Lots of deny statements in the redirect list

The following WAAS Configuration Guide has you configure the long redirect list below for "Network Modules." Does Cisco recommend we us the same redirect list for WAAS appliances as well?
http://www.cisco.com/en/US/partner/docs/app_ntwk_services/waas/waas/v421/quick/guide/waasqcg.html#wp1432144
ip wccp version 2
ip wccp 61 redirect-list waas-wccp-redirect-list
ip wccp 62 redirect-list waas-wccp-redirect-list
ip access-list extended waas-wccp-redirect-list
remark WAAS WCCP Pilot Redirect list
deny tcp any any eq telnet
deny tcp any any eq 22
deny tcp any any eq 161
deny tcp any any eq 162
deny tcp any any eq 123
deny tcp any any eq bgp
deny tcp any any eq tacacs
deny tcp any any eq 2000
deny tcp any any eq 5060
deny tcp any any eq 1718
deny tcp any any eq 1719
deny tcp any any eq 1720
deny tcp any any eq 554
deny tcp any any eq 1755
deny tcp any eq telnet any
deny tcp any eq 22 any
deny tcp any eq 161 any
deny tcp any eq 162 any
deny tcp any eq 123 any
deny tcp any eq bgp any
deny tcp any eq tacacs any
deny tcp any eq 2000 any
deny tcp any eq 5060 any
deny tcp any eq 1718 any
deny tcp any eq 1719 any
deny tcp any eq 1720 any
deny tcp any eq 554 any
deny tcp any eq 1755 any
permit tcp any any
end

A short addendum to this post as it causes some confusion for customers:
You don't have to configure a redirection ACL.
Some reasons to exclude traffic from WCCP redirection are:
you know some networks are not behind a WAE, so you can exclude them
you know some server is doing bad things and want to exclude it from acceleration, for example DC -> DC traffic is signed, so WAAS cannot accelerate it.
you want to reduce the latency on some very sensitive traffic that cannot get WAAS accelerated
you want to reduce the amount of redirected traffic on a software platform to reduce the general CPU/traffic load
Take into account that the WAAS will only ask to redirect TCP IPv4 traffic, so there is no need to exclude UDP for example.
Please note that on hardware platforms (Catalyst 3750, Catalyst 4500, Catalyst 6500, ASR 1000 or Nexus 7000) the redirection is often accelerated in hardware, so 'free', and the limitation to watch is the amount of TCAM space. Having a complex redirection ACL will eat up that TCAM space very fast so is actually worse.
Of course if you are redirecting too much traffic and this is causing overload on the attached WAAS devices you should consider having a redirection ACL.
Also always check the WCCP platform support white paper for platform specific limitations.
So in short: it depends , many customers take the easy route and don't have one, removing one more component to maintain and check.
Peter

Similar Messages

Passing Java statements in the parameter list

I am relatively new to Java and have a need to create a method which has a Java statement passed to it in the parameter list. The purpose is to optionally run this statement within the method. For example:
I have a method called rotateAndTranslate that sets up an Affine Transform by saving the existing transform context, creating a new transform, and then invoking that transform. After the new transform is invoked, I would like to have the ability to run different Java graphics commands (or not) before continuing with the remaining portion of the existing method (in this case, restoring the previous transform.
I am not able to find any clear information on how to pass in Java statements and then invoke them.
Can someone help with this? Please keep it simple as I am still trying to get my head around Java and OOP.
Carl

you're talking about closures, more or less, which java doesn't currently have
you can get close to it by using anonymous inner classes. define an interface, say Transformer, and pass instances of that as arguments:
public interface Transformer {
void transform();
Transformer transformer = new Transformer() {
public void transform() {
// do the work here
MyTransformerClass.doTransform(transformer);
...obviously, the MyTransformerClass.doTransform() must take a Transformer as a parameter

ASR1002 throughput degradation when wccp redirect-list is changed

We have two ASR 1002's going to 2 different WAN service providers, and two 7371 WAE load balanced by mask assignment. When we change the ACL (adding or removing lines) from our wccp redirect-list, the throughput on interfaces applied to the wccp service-groups is degraded to almost no traffic passing, until we completely remove wccp service group from the global configuration and then reapply. Then traffic throughput on the interface goes back to normal.
Our ACL defined in the redirect list specifies our specific networks on our WAN that have WAE's and need the redirection. All other networks are denied implicitly. We need to regularly change this ACL, and this service interruption is a major issue. This was not an issue before moving to the ASR platform from 7206's.
At TAC's request we have upgraded our IOS version to 15.1(3)S4 and that did not make any difference. Does anyone know why this occurs and if there is a way to work around this other than removing wccp configuration and adding back, every time the ACL needs to be modified?
As a side note to this... We have recently added riverbed appliances, and created separate service groups with separate redirect-lists. The exact same behavior occurs on the ASR 1002 when the ACL for the riverbed's redirect list is altered.

Thank you very much for sharing that information. It is great to hear verification that the mask assignment change did resolve your problem. That is the latest resolution that TAC has recommended, but we have to restart the WCCP service on all redundant edge routers to be able to implement this, so planning the outage window is taking some time. We've been told that TAC will set this up in a lab and test for us by our Cisco SE. We're hoping to get verfication that this actually resolves the problem before we take the outage.
If you could, can you tell me if this resolved the issue 100% or do you still have any performance issues when making a change to your WCCP ACL going to your bluecoat equipment? We may also need to implement this in our redirects to BlueCoat from our Nexus. Do you happen to have a link to how to make this change in Bluecoat? Thanks again!

WAAS Redirect -list on 4506

I am trying to configure a redirect on my 4506 device to restrict some data from being processed by the WAE located in my datacenter. Outside the redirect-list command, how do I prevent data from being processed by the WAE?
The IOS I am running is bootflash:cat4500-entservicesk9-mz.122-40.SG.bin and I run WCCPv2 on both the edge and the core appliances.
Thanks

Zach,
Thanks for your timely response. Is it possible to use the service group approach to block subnets that I do not want the WAE device to process?
On another note, if I have 2 frame relay subinterfaces. Where do I need to apply the "IP wccp 62 redirect in" command. Should I put them on only the physical interface (S0/0) or on both of the subinterfaces (S0/0.100 and S0/0.109)?
Thanks

Enterprise Manager is not able to connect to the database instance. The state of the components are listed below.

Dear all,
I have trouble to connect em console to database instance. My database is 11.2.0.3 and before this I did the patching from version 11.2.0.1, and now i cannot get fully functionality of em console.
error is:
Enterprise Manager is not able to connect to the database instance. The state of the components are listed below.
It shows that agent is connected, database and listener is up.
I did recreation, dropping and recreating with emca, but no success.
Did anyone have similar problems with em console?
Regards,

You need to first of all, Connect to the Database as SYSDBA (because your were not connected), then start the database (because it is not started).
If you already used the username and password in the command prompt and you are sure that the database is already stared, then you need to set the ORACLE_SID before you open SQLPlus. This is because if SQLPlus does not know the SID you are connecting to, it simply thinks it is not up or has no service hence the message "Connected to an idle instance".

How to skip the alv list when submit a report by SUBMIT statement?

Dear Experts,
I have to submit a report(RMVKON00) for a special request in my add-on program, I use the following statment:
SUBMIT RMVKON00
AND RETURN EXPORTING LIST TO MEMORY.
CALL FUNCTION 'LIST_FROM_MEMORY'
TABLES
    LISTOBJECT = ABAPLIST_TAB
EXCEPTIONS
    NOT_FOUND = 1
    OTHERS     = 2.
CALL FUNCTION 'LIST_TO_ASCI'
* EXPORTING
*   LIST_INDEX               = -1
*   WITH_LINE_BREAK          = ' '
TABLES
    LISTASCI                 = LISTASCI_TAB[]
   LISTOBJECT                = ABAPLIST_TAB
EXCEPTIONS
   EMPTY_LIST               = 1
   LIST_INDEX_INVALID       = 2
   OTHERS                   = 3
But it still display the alv list , and I must click button 'BACK' ,then it return my add on program.
I hope to skip the alv list (does not display the alv list ) .
Would you like to help me?
Thanks and Best Regards,
Colin.
Edited by: Colin on Jan 8, 2010 10:09 AM

Hi Colin,
I dont think you would be able to skip the ALV output using SUBMIT. However try changing the value of sy-lsind after the submit statement.
SUBMIT RMVKON00
AND RETURN EXPORTING LIST TO MEMORY.
sy-lsind = sy-lsind - 1.
If that doesnt work then try using JOB_START JOB_SUBMIT, JOB_CLOSE...
Thanks,
Best regards,
Prashant

My setup: iMac hardline to Canon i960 printer. Issue: endless printing of the same document. The printer window states that the pinter is in use and there is nothing listed in the Print Queue. How can I stop printing the document?

My setup: iMac hardline to Canon i960 printer. Issue: endless printing of the same document. The printer window states that the pinter is in use and there is nothing listed in the Print Queue. How can I stop printing the document?

Soution: Delete the printer and add the same printer back in, therefore creating a new print queue.

HT2509 Despite what this article states, Apple support told me not to try to remove any fonts as it could cause other possibly serious problems. Is there a program which can be safely installed which will keep at the top of the font list those fonts whic

An article in the New York Times yesterday told how to remove unwanted fonts from the Font Book. I followed its instructions (the same as those on the webpage "support.apple.com/kb/ht2509") and was NOT successful in removing fonts. Despite what the newspaper article and the web page stated, my attempts to remove fonts were unsuccessful. I use perhaps 15-20 of the hundreds and hundreds of fonts, and deleting those I don't use would make choosing a font a lot faster. I called support and was told not to try to remove any fonts which I myself had not added to the list(I have not added any) as doing so could cause significant problems elsewhere. The support tech suggested that there might be independent software programs which would keep at the top of the list those fonts I have used, which sure would speed up the process of selecting a font. Anyone know of such a program, or how to safely alter the font list Thanks.

I just spoke again to tech support and this time an answer was provided that works! Choose the font you want to use, drag it to the left, and a new "unnamed" folder will appear. Continue to drag into that folder fonts you want to use. You can click onto that folder to change its name. Then when using font book merely click on that folder to open it and select the font wanted. This tech rep also confirmed that you should NOT try to delete individual fonts as they are part of the basic operating system; he did confirm that the apple web page in parentheses above says otherwise, and will refer that to higher ups to see about removing or modifying that page.

It will not open Mozilla at all, it comes up with a problem box, which states on the first line: Access denied to system because of URL Filter Configuration.

Problem Report -
Access denied to system because of URL Filter Configuration.
Message ID -
FILTER_DENIED
Problem Description -
Your system was configured to deny access to the requested URL.
Possible Problem Cause -
Request denied, as specified in the local filter list configuration.
Possible Solution -
Contact your network support team if this problem persists.
It comes up with thie above in a box with two colums. i can only usse internet explorer now.

Does any body know how to fix it?
I just got off the phone to my new isp and they said they could not help me at all.

Msg 116, Level 16, State 1, Line 6 Only one expression can be specified in the select list when the subquery is not introduced with EXISTS.

Hello,
Can anyone help me?
select year(po.rdata) as 'Ano',
sum(etotal) as 'Valorp' ,
(select year(fo.data),Sum(etotal)
FROM fo (nolock)
where not exists ( select 1 from pl (nolock) where pl.adoc = fo.adoc and pl.cm = fo.doccode )
group by year(fo.data))as 'Valorap'
from po
group by year(po.rdata)
order by year(po.rdata)
Error
Msg 116, Level 16, State 1, Line 6
Only one expression can be specified in the select list when the subquery is not introduced with EXISTS.
Consultora

Hi Prashanth,
select year(po.rdata) as 'Ano',
sum(etotal) as 'Valorp' ,
(select Sum(etotal)
FROM fo (nolock)
where not exists ( select 1 from pl (nolock) where pl.adoc = fo.adoc and pl.cm = fo.doccode )
group by year(fo.data))as 'Valorap'
from po(nolock)
group by year(po.rdata)
order by year(po.rdata)
Gives me the error:
Msg 512, Level 16, State 1, Line 1
Subquery returned more than 1 value. This is not permitted when the subquery follows =, !=, <, <= , >, >= or when the subquery is used as an expression.
Thanks
Consultora

Can I use the `deny` statements is a SQL database

I have a web-app that I will need to scale to large proportions. In this web-app, I have a database in which some clients should not have access to specif tables. Can I use `deny` statements on an Azure SQL databases? Like this:
deny select on a_table to a_user

Hi James,
Yes you can use DENY statements. Please see
this link for more information on the usage of DENY statements.
Thanks
Silvia Doomra

Quite a lot of my music will not appear in the 'artist' list.....

i can only access it through the 'songs' list. Has this happened to anyone else and does anyone know how to fix it?
Thanks

There are usually two things that contribute to songs not appearing under Artist on the iPod, both due to information either in or missing from the Get Info>Info tab against the song in iTunes. 1) the song has no album name associated with it or 2) the song is marked as part of a compilation.
If tracks are missing an Album name in the Info tab, this information needs to be filled in. The no album one is a bit quirky as the songs will appear under certain circumstances (for instance I read somewhere that if you have at least two tracks with different album names the rest will appear), however the simplest remedy is just add None or Miscellaneous to all the blanks in place of a title. See this link for more detail: I don't see some of my songs when browsing by artist on my iPod
Also if the tracks are ticked in the Get Info>Info tab as part of a compilation, they will not appear under Artist on the iPod. Highlight a song in iTunes that you know is not appearing correctly on your iPod. Right click on it and choose Get Info and click the Info tab (alternatively choose Get Info from the File menu), if "Part of a Compilation" is marked untick it and afterwards update your iPod, you should find it now appears as normal. Setting "Compilations" on your iPod main menu prevents you getting lots of single artist entries when you load an album by various artists.

Can't make redirect-list on 4507R-E

I need to deploy WAAS between a branch and HQ.
The HQ side is a catalyst switch 6509-E (VSS) and branch side is a catalyst 4507R-E.
The 6509-E supports "Redirect Filter" (an access-list) filtering just the traffic you want. The following is my access-list on HQ side :
ip wccp 61 redirect-list WCCPLIST group-list 3
ip wccp 62 redirect-list WCCPLIST group-list 3
access-list 3 permit 10.X.X.X <--------- WAE IP address
ip access-list extended WCCPLIST
remark ** ACL used for WCCP redirect-list **
remark Deny VoIP Control Traffic
deny tcp any any eq 1300
deny tcp any any eq 2428
deny tcp any any eq 2000
deny tcp any any eq 2001
deny tcp any any eq 2002
deny tcp any any eq 2443
deny tcp any any eq 1718
deny tcp any any eq 1719
deny tcp any any eq 1720
deny tcp any any eq 5060
deny tcp any any range 11000 11999
remark Deny MGT Traffic
deny tcp any any eq telnet
deny tcp any eq telnet any
deny tcp any any eq 22
deny tcp any any eq 161
deny tcp any any eq 162
deny tcp any any eq 123
deny tcp any any eq 8443
remark Deny Routing
deny tcp any any eq bgp
remark Deny Authentication Traffic
deny tcp any any eq tacacs
remark Accelerate Traffic between Branch and HQ
permit tcp 10.Br.Br.0 0.0.0.255 10.HQ.HQ.0 0.0.0.255
permit tcp 10.HQ.HQ.0 0.0.0.255 10.Br.Br.0 0.0.0.255
Whereas on the Branch side, the platform 4507R-E doesn't support ACL with WCCP, so it means the WCCP will intercept all the TCP traffic.
What would be the impact and how do i deal with this situation.
Or is the WAEintellgent enough to pass through the unwanted traffic ?
Or do i need to make individual policy for pass-through for each of the unwanted traffic ?
Regards,
Jilani

Hi Jilani,
Can't see from your mail what kind of supervisor you are using in your 45xx switch.
But please be aware that if your're using af SUP-7-E or a SUP-7-L-E WCCP is NOT supported for the time being.
WCCP is supported in Hardware but we're waiting for a software release, which supports this.
This is according to the release notes :
SUP-7-L-E : http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst4500/release/note/OL_25346.html
SUP-7-E : http://www.cisco.com/en/US/partner/docs/switches/lan/catalyst4500/release/note/OL_24726.html
Strange thing is that you can actually "configure" some WCCP stuff, but the config will never hit the running-config.
And you cannot enable WCCP.
Feature navigator states that WCCP is available in IOS XE 3.2.0XO (for SUP-7-L-E) but release notes tend to be more trustworthy that feature navigator.
Best Regards
Finn Poulsen

A music album is listed multiple times in my library but each listing only has a few songs in it-not the full listing. How can I combine them into one album and get rid of other duplicate listings?

Several music albums listed in my IPhone 5 music library are listed multiple times, but each one only has a portion of the songs listed. How can I combine them to make one album?

First....Thank you so much for your prompt reply. I am sorry for not getting back to you regarding your suggestion-I had computer issues that just got resolved. Also, this is my first foray into online chat rooms so I have a lot to learn to precisely state my issue! I did as you suggested and all the songs list the same album when I go into each song's "get info". However, I am not sure how to edit as you suggested. When I downloaded this album originally, for some reason it broke up into several albums each with different songs from the original album. I am trying to consolidate them back into one album in my library. I would greatly appreciate further assistance if you can. Also, I do not use "the cloud" to store any data and would like a good source of info on how to do this. Thanks so much for your patience!
SueZoo

How to add a column to a list created with the Dynamic List Wizard to display the values of the fiel

Hi,
ADDT, Vista, WAMP5.0
We have 2 tables: clients_cli (id_cli, name_cli, tel_cli, and several more fields) and cases_cas (id_cas, idcli_cas, court_cas, and a lot of other fields).
Clients may have many cases, so table cases_cas have a foreign key named idcli_cas, just to determine which case belongs to which client.
We designed the lists of the two tables with the Dynamic List Wizard and the corresponding forms with Dynamic Form Wizard.
These two forms are linked with the Convert Dynamic List and Form Wizards, which added a button to clients list named "add case".
We add a client and then the system returns to the clients list displaying all clients, we look for the new client just added and then press "add case", which opens the Dynamic Form for cases, enter all case details and everything processes ok.
However, when we view the cases list it display all the details of the case, including the column and values for the foreign key idcli_cas. As you can image, it is quite difficult for a human to remember the clients ids.
So, in the cases list we added a another column, named it Name, to display the names of the clients along with cases details. We also created another recordset rsCli, selected the clients_cli table, displaying all columns, set filter id_cli = Form Variable = idcli_cas then press the Test button and everything displays perfect. Press ok.
Then, we position the cursor inside the corresponding cell of the new Name column, go to Bindings, click on name_cli and then click on insert. The dynamic field is inserted into the table cell as expected, Save the page, and test in browser.
The browser call the cases list but fails to display the values of the Name column. The Name column is simply empty.
This issue creates a huge problem that makes our application too difficult to use.
What are we doing wrong?
Please help.
Charles

1.     Start transaction PM01, Create Infotype, by entering the transaction code.
You access the Create Infotype screen.
2.     Choose List Screen.
3.     In the Infotype no. field, enter the four-digit number of the infotype you want to create.
When you specify the infotype number, please remember to enter any leading zeros.
4.     In the Screen Number field, enter the screen number of the list screen you want to enhance.
5.     Choose Create.
The Dictionary: Initial screen appears:
6.     Create the list screen structure.
7.     Choose Activate.
8.     Return to the Enhance List Screen in the Enhance Infotypes transaction (PM01).
9.     Choose Create All.
The additional fields are displayed on the list screen, however, they contain no data.
The fields can be filled in the FORM routine FILL-LISTSTRUCT in the generated program ZPnnnn00. The FORM routine is called for each data record in the list.
Structure ZPLIS is identified when it is generated with a TABLES statement in the program ZPnnnn00.
The fields can be filled from the Pnnnn structure or by reading text tables.

Lots of deny statements in the redirect list

Similar Messages

Maybe you are looking for