Configure WCCP on a 4510 switch
I have to configure an instance of a WCCP on a 4510 switch and I have to admit have read the examples given by Cisco but dont have understanding of the example config
Router(config)#
ip wccp web-cache group-address 224.1.1.100 password alaska1
I have attached the config in question above and could someone please clarify what the group address 224.1.1.100 is ?
Many Thanks
Mark
Now I have used what you say which is
ip wccp 99 group-list websense_proxy (Proxy server) but it does not give the option to create redirect list and this is the out put of sh ip wccp
Service Identifier: 99
Number of Service Group Clients: 0
Number of Service Group Routers: 0
Total Packets s/w Redirected: 0
Process: 0
CEF: 0
Redirect access-list: -none-
Total Packets Denied Redirect: 0
Total Packets Unassigned: 0
Group access-list: websense_proxy
Total Messages Denied to Group: 0
Total Authentication failures: 0
Total Bypassed Packets Received: 0 Service Identifier: 99
Number of Service Group Clients: 0
Number of Service Group Routers: 0
Total Packets s/w Redirected: 0
Process: 0
CEF: 0
Redirect access-list: -none-
Total Packets Denied Redirect: 0
Total Packets Unassigned: 0
Group access-list: websense_proxy
Total Messages Denied to Group: 0
Total Authentication failures: 0
Total Bypassed Packets Received: 0
Similar Messages
-
Netflow configuration on 4510 switch
Hi everyone,
I have a 4510 with sup7e and I would like to deploy netflow on this switch. The network will contain the 4510 switch where there will be 4 blades installed, each blade contains a separate Zone (vlan) . These 4 zones will then trunk upto a firewall via ten gig link over sub-interfaces. There will be an ip address assigned to each vlan on the 4500 switch but there can not be routing enabled between the vlans on the switch. If anyone could describe or show if it is possible to configure netflow with this scenario, it would be very much appreciated.You will need the IP services (or above) image with the Sup 7E on a Catalyst 4k. Assuming you have that, I believe you can use flexible Netflow and set up a separate flow exporter with each of your zones' SVI as the source.
See this guide: link. -
Configuring WCCP for http and https
How do I configure wccp on a 6509 to redirect http and https trafic to a S650. I am using the following config and http is working fine:
ip wccp version 2
ip wccp web-cache redirect-list aclwccp
interface Vlan23
description Rede Firewall
ip address 10.0.23.20 255.255.255.0
ip access-group 172 out
ip wccp web-cache redirect out
mls rp vtp-domain coc_block1
mls rp ip
mls netflow sampling
end
Should I config an other service for the https protocol?Cecato,
The WSA can be configured to send 80 and 443 traffic, in the WCCP settings area (5.2.0+). There are some things you will need to be aware of before doing this though:
1. If you are on 5.2.0-x, you will not be able to inspect HTTPS traffic. Only version 5.5.0+ has the ability to decrypt HTTPS traffic. Because of this, it is not recommended to redirect port 443 on WSA version 5.2.
2. You will most likely need to specify a service ID other then web-cache. On most Cisco devices, web-cache is reserved for port 80 traffic only and cannot be changed. Any other service ID will work as you want it to. -
How can i configure hsrp in cisco 3850 switch please guide me
how can i configure hsrp in cisco 3850 switch please guide me
Hi Mauleshg,
Please the below mention link to configure Hsrp hope this will help you.
http://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst3850/software/release/3se/ip/configuration_guide/b_fhrp_3se_3850_cg/b_fhrp_3se_3850_cg_chapter_010.html
Br.
Mohseen Patel -
Configure wccp on 7206 with cef enabled
We have configured wccp on a 7206 and CE590. The router has cef enabled on it. With cef enabled the cache engine does not work. When cef is disabled the cache engine works correctly. We have tested the same setup with cef and wccp on a 2600 router and it works fine.
Check your IOS version on bug toolkit to see if its a software issue.
-
CONFIGURATION OF REDUNDANDACY ON 2960 SWITCHES
I would like to configure 2 switches for redundancy for fail over how should i interconnect and what are the configurations to be made on switches the current setup is i have 2 links connnected through fiber to two switches in turn is conected to 2 routers
Step 1
configure terminal
Enter global configuration mode.
Step 2
interface interface-id
Specify a physical interface to configure, and enter interface configuration mode.
Valid interfaces include physical interfaces.
Up to eight interfaces of the same type and speed can be configured for the same group.
Step 3
switchport mode {access | trunk}
switchport access vlan vlan-id
Assign all interfaces as static-access ports in the same VLAN, or configure them as trunks.
If you configure the interface as a static-access port, assign it to only one VLAN. The range is 1 to 4094.
Step 4
channel-group channel-group-number mode
{{auto [non-silent] | desirable [non-silent] | on} | {active | passive}}
For more detail see Etherchannel configuration Guide:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2950/12122ea5/2950scg/swethchl.htm -
Hi ,
We have a cisco 4506 switch with the IOS version of 12.2-50.SG1. I would like to know whether any latest IOS version will support redirect ACL with the deny statement for WCCP on a client interface.
Switch details:
cisco WS-C4506-E (MPC8245) processor (revision 7) with 524288K bytes of memory.
Processor board ID FOX1407G5P7
MPC8245 CPU at 333Mhz, Supervisor IV
Last reset from Reload
5 Virtual Ethernet interfaces
192 FastEthernet interfaces
26 Gigabit Ethernet interfaces
403K bytes of non-volatile configuration memory.
Regards,
BalaHey CJ,
Option 1: another option you might consider is intercepting closer to the WAN edge, if that's an available option for you.
Again, like Patrick mentioned it depends on your network / IP design but if you intercept closer to the WAN edge you should be able to avoid engineering a redirect ACL altogether.
Option 2: depending on the 3750 platform and code upgrade options, some of the latest 3750 IOS versions include support for deny entries for WCCP redirect ACLs. Check out these release notes (look at the very last bullet point in this list):
http://www.cisco.com/en/US/docs/switches/lan/catalyst3750x_3560x/software/release/12.2_58_se/release/notes/OL24338.html#wp1009434
Hope this helps!
-Chet -
How do i configure my WRT160Nv3 as a switch/hub
As the title say's i need to configure my WRT160Nv3 to act as a switch instead of a DHCP router and whatnot. My Cable company provided us with a free wired and wireless router that is better than this one, but alas i need more cabled ports, and would like to have everything on the same network.
Current LAN DHCP server is 192.168.0.1
Linksys WRT160Nv3 is 192.168.1.1
I have disabled DHCP. but that is it if anyone could help me figure this out i would greatly appreciate it.
**** summary ****
I would like everything to be accessable and on the same IP set 192.168.0.***
for home networking and file sharing etc.
-Jon TSet the LAN IP address of the WRT160N to 192.168.0.2 and disable the DHCP server. Then wire one of the LAN ports of the WRT to your cable router.
-
DOM Parser Configuration...how to switch off DTD validation?
Hi all,
I am developing some implementation code in Java using JBuilder2005, in which DOM3 parser is also being utilised. Now the question is how to switch off DTD validation (seems its default mode is 'on') so that no validation will be carried out at all even DTD declaration statement is presented in an input XML document?
Many thanks in advance
FrankFirst of all, thank you so much for responding, DrClap. =)
setValidating(false) of the DocumentBuilderFactory instance, factory, does not work as expected; it still stubbornly try to seek the external DTD file and fires 'IOException' error in case of no such a DTD.
To follow up the EntityResolver approach, I searched online for almost the whole afternoon but still could not figure out how to do it exactly. In particular, I found http://www.jdom.org/docs/faq.html#a0350, which tells a way doing it, but I got 'StringBufferInputStream is deprecated' error. Then I changed to
new InputStream(new ByteArrayInputStream("".getBytes()))adapted from http://forum.java.sun.com/thread.jspa?threadID=572919&messageID=2842185. But another error occurs: 'java.io.InputStream is abstract; cannot be instantiated'. Furthermore, I have looked at many docs(tutorials, APIs...) on parser configuration, usage of EntityResolver/setEntityResolver()...but they turned out not helpful. Could you please give out more details on how to do this using EntityResolver?? Many many thanks... -
Importing configuration from main to backup switch.
Hello
I need help, i backuped the configuration of me main switch to .txt file be "Dowloand\Backup Configuration" and i have problem with importing this file to new switch. Can someone write me what should i do if i want to import this file? The switch is Cisco SG300-28.
Best reagrdsThe easiest method is to copy the contents of the text file back into the Global Config mode of your switch. I've copied the instructions with the required commands below. More can be found at the link at the bottom including ways to setup a TFTP server to backup and restore configurations.
RESTORE A CONFIGURATION
Connect to the switch/router that needs the configuration.
Open the config.txt file.
Highlight the entire contents of the config.txt file.
You can do this by dragging the cursor from before the first character to after the last character in the file while holding down the left mouse button. Alternatively, if you use Notepad, you can choose Edit > Select All from the menu.
Copy the selected text to the Windows clipboard.
You can either choose Edit > Copy from the text editor menu, or hold down the CTRL key and simultaneously press the Ckey in order to perform the copy.
Switch to the HyperTerminal window, and issue the configure terminal command at the Router# prompt. Then press Enter.
Paste the configuration file into the router by selecting Edit > Paste to Host on the HyperTerminal menu.
After the configuration has finished pasting and the router brings you back to the configuration prompt, issue the copy running-config startup-config command in order to write the configuration into memory.
Issue the exit command in order to return to the Router# prompt.
Reference:
http://www.cisco.com/c/en/us/support/docs/ios-nx-os-software/ios-software-releases-122-mainline/46741-backup-config.html -
Configuring Nexus 5k for SAN switching between UCS 6100s and NetApp storage
We are trying to get our UCS environment setup to do SAN boot to LUNs on our NetApp storage. We have a pair of Nexus 5Ks with the Enterprise / SAN license on them and the 6-port FC module installed. What needs to be done to configure the Nexus 5000 to operate as the SAN switch between the storage target and the UCS environment?
I'm still not seeing the LUN on the NetApp device from my service profile. Here are the outputs from the two
commands you referenced here along with a few other commands if they help at all.
Port fc2/1 is the conneciton to the UCS 6100 with FCID 0x640004 being the vHBA in my Server profile.
Port fc2/5 is the NetApp target. I have the LUN masked to the vHBA port name 20:00:00:25:b5:01:00:ff
I have just the wwpn from the vHBA in my server profile and the wwpn of the NetApp target port zoned together. I'm not seeing any FC traffic at the NetApp though from looking at the statistics. Do I need to include something else in my zoning?
Again, any assistance would be appreciated. This is obviously our first venture into FC... -
Hi - I'm searching for a lower end switch that supports WCCP. According to the feature navigator the 3550 is the only one that supports wccp. The only 3550 still available is the DC version, for which you can only get the SMI version and not the EMI version that supports wccp. According to the CCO the 3560 and 3750 does not support wccp.
ThanksHi,
Your research is correct - the 3550 was the only low-end layer-3 switch which supported wccp. (Only Cisco knows why the others don't support it)
Another alternative, if you really need all those switch ports, is something like a 2800 series with either a 16 or 36 port etherswitch module (NM-16ESW or NMD-36-ESW).
HTH
Andrew. -
Configure all ports on a switch with one statement?
Is there a way on a 3500 series switch (IOS) to configure all the ports with 1 interface command...ie, setting ST-Portfast on ports 1-24, with something like
config t --> interf faste 0/1-24
Thanks for any repliesYes, you can with the int range command.
SW1-3550#config t
SW1-3550(config)#int range f0/1 - 24
SW1-3550(config-if-range)#spanning-tree portfast
HTH,
Sundar -
Best way to configure and connect two 4500 switches
I have a core 4507r+e in our production environment. We just acquired a 4500r and I would like to use it a distribution switch. What’s the best way to configure the new 4500r switch to connect to the core 4500 switch?
Disclaimer
The Author of this posting offers the information contained within this posting without consideration and with the reader's understanding that there's no implied or expressed suitability or fitness for any purpose. Information provided is for informational purposes only and should not be construed as rendering professional advice of any kind. Usage of this posting's information is solely at reader's own risk.
Liability Disclaimer
In no event shall Author be liable for any damages whatsoever (including, without limitation, damages for loss of use, data or profit) arising out of the use or inability to use the posting's information even if Author has been advised of the possibility of such damage.
Posting
BTW, when you link your core to your distribution, the connecting link can be L2, L3 or both.
What I wanted to bring to your attention, 4500s can often easily oversubscribe some of their ports. Much depends on the sup and line cards being used. When you want to interconnect a core and distribution, you don't want to use a port that's something like 8:1 oversubscribed. (Further, if you're doing mostly L2, and all traffic L3 has to go to the core, depending on you traffic flows, a single link might have insufficient bandwidth.)
Also from core to distribution, if possible, it's good to avoid single points of failure. So if you only have one link between them, that link's transceivers (if used), the ports connected to, the line card connected to, are all single points of failure. (Of course, with only single sups in each chassis, that too is a single point of failure. From what you've described, from a performance and redundancy standpoint, you might actually be better off using a 4510R, with your two sups [if same model] and line cards - creating a collapsed core/distribution.) -
Configure DHCP on router and switch
Good afternoon,
I'm trying to configure DHCP using CLI on a 2610 router and 2950 switch. With my present config, the host at the end of the switch (configured to receive ip via DHCP) is not getting anything assigned. Here are some shows:
Router:
Router_1#show ip int br
Interface IP-Address OK? Method Status Protocol
FastEthernet0/0 192.168.10.1 YES manual up up (leading to switch)
Serial0/0 unassigned YES unset administratively down down
Serial0/1 unassigned YES unset administratively down down
Ethernet1/0 unassigned YES unset administratively down down
Ethernet1/1 unassigned YES unset administratively down down
Ethernet1/2 unassigned YES unset administratively down down
Ethernet1/3 unassigned YES unset administratively down down
Router_1#show ip dhcp pool
Pool acer_pool :
Utilization mark (high/low) : 100 / 0
Subnet size (first/next) : 0 / 0
Total addresses : 254
Leased addresses : 0
Pending event : none
1 subnet is currently in the pool :
Current index IP address range Leased addresses
192.168.10.1 192.168.10.1 - 192.168.10.254 0
Switch:
Switch_1#show ip int br
Interface IP-Address OK? Method Status Protocol
Vlan1 unassigned YES NVRAM up up
FastEthernet0/1 unassigned YES unset up up (leading to router)
FastEthernet0/2 unassigned YES unset down down
FastEthernet0/3 unassigned YES unset down down
FastEthernet0/4 unassigned YES unset down down
FastEthernet0/5 unassigned YES unset down down
FastEthernet0/6 unassigned YES unset down down
FastEthernet0/7 unassigned YES unset down down
FastEthernet0/8 unassigned YES unset down down
FastEthernet0/9 unassigned YES unset down down
FastEthernet0/10 unassigned YES unset down down
FastEthernet0/11 unassigned YES unset down down
FastEthernet0/12 unassigned YES unset down down
FastEthernet0/13 unassigned YES unset down down
FastEthernet0/14 unassigned YES unset down down
FastEthernet0/15 unassigned YES unset down down
FastEthernet0/16 unassigned YES unset down down
FastEthernet0/17 unassigned YES unset down down
FastEthernet0/18 unassigned YES unset down down
FastEthernet0/19 unassigned YES unset down down
FastEthernet0/20 unassigned YES unset down down
FastEthernet0/21 unassigned YES unset down down
FastEthernet0/22 unassigned YES unset up up
FastEthernet0/23 unassigned YES unset down down
FastEthernet0/24 unassigned YES unset down down
What other info can I supply to resolve this?
Thanks.Hi Moh,
First, thanks for pointing out that I'm in the wrong section of the forums. My bad. I'll pay closer attention next time.
Second, I tried your suggestion but it failed to work. I cleared the configs of the router so I could start with a clean slate and followed your commands to the letter. The host can't seem to get an IP assigned and the here's what I get with a Show IP DHCP Pool:
Router_1#show ip dhcp pool
Pool vlan1 :
Utilization mark (high/low) : 100 / 0
Subnet size (first/next) : 0 / 0
Total addresses : 254
Leased addresses : 0
Pending event : none
1 subnet is currently in the pool :
Current index IP address range Leased addresses
192.168.10.1 192.168.10.1 - 192.168.10.254 0
Am I missing something?
Maybe you are looking for
-
Cannot print anything from internet using Firefox as browser. Please advise. I have to use Firefox for internet college courses, cannot print my assignments. I do not have this problem on Mac or using Internet Explorer. Only happens when using Firefo
-
How we will display the header data and item data seperately in lists
how we will display the header data and item data seperately in lists
-
After Effects crash when calling ProjSuite5()- AEGP_OpenProjectFromPath
I'm running 12.2 I have code that opens a project. The only time this code doesn't make after effects crash is in the ImportFile command method; however, I'm trying to run a server ontop of my plugin so I can control after effects remotely. AEGP_Proj
-
Bonjour Services could not be stopped
I've had it with the stupid bonjour services. I have searched for countless hours for a solution, and even emailed the head-honchos. But it was "out of their field." A message pops up during installation, and says, "Service 'Bonjour service' (Bonjour
-
How to pull the data into smartform after designing layout?
how to pull the data into smartform after designing layout?