WCCP Redirection not happening on 3750

I have a problem with WCCP redirection on a 3750 switch. hardware and IOS versions are listed as supporting WCCPv2. WAE configured at a core site and at the remote site. "ip wccp 62 redirect in" configured on the interfaces at each end connected to the WAN link. A WAE is directly connected to the WCCP switch at each end. Traffic is successfully being optimised when ssh to the remote site WAE itself (can see in sh tfo conn summ) but traffic coming from remote site clients does not appear to be getting redirected at the remote site. "ip wccp 61 redirect in" configured on vlan int didn't work and also have tried setting up the int as L3 and configured the same on physical int but still not redirecting. Looks like the traffic from the client IS being redirected at core site though, since we are seeing the traffic in "show tfo conn summ" on the core WAE but it is listed under pass through. Also getting PT no peer for this traffic. Nothing showing up from clients on the remote site WAE unfortunately.
If anyone has some ideas on how to resolve this please advise.

Thanks Zach,
double checked my configs and found it was hash instead of mask. now all working OK...
Takes a little time to negotiate before the services become "usable" and even when you set it to hash it still comes up as usable so was a bit misleading. We were also using wrong SDM template (which I noticed yesterday in the logging and fixed).
cheers for the quick responses.

Similar Messages

WCCP redirect not working on Cat 3560

We have a 3560 running 12.2(37)SE1, IP services image.
Through debug, we can see WCCP communication betweeen the 3560 and our content engine (for web caching).
However, web traffic isn't being redirected to the CE at all. Instead, it goes straight out to the Internet.
Does anyone have the same issue? Has anyone got their 3560 to work w/ their WCCP products (web caching or WAAS)?

The 3560 does not support GRE redirection (layer3), so you need to use layer 2 redirection on your Content Engine for your 3560 to work fine with WCCP, also you need to use mask assignment since hash is non-supported as well.
Check this link:
http://www.cisco.com/en/US/products/hw/switches/ps5528/products_configuration_guide_chapter09186a008081db5b.html#wp1051427
Hope it helps!!

Why is a redirect not happening in a custom train model

Dear All,
I followed a post by Jobinesh here regarding supplying your custom train model in this post http://jobinesh.blogspot.com/2010/04/custom-model.html
Now, I am extending the ProcessMenuModel and to create my navigation.
I created a wildcard control flow to each of my page but I had set a redirect option also in each of my taskflow
view.
<control-flow-rule id="__22">
      <from-activity-id id="___33">*</from-activity-id>
      <control-flow-case id="__44">
        <from-outcome id="__10">employee</from-outcome>
        <to-activity-id id="__5">employee</to-activity-id>
      </control-flow-case>
      <control-flow-case id="__11">
        <from-outcome id="__13">department</from-outcome>
        <to-activity-id id="__121">department</to-activity-id>
      </control-flow-case>
      <control-flow-case id="__15">
        <from-outcome id="__16">manager</from-outcome>
        <to-activity-id id="__14">manager</to-activity-id>
      </control-flow-case>
</control-flow-rule>
<view id="employee">
      <page>/com/test/employee.jsff</page>
      <redirect/>
</view>
<view id="department">
      <page>/com/test/department.jsff</page>
      <redirect/>
</view>
<view id="manager">
      <page>/com/test/manager.jsff</page>
      <redirect/>
</view>My concern is this, why is it that when I navigate in the train, it is not redirecting to another view even though I have set it explicitly?
Thanks

Below links may helpful for you.
http://www.oracle.com/technetwork/developer-tools/adf/learnmore/82-programmatically-navigate-trains-396873.pdf
http://docs.oracle.com/cd/E12839_01/web.1111/b31974/taskflows_complex.htm#CJHFBFIE
http://jobinesh.blogspot.com/2010/04/custom-model.html

PayPal Standard - Redirect not happening.

Hi,
I'm on a bit of a strugglebus. I have a store that is set up to only accept paypal standard, which I set up by going to registration-buy and deleting the excess gateways. It gave me an error about how I didn't have a webform, so I went back and created a purchase form with the shipping info and the payment options - again deleting all but paypal.
Now, when I test the cart, nothing redirects me to PayPal. It goes straight through with a reciept! Paypal Standard should be set up right on the Paypal website and on ours.
Help!
(http://telluridefestivarian.businesscatalyst.com)

Hi,
The payment method ID is incorrect as it needs to be "5".
I've updated this for you which now redirects to PayPal as expected.
Reference payment method IDs: http://kb.worldsecuresystems.com/893/bc_893.html
Kind regards,
-Sidney

WCCP redirection in 3750 bad rcv id error

I am attempting to sample a test deployment of WSA S170 with WCCP redirection using a CAT 3750-X.I have defined a custom service group as that of 91for redirecting HTTP and HTTPS traffic from my end user's subnets.I am repeatedly receiving an error as follows:-
WCCP-EVNT:D91: HIA from 12.12.12.12 with bad rcv_id:76/0
The CAT switch is running IOS 12.2(44)SE and the WSA is running an OS version of 7.1.3.Is it a bug on the provided version IDs/model number.Thank you in advance for your co-operation.
Yours sincerely,
Ajay D'mello

Ajay,
I've seen those errors before and they were typically resolved with an upgrade on the switch.
Can you also provide the output on the switch? show run | include wccp
I don't believe there is a really clean answer to this. You can take a look at the WCCP logs on the WSA by enabling the logging level to debug (for proxylog), then tailing it from the CLI.
You may also do a packet capture at the WSA and filter for 'udp port 2048' (no quotes) to see the WCCP packets to see if you can find anything wrong (look at the Here I Am and I See You packets). But from the error you provided, I believe you will not see any I See You packets.
If you do not find anything obvious in those, I'd recommend you open up a TAC case. To be quite honest, I think this is a switch issue. But if you feel it is an error on the WSA's end, you can pursue that route as well.
-Vance

Firefox has detected the server is redirecting the request for this address in a way that will never complete. This is happening in my email program with comcast but does not happen with IE e

Question
firefox has detected the server is redirecting the request for this address in a way that will never complete. This is happening in my email program with comcast but does not happen with IE e edit

Thanks to cor-el for the suggestion given in the link. Sadly I have to report:
1) It is not a bookmark problem and it makes no difference whether I put
www.adobe.com or 192.150.18.117 in the address bar.
2) Cookies are allowed and there are no exceptions set
3) All cookies have been deleted
4) network.http.sendRefererHeader is already set to 2
That deals with the items in the linked document.
Additional information:
5) I can get into the adobe site from a clean "in memory" installation of PuppyLinux using Seamonkey using the same router and dhcp setup.
6) un-installing all Mozilla products - rebooting and re-installing makes no difference even when I remove the mozilla folder from docs&settings.
so as I said in previous post (as annonymous) not a lot makes sense.
Bear in mind that I have no problem running tracert in a command window
Tracing route to www.adobe.com [192.150.18.117] over a maximum of 30 hops:
1 11 ms 10 ms 9 ms 10.0.0.1
2 13 ms 12 ms 11 ms glo-2-dsl.as9105.net [212.74.111.191]
3 13 ms 12 ms 11 ms ge1-2-27.glo0.as9105.net [212.74.106.106]
4 14 ms 12 ms 13 ms pos0-0.bri1.as9105.net [212.74.108.162]
5 17 ms 16 ms 17 ms ge0-0-0.he-lon0.as9105.net [212.74.109.14]
6 17 ms 17 ms 16 ms 10.72.11.75
7 16 ms 17 ms 17 ms xe-0-3-0-10.lon20.ip4.tinet.net [213.200.77.177]
8 91 ms 92 ms 99 ms xe-5-1-0.was12.ip4.tinet.net [89.149.184.34]
9 92 ms 92 ms 93 ms xe-0.equinix.asbnva01.us.bb.gin.ntt.net [206.223.115.12]
10 162 ms 170 ms 162 ms as-3.r20.snjsca04.us.bb.gin.ntt.net [129.250.2.167]
11 166 ms 166 ms 165 ms ae-1.r07.snjsca04.us.bb.gin.ntt.net [129.250.5.53]
12 162 ms 163 ms 161 ms xe-0-2-0-3.r07.snjsca04.us.ce.gin.ntt.net [128.241.219.86]
13 166 ms 163 ms 161 ms 192.150.18.11
14 166 ms 166 ms 165 ms www.adobe.com [192.150.18.117]
Trace complete.
and I can ping the site.
so where now ?

Wccp redirection for waas on same platform as wccp for websense?

just wondering if anyone knows if a Cisco router or switch can handle wccp redirection enabled for both waas and some other web content filtering appliance using a different service group?
seems like the priority value would come into play determining which service group gets handled first?
we currently do WCCP for WaaS on our 3945s.
I am going to advocate to my customer that we separate this out for CPU load issues, config complexity issues, IOS issues, etc... but the question is going to come up - "can we do WCCP for different applications on our Catalyst 3750 core switch, or our 3945 WAN routers?"
Thanks,
Paul

Hi Paul,
Yes, it's technically possible to have WCCP redirection for several services even in those devices that don't support setting the priority. However, in this case, both WAAS and Websense need to redirect HTTP traffic, and that's what makes things complicated.
Assuming you first want to send the traffic to Websense and then to WAAS, I would recommend doing the WAAS redirection only on the WAN link (with one service inbound and the other outbound). You can then configure Web-cache redirection inbound on the client vlan and, a service for the return traffic (I'm not sure if this is required for websense), inbound on the interface where the WAE is connected (with a redirect-list to match only the return direction)
Even if it's possible to have both redirections in the same device, if possible, I would strongly suggest you to either use different devices for the redirection or to make them mutually exclusive (for example, not sending HTTP to WAAS), otherwise, if you make a small mistake with the configuration, you can end up with a redirection loop.
Regards
Daniel

ASR1002 throughput degradation when wccp redirect-list is changed

We have two ASR 1002's going to 2 different WAN service providers, and two 7371 WAE load balanced by mask assignment. When we change the ACL (adding or removing lines) from our wccp redirect-list, the throughput on interfaces applied to the wccp service-groups is degraded to almost no traffic passing, until we completely remove wccp service group from the global configuration and then reapply. Then traffic throughput on the interface goes back to normal.
Our ACL defined in the redirect list specifies our specific networks on our WAN that have WAE's and need the redirection. All other networks are denied implicitly. We need to regularly change this ACL, and this service interruption is a major issue. This was not an issue before moving to the ASR platform from 7206's.
At TAC's request we have upgraded our IOS version to 15.1(3)S4 and that did not make any difference. Does anyone know why this occurs and if there is a way to work around this other than removing wccp configuration and adding back, every time the ACL needs to be modified?
As a side note to this... We have recently added riverbed appliances, and created separate service groups with separate redirect-lists. The exact same behavior occurs on the ASR 1002 when the ACL for the riverbed's redirect list is altered.

Thank you very much for sharing that information. It is great to hear verification that the mask assignment change did resolve your problem. That is the latest resolution that TAC has recommended, but we have to restart the WCCP service on all redundant edge routers to be able to implement this, so planning the outage window is taking some time. We've been told that TAC will set this up in a lab and test for us by our Cisco SE. We're hoping to get verfication that this actually resolves the problem before we take the outage.
If you could, can you tell me if this resolved the issue 100% or do you still have any performance issues when making a change to your WCCP ACL going to your bluecoat equipment? We may also need to implement this in our redirects to BlueCoat from our Nexus. Do you happen to have a link to how to make this change in Bluecoat? Thanks again!

WCCP is not working after ASR migration is done.

Hi Alls.
We recently migrated with new ASR router. However, WCCP is not working, which is using for WAE traffic redirection.
I checked the WCCP configuration. however, I can't find any issue from wccp configuration on ASR router.
Please have seeing following configuration related wccp.
Global)
ip wccp check services all
ip wccp 61 redirect-list waas-redirect
ip wccp 62 redirect-list waas-redirect
Intf)
interface GigabitEthernet0/0/x
ip wccp 61 redirect out
ip wccp 62 redirect in
show ip access-list waas-redirect)
    270 deny tcp any eq 1719 any
    280 deny tcp any eq 1720 any
    290 deny tcp any eq 8443 any
    300 deny tcp any eq 689 any
    310 permit tcp any any
I confirmed that after migration is done, there was no issue for connectivity between ASR and WAAS.
Following is WAAS status;
Router Information for Service: TCP Promiscuous 61
        Routers Seeing this Wide Area Engine(2)
        Router Id       Sent To
        xxx.xxx.xxx.213 xxx.xxx.xxx.15
        xxx.xxx.xxx.7     xxx.xxx.xxx.139
        Routers not Seeing this Wide Area Engine
                -NONE-
        Routers Notified of from other WAE's
                -NONE-
        Multicast Addresses Configured
Router Information for Service: TCP Promiscuous 61
        Routers Seeing this Wide Area Engine(2)
        Router Id       Sent To
        xxx.xxx.xxx.213 xxx.xxx.xxx.15
        xxx.xxx.xxx.7     xxx.xxx.xxx.139
        Routers not Seeing this Wide Area Engine
                -NONE-
        Routers Notified of from other WAE's
                -NONE-
        Multicast Addresses Configured
I can't find any difference from configuration and issue with connectivity.
Can anyone help to check this issue? let me know if you need more inputs.
Thanks.

Hi Felix,
I'm pasting the show output what you requested.
show ip wccp 61 de)
WCCP Client information:
        WCCP Client ID:          xxx.xxx.xxx.179
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Initial Hash Info:       FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                 00000000000000000000000000000000
        Assigned Hash Info:      FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                 00000000000000000000000000000000
        Hash Allotment:          128 (50.00%)
        Packets s/w Redirected: 0
        Connect Time:            1w3d
        Bypassed Packets
          Process:               0
          CEF:                   0
          Errors:                0
        WCCP Client ID:          xxx.xxx.xxx.178
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Initial Hash Info:       00000000000000000000000000000000
                                 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
        Assigned Hash Info:      00000000000000000000000000000000
                                 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
        Hash Allotment:          128 (50.00%)
        Packets s/w Redirected: 0
        Connect Time:            1w3d
        Bypassed Packets
          Process:               0
          CEF:                   0
          Errors:                0
show ip wccp 62 de)
WCCP Client information:
        WCCP Client ID:          xxx.xxx.xxx.179
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Initial Hash Info:       FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                 00000000000000000000000000000000
        Assigned Hash Info:      FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                 00000000000000000000000000000000
        Hash Allotment:          128 (50.00%)
        Packets s/w Redirected: 0
        Connect Time:            1w3d
        Bypassed Packets
          Process:               0
          CEF:                   0
          Errors:                0
        WCCP Client ID:          xxx.xxx.xxx.178
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Initial Hash Info:       00000000000000000000000000000000
                                 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
        Assigned Hash Info:      00000000000000000000000000000000
                                 FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
        Hash Allotment:          128 (50.00%)
        Packets s/w Redirected: 0
        Connect Time:            1w3d
        Bypassed Packets
          Process:               0
          CEF:                   0
          Errors:                0
Could you check?
Thanks.

Windows 7 64 bit and X-Fi XtremeGamer - Bass Redirection Not Working (No Subwoofer)

SWindows 7 64 bit and X-Fi XtremeGamer - Bass Redirection Not Working (No Subwoofer)% Greetings,
Today I ugraded to Windows 7 Ultimate 64 bit edition and am having a problem with my 5. surround sound that previously worked perfectly in Windows Vista Ultimate.
I am using an X-Fi XtremeGamer PCIe card and the problem is that I have full working surround sound, but the bass/ subwoofer isn't working.
Previously in Vista I enabled bass redirection in the Creative Console and this would make the subwoofer work. In Windows 7 in the console there is a bass redirection option but it doesn't work. Also in the Creative Audio Control panel there is NO option for bass redirection either.
Audio sounds tinny and I am 99.9% everything is set up correctley, I think this is a driver problem. At this moment I'm unsure if this issue plagues both the 32bit and 64bit versions of Windows 7 or just the 64bit version (since the console launcher is 32bit).
Anyone had a similar problem and cracked it's Apart from this small glitch Windows 7 is great!
Thanks!

WRe: Windows 7 64 bit and X-Fi XtremeGamer - Bass Redirection Not Working (No Subwoofer)h heya, I have exactly the same problem.
running 64-bit windows 7, X-Fi Xtreme Audio sound card, Trust 5. speakers.
the bass used to work in XP because I could enable bass redirection and alter crossover frequency.
these options are now no longer available in the windows 7 drivers (.4.90) and my bass is not working at all.
it is very annoying, there has been no comment from creative than i can find because it only appears to happen to a small percentage of speakers.
basically if someone from creative can't help fix the problem,?people with this problem?will unfortunately be forced to purchase a different brand of sound card because my speakers certainly aren't broken and work with the on-board sound fine.
so if anyone else has the same problem or any advice on how to fix the problem, please comment.

Navigation in Google search page is not working, this does not happen with other browsers or other search engines.

When using Google search I cannot navigate to pages other than the first page of search results. It does not seem to matter whether I use the page number or the next hyperlink, I cannot navigate away from search page 1. This does not happen when I use other search engines nor does it happen if I conduct the same search using a different browser. This ha only recently started occurring.

Do a malware check with a few malware scan programs.<br />
You need to use all programs because each detects different malware.<br />
Make sure that you update each program to get the latest version of the database before doing a scan.
* http://www.malwarebytes.org/mbam.php - Malwarebytes' Anti-Malware
* http://www.superantispyware.com/ - SuperAntispyware
* http://www.safer-networking.org/en/index.html - Spybot Search & Destroy
* http://www.lavasoft.com/products/ad_aware_free.php - Ad-Aware Free
* http://www.microsoft.com/windows/products/winfamily/defender/default.mspx - Windows Defender: Home Page
See also "Spyware on Windows": http://kb.mozillazine.org/Popups_not_blocked and [[Searches are redirected to another site]]
Your above posted system details show outdated plugin(s) with known security and stability risks.
*Shockwave Flash 10.0 r32
Update the [[Managing the Flash plugin|Flash]] plugin to the latest version.
*http://www.adobe.com/software/flash/about/

Wireless web page redirect not woking

Hi all
wireless web page redirect not woking
software version : 4.2.207.0
one of the ssid on the controller has web authentication and the authentication page not showing once connected .
some clients ( like laptop) authentication page shows but when we press submit button nothing happen .
Please help

Hi
Tnx again , i beleive i have narrow down the problem , After physically removed the controller from the switch problem experencing only with mobile devices .In your previous reply you mentioned abt DNS . I did not understand the role of DNS in it. sorry for that . Once user connected SSID and browse anything , this will redirect to the virtual ip http://1.1.1.1/login.html?........ .we have not registered this virtual ip in the DNS server .
Please help

Does introducing WCCP redirect for WAAS disrupt Netflow information?

Before installing WAAS and WCCP redirect on some 6500 interfaces in our data center, those interfaces showed Netflow flows for users at a remote location accessing servers at our data center. Now with WCCP redirecting that traffic to the WAEs, I notice the only netflow flows for that remote location are UDP flows and some ICMP stuff.
Is this an unintended consequence of installing WAAS - that netflow statistics are going to be skewed by not showing flows that are now accelerated?

I believe your problem may be due to the fact that you are redirecting http
based traffic per the ACL configuration. The sup720 uses wccp v2 as a default
version,however, the Sup720 does NOT support the hardware-based redirection for the TCP port 80 when we enable wccpv2.
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat6000/122sx/swcg/wccp.
htm#wp1017009
Support for Non-HTTP Services:
WCCPv2 allows redirection of traffic other than HTTP (TCP port 80 traffic), including a variety of UDP and TCP traffic. WCCPv1 supported the redirection of HTTP (TCP port 80)traffic only. WCCPv2 supports the redirection of packets intended for other ports, including those used for proxy-web cache handling, File Transfer Protocol (FTP) caching, FTP proxy handling, web caching for ports other than 80, and real audio, video, and telephony applications.

Apply WCCP redirect to logical or physical interface?

If there is a logical subinterface configured under its physical interface (for example serial0/0/0.100 for routing), I should apply WCCP redirect (ip wccp 62 redirect in) to the logical interface, not the physical interface. Is that correct?
Thanks

Yes. You apply WCCP redirect to subinterface if you are using sub interfaces.
Regards.
PS: Please mark this Answered, if it answers your question.

WCCP does not work between WSA and ASA

I have configured WCCPv2 between WSA S160 ( 6.3.1-025) and ASA5540 (8.2(1)109).
Everything seems to be OK by "show wccp *" on ASA and showing wccp debugging messages (level 4) on S160. Despite of it, WCCP redirection does not work.
If I use packet-capture I figure out that S160 receives GRE packets with TCP SYN from particular LAN host to WWW sites but S160 does not handle them and does not send anything back to ASA.
It is an Exempt from authentication for this LAN host and in Forward proxy mode everything works well.
I have attached an example of a packet-capture (S160.txt - renamed from .cap) and debugging messages from S160 & "show" from ASA.
Does anybody have any idea what the problem is and how I can resolve it ?

IronPort Support team helped me to find the trouble:
If I wish to handle specific port's (80, 8080, etc.) traffic by the transparent proxy I need to configure this port like a listener for the FORWARD proxy
("Security Services" -> "Proxy Settings" -> "HTTP Ports to Proxy")
The WSA guide doesn't clearly say about it.
So the Discussion can be closed ...

WCCP Redirection not happening on 3750

Similar Messages

Maybe you are looking for