link to the Internet, however I have now run into a little problem with the device as we are now trying to implement Bandwidth Shaping using the existing Cisco infrastructure and thus the Cisco IOS.
One of the IOS features concerned is Committed Access Rate (CAR).
We would like to do some traffic shaping according to certain IP Protocols such as FTP, HTTP as well as rate limiting certain of our customers (IP Blocks) so that they dont saturate the Serial link to our ISP.
The problem we have is that the Cache Engine 550 replaces the original requestors IP with its own as it (the CE) now takes over as the requestor to the Internet thus we have all HTTP traffic via our ISP having the source as that of the Cache Engine.
Due to this we cannot Rate-Limit a particular customer (IP range).
Question-------
Does the Content Engine 590 (ACNS, ICDN) enable me to complete my task and control the Serial connection the way I would like to?
Can I do a sort of IP Spoofing so that the original IP is still in place, but the Content Engine still does its job of Caching?
I have already looked at the Packeteer unfortunately it only has Ethernet ports.
The WiseWan 401 with HSSI port looked promising, but I feel that even though it will do great shaping and graphs it will still not solve the problem of a saturated link upstream to the ISP (from the boxes point of view), I will still sit with packets being dropped and thus bandwidth wasted.
Anyone out there with any other solution?
Thanks in advance.
Lutz.

Hi,
We have just implemented IP spoofing in version 4.2 of ACNS code. (Caching) which will only run on a 590/560/507/7320 cache.
Version 4.2 sould be available at the end of July early August. This will slove you problem with identifing traffic to rate limit.
Cheers
Phil

Help!!! Content engine

my configuration is follow the attached file. I don't know what is wrong with my content engine using as a cache server. when i connect this CE to my network, i can make my user access to the internet fast only 2 days, but after 2 days it makes my users internet connection slow. So when users access to the internet slow, i disconnect this CE from my network, then my users internet connections is running better. So please help me to find what is incorrect with my configuration and what commands i should add more to this current configuration"

What is the ACNS software version u r using in ur content Engine7305.I am sending u a configuration doc for ACNS rlease 5.2.This has all the info regarding ACNS 5.2.
http://www.cisco.com/en/US/products/sw/conntsw/ps491/products_configuration_guide_book09186a00802debd6.html
Let me know, if you have any problem in browsing this big document. and finding out the pblm.I will assist you.

Content Engine Module is logging DHCP errors

Content Engine Module in Cisco 3725 is logging the following eror continously:
Sep 29 16:47:50 ContentEngine dhclient: %CE-DHCP-5-191000: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 4
Sep 29 16:47:54 ContentEngine dhclient: %CE-DHCP-5-191000: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 11
Sep 29 16:47:58 ContentEngine smartd: %CE-SMARTD-3-435000: No Errors Logged
Sep 29 16:48:05 ContentEngine dhclient: %CE-DHCP-5-191000: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 1
Sep 29 16:48:06 ContentEngine dhclient: %CE-DHCP-5-191000: No DHCPOFFERS received.
Sep 29 16:48:06 ContentEngine dhclient: %CE-DHCP-5-191000: No working leases in persistent database - sleeping.
Sep 29 16:48:06 ContentEngine %CE-DHCP-5-191000: Script called with reason: FAIL
Sep 29 16:52:58 ContentEngine smartd: %CE-SMARTD-3-435000: No Errors Logged
Disable the external interface (shutdown) didn't fix the problem:
Sep 29 17:02:05 ContentEngine dhclient: %CE-DHCP-5-191000: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 3
Sep 29 17:02:05 ContentEngine dhclient: %CE-DHCP-3-191000: send_packet: Network is down
Sep 29 17:02:08 ContentEngine dhclient: %CE-DHCP-5-191000: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 3
Sep 29 17:02:08 ContentEngine dhclient: %CE-DHCP-3-191000: send_packet: Network is down
Sep 29 17:02:11 ContentEngine dhclient: %CE-DHCP-5-191000: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 5
Sep 29 17:02:11 ContentEngine dhclient: %CE-DHCP-3-191000: send_packet: Network is down
Sep 29 17:02:16 ContentEngine dhclient: %CE-DHCP-5-191000: DHCPDISCOVER on eth0 to 255.255.255.255 port 67 interval 5
Sep 29 17:02:16 ContentEngine dhclient: %CE-DHCP-3-191000: send_packet: Network is down
Sep 29 17:02:21 ContentEngine dhclient: %CE-DHCP-5-191000: No DHCPOFFERS received.
Sep 29 17:02:21 ContentEngine dhclient: %CE-DHCP-5-191000: No working leases in persistent database - sleeping.
Sep 29 17:02:21 ContentEngine %CE-DHCP-5-191000: Script called with reason: FAIL
Sep 29 17:02:58 ContentEngine smartd: %CE-SMARTD-3-435000: No Errors Logged
Any ideas how to fix this problem ?

Try the global command:
ce(config)# no auto-register enable
http://www.cisco.com/univercd/cc/td/doc/product/webscale/uce/acns53/53cref/6812ref.htm#wp1038726

Should the Content Engine work while the Inernet link is down ?

I have installed CE590 in a client network
The http saving performance is from 30 : 40 %
My client want to make sure the CE is caching the web site
He want to shutdown Serial port of the main router , and try to browse web sites. ( the Cached sites )
Should he get a reply from the CE and browse the cached sites ??
I mean , Can the PC browser ( while the internet is link is down ) open page like www.yahoo.com for example if it is cached on the CE ??
Is there is any command of the CE that can display the name of the cahced web pages ?
Note : Cisco Content Engine Software Release 3.11
Can anyone help me ?
Thanks
Mohamed Abdallah

Mohamed,
Before you go any futher you need to upgrade the CE to ACNS 4.2.3. There are known issues with 3.1.1.
To answer your question the CE will only server content if it can not access the internet if the object is fresh. By this I mean the object has not expired or the object does not need revalidation eg If modified since request.
This could cause problems with broken pages etc etc.
Your best option is to turn on transaction logging.
transaction-logs enable
You can then go to the local1/logs directory on the CE
type working.log
This will show you the urls that clients are requesting and if they got a hit / miss/ ims hit / ims miss etc etc.
Overall your cache should always have access to the origin server for content.
Cheers
Phil

Content Engine errors.

Hi there,
I'm having some problems with Content Engine.
I would appreciate any help.
It gives following errors:
Jun 12 08:15:59 CE01 wccp: %CE-WCCP-5-500008: WCCP: A new view from
the 25.25.25.25. Change number = 28
Jun 12 08:15:59 CE01 wccp: %CE-WCCP-5-500014: WCCP: New CE notified of
15.16.17.208
Jun 12 08:15:59 CE01 wccp: %CE-WCCP-5-500026: New CE entry being
created for 15.16.17.208 seen by router 25.25.25.25
Jun 12 08:16:07 CE01 wccp: %CE-WCCP-4-500015: WCCP:No assignment sent:
15.16.17.204 not in Router View
Jun 12 08:16:08 CE01 wccp: %CE-WCCP-5-500008: WCCP: A new view from
the 25.25.25.25. Change number = 29
Jun 12 08:16:08 CE01 wccp: %CE-WCCP-5-500014: WCCP: New CE notified of
15.16.17.204
Jun 12 08:16:08 CE01 wccp: %CE-WCCP-5-500026: New CE entry being
created for 15.16.17.204 seen by router 25.25.25.25
Jun 12 08:16:17 CE01 wccp: %CE-WCCP-5-500019: WCCP: New WC in compute
assign 15.16.17.204
Jun 12 08:16:40 CE01 wccp: %CE-WCCP-3-500001: HTTP Proxy may be down,
keepalives halted!
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: ds_getStruct got error :
50 for key stat/cache/http/perf/throughput/requests/sum connection 5
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: ds_getStruct: unable to
get `stat/cache/http/perf/throughput/requests/sum' from dataserver
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: unable to get http
request throughput stats(error 50)
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: ds_getStruct got error :
4 for key stat/cache/https/request connection 5
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: ds_getStruct: unable to
get `stat/cache/https/request' from dataserver
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: unable to get https
request throughput stats(error 4)
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: ds_getStruct got error :
4 for key stat/cache/ftp connection 5
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: ds_getStruct: unable to
get `stat/cache/ftp' from dataserver
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: unable to get
ftp-over-http request throughput stats(error 4)
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: ds_getStruct got error :
4 for key stat/cache/http/usage/cpu/sum connection 5
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: ds_getStruct: unable to
get `stat/cache/http/usage/cpu/sum' from dataserver
Jun 12 08:20:54 CE01 java: %CE-CMS-4-700001: unable to get cpu
stats(error 4)

Hi guys,
I am really out of ideas!!!
I've updated software couple times already.
but nothing helps.
it still gives same error:
Jun 16 14:23:01 ponent exec_show_stats: %CE-CLI-3-170013: item stat/cache/http/usage/cpu/sum not found not found in dataserver
Jun 16 14:23:01 ponent exec_show_stats: %CE-CLI-3-170013: item stat/cache/http/request not found not found in dataserver
Jun 16 14:23:01 ponent exec_show_stats: %CE-CLI-3-170013: item stat/cache/https/request not found not found in dataserver
Jun 16 14:23:01 ponent exec_show_stats: %CE-CLI-3-170013: item stat/cache/https/requests not found not found in dataserver
Jun 16 14:23:01 ponent exec_show_stats: %CE-CLI-3-170013: item stat/cache/ftp-native not found not found in dataserver
Jun 16 14:23:01 ponent exec_show_stats: %CE-CLI-3-170013: item stat/cache/ftp not found not found in dataserver
Jun 16 14:23:02 ponent exec_show_stats: %CE-CLI-3-170013: item stat/wccp/bypass not found not found in dataserver
Jun 16 14:23:02 ponent exec_show_stats: %CE-CLI-3-170013: item stat/wccp/bypass not found not found in dataserver
Jun 16 14:23:52 ponent exec_rule: %CE-CLI-3-170013: Verifier not responding. when setting cfg/gl/cache/rule/stat/show (Error number: 32)
Jun 16 14:23:52 ponent exec_show_stats: %CE-CLI-3-170013: item stat/cache/http/err not found not found in dataserver
Jun 16 14:23:52 ponent exec_show_stats: %CE-CLI-3-170013: item stat/cache/https/err not found not found in dataserver
Jun 16 14:24:37 ponent cfg_bin_urlfilter: %CE-CLI-3-170013: Verifier didn't respond. Need to re-register verifier. when setting /cfg/gl/cache/urlfilter/http/enable (Error number: 64)
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: ds_getStruct got error : 4 for key stat/cache/http/perf/throughput/requests/sum connection 5
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: ds_getStruct: unable to get `stat/cache/http/perf/throughput/requests/sum' from dataserver
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: unable to get http request throughput stats(error 4)
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: ds_getStruct got error : 4 for key stat/cache/https/request connection 5
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: ds_getStruct: unable to get `stat/cache/https/request' from dataserver
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: unable to get https request throughput stats(error 4)
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: ds_getStruct got error : 4 for key stat/cache/ftp connection 5
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: ds_getStruct: unable to get `stat/cache/ftp' from dataserver
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: unable to get ftp-over-http request throughput stats(error 4)
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: ds_getStruct got error : 4 for key stat/cache/http/usage/cpu/sum connection 5
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: ds_getStruct: unable to get `stat/cache/http/usage/cpu/sum' from dataserver
Jun 16 14:24:45 ponent java: %CE-CMS-4-700001: unable to get cpu stats(error 4)
Jun 16 14:24:47 ponent java: %CE-CMS-4-700001: ds_getStruct got error : 4 for key stat/cache/http/perf/throughput/requests/sum connection 5
Jun 16 14:24:47 ponent java: %CE-CMS-4-700001: ds_getStruct: unable to get `stat/cache/http/perf/throughput/requests/sum' from dataserver
Jun 16 14:24:47 ponent java: %CE-CMS-4-700001: unable to get http request throughput stats(error 4)
Jun 16 14:25:15 ponent cfg_bin_urlfilter: %CE-CLI-3-170013: Verifier didn't respond. Need to re-register verifier. when setting /cfg/gl/cache/urlfilter/http/enable (Error number: 64)
Jun 16 14:25:24 ponent writemem.sh: %CE-CLI-2-170054: running-config has 0 line(s)
Jun 16 14:25:24 ponent exec_copy: %CE-CLI-3-170055: Copy running-config to startup-config failed!. status(1.20)
please, any suggestion would be appreciated.

Content engine datapacket

Hi
I have a content engine ,its uses for transprancy proxy.
i have two router .one router used for lan and remote connect(wccp enable) and another router connect only for internet.
as example:
router1:203.110.153.10
content engine:203.110.153.11
internet router(inside interface): 203.110.153.12
now router1 gateway 203.110.153.12
and content engine gw:203.110.153.12
I confirure router1 that all http request redirect out to content engine.
router1,contentengine and inside interface of internet router connect same switch cisco 3550.
now problem is::
when content engine not connected then the switch port which connect router1 data transfer 3Mb input/output.
but when content engine connected ,then the switch port of content engine shows 4Mb data Input/output.
I think data transfer increase becuse content engine internal communication with router1 and also internet router.
am i right ?. or if i use transparent proxy then bandwith increase ?.
pls anyone help me ?.
thanks
biplob

Hello Biplob,
as a matter of fact, the CE is supposed to actually decrease the amount of bandwidth...
You say that data throughput goes up to 4MB, is that only right after you connect the Content Engine, or does it stay at that increased level ? In the first case, that could probably be explained by the CE starting to fill its cache. In the latter, you could try and turn on 'ip accounting' on the interface connecting router 1 to the 3550. The IP accounting data should at least tell you the source and destination of the increased traffic...
Regards,
GP

Content Engine and PHP WebSites

Hi,
I have Content Engines in a transparent caching scenario. The HTPP traffic being redirected to the CEs are from squid proxies.
Sometimes, for php written sites, when the client tries to access the website or a particular link in a website, instead of getting the site content he gets a popup window asking if he wants to save the content or cancel the operation.
I noticed that this problem does not happen if I force the client browsers to use HTTP1.1 through proxy connections or if ... I clear the cache content (the content engine content).
If I access these sites using a dial-up line this problem doesn't happen. Only from the customer network, where I deployed the transparent caching solution does this happen.
Does anyone have a clue regarding this issue?
Thanks in advance for your attention.
Regards,
Ricardo

Thanks for your reply.
I do not have any rules applied on the CE configuration.
After looking to some sniffer traces I took I suspect that my problem is related with the fact that I have requests made with browsers configured for HTTPv1.0 through proxy connections and others HTTPv1.1 through proxy connections.
When a client browser makes the request using HTTPv1.1 through proxy connections the content will be cached in encoded gzip format.
At a later time when another client, this time using HTTPv1.0 through proxy connections, tries to access the same content the content engine will deliver it encoded ... but the browser does not support it, and a pop-up window appears asking if the user wants to save the content.
So, now I suspect that this has nothing to do with the site itself but only with the requests and responses.
The clients are behind squid proxies.
It is the traffic originated by the squid proxy that is being redirect trough WCCP to the content engine.
I will do additional tests and try to find a way to solve this issue.
Once again Thanks for your reply.
I've you have any additional comments, feel free!
I need it :)
Ricardo

Content Engine cannot authenticate using LDAP

Dear All,
I have a problem with content engine 511 authenticating with LDAP server. I am using Lotus notes LDAP server to authenticate with content engine but it doesn't work. Anyone has try with LDAP before? Please advice. Thank you for your help.
Regards,
Chris

Dear,
I already using the latest version of ACNS software 5.3. And there is an option to use LDAP authentication in CLI and WEB based management. Thank you for your help.
Regards,
Chris

Question for content engine

Hi,
I have a content engine 565A with ACNS 5.4.5.7, running http pxory mode. All of the windows clients setup proxy server to the content engtine. This day the windows client executed windowsupdate, but got the error message : 0x80072EFE. I have tried to setup a rule to ingore cached for the microsoft windowsupdate server, but it doesn't work. Can you help to identify this problem?
I want to bypass all of the windowsupdate server, but we can not use domain name in bypass command, it support IP addresses only. Is there any other solution to bypass some servers by domain ( for example : *.windowsupdate.microsoft.com ) ?
Best Regards,
Jackson Ku

Hi,
I have a content engine 565A with ACNS 5.4.5.7, running http pxory mode. All of the windows clients setup proxy server to the content engtine. This day the windows client executed windowsupdate, but got the error message : 0x80072EFE. I have tried to setup a rule to ingore cached for the microsoft windowsupdate server, but it doesn't work. Can you help to identify this problem?
I want to bypass all of the windowsupdate server, but we can not use domain name in bypass command, it support IP addresses only. Is there any other solution to bypass some servers by domain ( for example : *.windowsupdate.microsoft.com ) ?
Best Regards,
Jackson Ku

Wacky integration of PIX,Content engine and router

Dear All,
I have got a situation...The situation is
that I have a pix515e, Content Engine and
Cisco 2620xm router...The 3 attachments contain each of the systems configuration..They are arranged in the following way..
There is a 192.168.0.0 network ID running on the PIX inside network which is getting translated by pix to 172.16.1.11-172.16.2.254. The e0 of pix has got an IP address of 172.16.1.7. PIX firewall's gateway is the router's ethernet interface which is 172.16.1.3. I have allowed tcp etc traffic for the inside network.
After PIX there is a content engine 565A which is getting connected via its gigabit interface with IP address of 172.16.1.2 to the network with wccp config.
The router is running 172.16.1.3 on its ethernet interface with the wccp configuration on WAN facing interface..
The problem is that I am able to access the Internet from inside of the PIX.. The PIX is translating perfectly...When the traffic reaches the router, it also translates into public addresses perfectly..The user's are accessing Internet without any problem..and i can see the nat maintained on router and pix..
But the problem is that when i write sh wccp gre on content engine, it doesn't show any activity..This is the problem that content engine is not responding the way it should..
Right now I am lost why the CE isn't working... If anyone has faced this scenerio before then any help will be greatly appreciated...
Hoping for a response which resolves this...
Regards,
Noman Bari

Dear Joerg,
Thank you for your response... That night when I had posted my request for help, I went back to my hotel room, took a shower and focused on CE and router communication and what was configured on them (by some another consultant)...
And then it struck to me that wccp was never enabled on the router in the global config(see the router config in my 1st posting)... once this glitch was removed, everthing now works .. This was never a pix issue bcuz I could see that it was working the way its suppose to work,xlating was happening, people were surfing the web and stuff but the show commands on CE and router weren't showing any activity..
The following link on configuring Cisco Cache Software helped me enormously and I recommend to everyone working on CE..
http://www.cisco.com/en/US/products/sw/conntsw/ps547/products_configuration_guide_book09186a0080087140.html
Through this process I learned a very important lesson though...when you are troubleshooting a problem, never trust the configurations that have been done by the guy before you...start everything from the scratch by going through the documentation..
and ofcourse this extremely useful Cisco Forum also...
Regards,
Noman Bari

Use of outgoing proxy with content engine

Hi All,
I'm experiencing problems using the "outgoing proxy" feature with a content engine running ACNS 4.03.
When this feature is enabled, it takes a long time to get the "execute or save to disk" popup window in the web browser, but when I get it, the file is downloaded in a few seconds.
It seems like the CE waits for the file to be completely retrieved before delivering it to the client...
This is not service impacting when this is a small file, but when the file is bigger than 1MB, the browser fails with a timeout.
Can anyone help ?
Thanks,
Phil.

4.01b1 code had a hardcoded proxy timeout value of 300 micro seconds. The ability to set this value was introduced in 4.03 to address symptoms like the one you are describing when the CE is not able to connect to its upstream proxy within this time constraint. (also documented the following bug : CSCdv36226 - "Need CLI to configure connection timeout for outgoing proxy"
The fix was implemented with the addition of the follwoing command to set this value: 'http proxy outgoing connection-timeout' command:
590(config)#http proxy outgoing connection-timeout ?
<200-5000000> Timeout period for probing outgoing proxy servers in microseconds
590(config)#
I hope this helps!
Cheers,
Perry.

Content engine

dear sir;
i have one content engine 560 but i have some problem i want to know is it possible to install new linux on it if yes how?
and i need some information in order to configure it as ftp server but i could not fine any documents.
would you please let me know your comment.
regards
hyazdi

What file and what directory are you trying to get to? If it's a file in /local1/ you can just ftp the files on and off the box by enabling inet ftp. If it's deeper in the system where you don't have access, you need to contact the cisco TAC for assistance.
Hope that helps,
Dan

Content engine module

Hi, is it possible for a content engine module to work in a 2600 with the following scenario? I want the clients gateway to be the 2600 with content engine installed but I want the 2600 to forward all traffic out a seperate gateway. I know a content switch can do this but can a content module in a 2600 do it too. The reason for wanting this is I want to use url filtering software such as websense and at the moment the existing gateway/firewall is not compatible with websense so Im looking to use a 2600 with content module installed to filter webtraffic and forward out the existing gateway. Thanks

this is no problem
Just look at the nm-ce as a standalone device connected by ethernet to the 2600.
The 2600 can be the default gateway for the client and the cache [nm-ce].
The 2600 will intercept traffic from client and forward to nm-ce.
The nm-ce will use the 2600 as its default gateway.
Gilles.

WAE612 Content Engine load restriction.

Have wae612 deployed as a content engine thru WCCPv2.
We are mobile operator. I have many GPRS subscribers that are NATed by cisco to one public IP address prior to go to CE.
The problem is that GRPS user starts 2-3 downloads and CE loads it very fast but user can load the objects from CE only at 70-100kbit/s. So when I divert all GPRS users thru CE, my internet link becomes stuck because CE loads many files at all available bandwidth and then give it to customers at GPRS speed.
How to make CE not to download a new part of file unless the old part is already loaded by the user?
Tried Squid on linux - the same issue.

SOLVED --
The mistake was my own...in writing this post and re-testing, I realized I had made a foolish mistake. I applied an access-list (which I forgot to include) to the "ip wccp web-cache redirect-list bypass_content_engine" in the global config of the router.
When I installed service 95 for spoofing, I automatically added the same access list to it as well.
This was not a good thing since the access list denied packets with a destination of our internal IP addresses from going through the content engine. This worked fine on the way *out* of the router. But as the now-spoofed packets returned, their destination was an inside IP address and they were pretty much discarded. Foolish Mistake!
Removing the ACL from the "ip wccp 95" statement in the global config fixed the issue and I am spoofing fine.
Sorry to waste time...
David Hunter

Content Engine Problem

Similar Messages

Maybe you are looking for