WAAS 4.41 upgrade & WCCP

Hi,
Since upgrdae a 512 WAAS to 4.4.1 which connects to a 3750, WCCP will not associate.
A debug on the 3750 "deb ip wccp eve" gives the following :
Aug 8 15:16:35: WCCP-EVNT:D61: Here_I_Am packet from 172.18.4.241 w/bad rcv_id 00000000
Aug 8 15:16:36: WCCP-EVNT:D62: Here_I_Am packet from 172.18.4.241 w/bad rcv_id 00000000
comming from the waas
2011 Aug 8 14:36:10 UKHSL-WAAS02 wccp: %WAAS-UNKNOWN-7-899999: Query removal message from 172.18.4.242
2011 Aug 8 14:36:10 UKHSL-WAAS02 wccp: %WAAS-UNKNOWN-7-899999: wccp2.c:8176:
2011 Aug 8 14:36:10 UKHSL-WAAS02 wccp: %WAAS-UNKNOWN-7-899999: Removal Query from rtr 172.18.1.1 which is not configured for service 61.
2011 Aug 8 14:36:27 UKHSL-WAAS02 wccp: %WAAS-UNKNOWN-7-899999: wccp2.c:8156:
2011 Aug 8 14:36:27 UKHSL-WAAS02 wccp: %WAAS-UNKNOWN-7-899999: Query removal message from 172.18.4.242
2011 Aug 8 14:36:27 UKHSL-WAAS02 wccp: %WAAS-UNKNOWN-7-899999: wccp2.c:8176:
2011 Aug 8 14:36:27 UKHSL-WAAS02 wccp: %WAAS-UNKNOWN-7-899999: Removal Query from rtr 172.18.1.1 which is not configured for service 62.
2011 Aug 8 14:36:40 UKHSL-WAAS02 wccp: %WAAS-UNKNOWN-7-899999: wccp2.c:8156:
2011 Aug 8 14:36:40 UKHSL-WAAS02 wccp: %WAAS-UNKNOWN-7-899999: Query removal message from 172.18.4.242
2011 Aug 8 14:36:40 UKHSL-WAAS02 wccp: %WAAS-UNKNOWN-7-899999: wccp2.c:8176:
2011 Aug 8 14:36:40 UKHSL-WAAS02 wccp: %WAAS-UNKNOWN-7-899999: Removal Query from rtr 172.18.1.1 which is not configured for service 61.
where as the switch is send
HSL-S-001#
Aug 8 15:37:38: WCCP-PKT:D62: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B16
Aug 8 15:37:39: WCCP-PKT:D61: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B1E
HSL-S-001#
Aug 8 15:37:40: WCCP-PKT:D62: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B17
HSL-S-001#
Aug 8 15:37:41: WCCP-PKT:D61: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B1F
Aug 8 15:37:42: WCCP-PKT:D62: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B18
HSL-S-001#
Aug 8 15:37:43: WCCP-PKT:D61: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B20
Aug 8 15:37:44: WCCP-PKT:D62: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B19
Aug 8 15:37:44: WCCP-PKT:D61: Sending Removal_Query packet to 172.18.4.241w/ rcv_id 00018B21
HSL-S-001#
Aug 8 15:37:45: WCCP-PKT:D61: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B22
Aug 8 15:37:46: WCCP-PKT:D62: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B1A
HSL-S-001#
Aug 8 15:37:47: WCCP-PKT:D61: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B23
HSL-S-001#
Aug 8 15:37:48: WCCP-PKT:D62: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B1B
Aug 8 15:37:49: WCCP-PKT:D61: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B24
HSL-S-001#u all
All possible debugging has been turned off
HSL-S-001#
Aug 8 15:37:50: WCCP-PKT:D62: Sending I_See_You packet to 172.18.4.241 w/ rcv_id 00018B1C
WCCP Status switch
HSL-S-001#sh ip wccp 61
Global WCCP information:
    Router information:
        Router Identifier:                   172.18.1.1
        Protocol Version:                    2.0
    Service Identifier: 61
        Number of Service Group Clients:     0
        Number of Service Group Routers:     0
        Total Packets s/w Redirected:        0
          Process:                           0
          CEF:                               0
        Redirect access-list:                WAAS-IP
        Total Packets Denied Redirect:       0
        Total Packets Unassigned:            0
        Group access-list:                   -none-
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total Bypassed Packets Received:     0
WCCP Status WAAS
KHSL-WAAS02#sh wccp routers
Router Information for Service: TCP Promiscuous 61
        Routers Seeing this Wide Area Engine(0)
                -NONE-
        Routers not Seeing this Wide Area Engine
                172.18.1.1
        Routers Notified of from other WAE's
                -NONE-
        Multicast Addresses Configured
                -NONE-
Router Information for Service: TCP Promiscuous 62
        Routers Seeing this Wide Area Engine(0)
                -NONE-
        Routers not Seeing this Wide Area Engine
                172.18.1.1
        Routers Notified of from other WAE's
                -NONE-
        Multicast Addresses Configured
                -NONE-
Any ideas
Thanks

Ian,
Can you provide the show run output from both the WAE and the 3750?
Also give the output of show sdm prefer and show version from the 3750.
Have you tried bouncing WCCP (on the WAE no wccp ver 2, wccp ver 2)?
Note when doing wccp with WAE and 3750 these are the requirements/ restrictions:
1) WAE must be Layer 2 adjacent and configured for l2-redirect and mask-assignment
wccp tcp-promiscuous router-list-num 8 l2-redirect mask-assign
2) The 3750 must be running a routing SDM template (e.g. desktop-routing)
3750-Stack#sh sdm prefer
The current template is "desktop routing" template.
The selected template optimizes the resources in the switch to support
this level of features for
8 routed interfaces and 1024 VLANs.
number of unicast mac addresses:                  3K
number of IPv4 IGMP groups + multicast routes:    1K
number of IPv4 unicast routes:                    11K
    number of directly-connected IPv4 hosts:        3K
    number of indirect IPv4 routes:                 8K
number of IPv4 policy based routing aces:         0.5K
number of IPv4/MAC qos aces:                      0.75K
number of IPv4/MAC security aces:                 1K
The important entry is:
"number of IPv4 policy based routing aces:         0.5K"
3) You can only use redirect in statements on your L3 interfaces of the 3750.
4) If you are using a redirect list, the ACL can only have permit statements.
Regards,
Mike Korenbaum
Cisco Data Center PDI Help Desk
http://www.cisco.com/go/pdihelpdesk

Similar Messages

Confusion on which WAAS software to upgrade to.

I have several WAE appliances (7341 and 612) and several NM-WAE-522-K9 network modules. They are all running 4.1.3b.
I want to upgrade them to 4.1.5a, but when I go on to CCO there are two places to find software. One is under Wide Area Application Engine Series (Appliances)(which I assume is for the 7341 and 612) where you choose either WAAS 4.1 3DES or WAAS 4.1 directories. Under those two directories the software only goes to the 4.1.3a.32 image
Under the other directory, the WAAS(Software)(which I assume is for the network modules WAEs since they aren't appliances) directory, you can find the 4.1.5a image.
Does that mean that the 7341 and 612 appliances don't have a 4.1.5a image, or do I use that image for every WAAS device there is? Kind of confusing.

Jim,
It's definitely confusing with all the different links. The code is all the same, just some don't have the links to the newer stuff. Use the "Wide Area Application Services (WAAS) Software" link for the 4.1.5a image, but it's all the same.
Dan

Waas version for upgrade

I am going to upgrade from 4.1.1c to either 4.3.1x or 4.4.1x, but is one more stable than the other? What's the big difference between the 2 versions? I have a 674, 7341's and 502's to upgrade.
thanks,

Hi,
I would have a look at the new features introduced in 4.4.1:
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v441/release/notes/ws441xrn.html#wp105332
If you want to use any of these, I would consider upgrading to that one.
If not, I would stick to 4.3.1 since there are been a couple of code changes in 4.4.1 (DRE for instance) and you might want to wait for a couple of interims before moving to this version if you are not planning to use any of the new features.
If you do, the only thing I can tell you is that we haven't seen much 4.4.1 cases in TAC since it was released so it seems to be pretty stable already
PS: If you are still using legacy CIFS, just keep in mind that it has been completely removed from 4.4.1 so you'll need to migrate to CIFS AO before the upgrade.
Regards,
Nicolas

WAAS 502/522 upgrades

I am looking for a process to upgrade the WAAS code on WAE-502's and 522's but without being on the production network and visible to the CM where the software patch is usually distributed from. Is there a way to manually do the upgrade by popping the 502 into a 2811 router and using the external port to connect to a lab network that can see an FTP server in the lab with the WAAS code on it? I just need a way to manually do the upgrade in a lab environment.
Thanks

yes you can plug the WAE-NME into a lab 2800 and then do an install via FTP.
command: copy ftp install
Upon reload new software will take effect
Upgrade procedure:
http://www.cisco.com/en/US/partner/docs/app_ntwk_services/waas/waas/v413/configuration/guide/maint.html

WAAS and WCCP question

Is it possible to transition between two different WAAS appliances if using WCCP redirection? Currently I'm using a WAVE 274 and want to migrate to a recently installed NM-WAE-522. WCCP is currently being used to redirect traffic to the WAVE. Can I simply add the WAE to the WCCP config and then remove the WAVE?

Does it matter that they are in the same subnet or not? The NM-WAE-522 is obviously on the same subnet as one of the router interfaces, but the WAVE-274 is actually on a different subnet off of our 6509. I thought I remembered reading that it was at least recommended that WCCP devices be on the same subnet for load balancing, but I'm guessing it doesn't matter as I'm using L3 GRE redirection.

Urgent ! Router-WAAS WCCP problem

I have dot1q enabled 7507 connecting frame relay branch to data centre.
Core WAAS sits on a VLAN subinterface.
As soon as I enable "ip wcccp redirect 61 in" on VLAN trunked interface, I am loosing connection to the branch.
the config is here..
interface GigabitEthernet4/0/0
description Core Data Centre Trunk VLAN 3,120 to SWDC03 3/16
no ip address
no ip redirects
no ip unreachables
no ip proxy-arp
load-interval 30
negotiation auto
no cdp enable
interface GigabitEthernet4/0/0.3
description Core Data Centre VLAN
encap dot1q 3
ip address xxxx
ip wccp 61 redirect in
no ip redirects
no ip unreachables
no ip proxy-arp
ip nbar protocol-discovery
ip route-cache flow
no cdp enable
standby 3 ip 10.64.205.17
standby 3 priority 150
standby 3 preempt
interface GigabitEthernet4/0/0.120
description Core WAAS VLAN120
encap dot1q 120
ip address yyyyyyy
ip wccp redirect exclude in
no ip redirects
no ip unreachables
interface Serial0/0/3.64 point-to-point
ip wccp 62 redirect in
The IOS version is rsp-jsv-mz.123-17b and WAAS version 4.0.13.I have tested this before without VLAN trunking on another router using a seperate interface and it was working.Any idea ?
thanks

thanks guys. I will explain the problem a bit more.When WAAS sits on a seperate i/f on WAN router, it works fine. i.e "wccp redirect 61 in " on interface connecting WAN router to Data Centre and "wccp redirect 62 in" on WAN frame relay. Then I configured the i/f connecting WAN router to Data Centre as dot1q trunk and a dedicated VLAN is created for WAAS. The default gateway for WAAS is HSRP address in 6509s. The WCCP router address configured in WAAS is the loopback0 address of the WAN router. The "wccp redirect 62 in" on WAN frame relay stays same. However, " wccp redirect 61 in " carried to a new subinterface on the same access as WAAS VLAN.
All WCCP commands show that there is a connection between WAAS and WAN router, packet count goes up. However, all TCP sessions to the brach (initiated from the Data Centre) fail. I have also tested with and without "wccp redirect exclude in" on WAAS VLAN subinterface without success. Since I had to install the branch the WAAS on the weekend, I moved WAAS back to dedicated interface on WAN router. It works fine but I can not implement redundancy.
The suggestion was to make WAN router subinterface HSRP active rather than 6509 MSFCs.So WAAS talks to WAN routers loopback address and default gateway also points to the same router rather than MSFC. I have not had a chance to test this but I will test in the coming weeks. I was also suggested to use layer2 redirection on 6509 but did not have any chance to look at it closely.
thanks
Serhat

WCCP assignment method mismatch

Hi all,
I am using a Cisco 3825 running 12.4(25G) code. I just upgraded my WAE (oe674) to 5.1.1c.
The WAE and router wouldnt peer due to assignment method mismatch when i do a show wccp router.
Router Information for Service Id: 61
        Routers Seeing this Wide Area Engine(0)
                -NONE-
        Routers not Seeing this Wide Area Engine
        10.204.28.1     - Assignment Method Mismatch
        Routers Notified of from other WAE's
                -NONE-
Router Information for Service Id: 62
        Routers Seeing this Wide Area Engine(0)
                -NONE-
        Routers not Seeing this Wide Area Engine
        10.204.28.1     - Assignment Method Mismatch
        Routers Notified of from other WAE's
                -NONE-
The WAE is configured as follows:
wccp router-list 1 10.204.28.1
wccp tcp-promiscuous service-pair 61 62
router-list-num 1
assignment-method mask
password ****
redirect-method gre
egress-method wccp-gre
enable
exit
wccp flow-redirect enable
When i changed the assignment method to hash, everything worked. I believe Cisco 3825 should support Mask.
Any advice?

Hi Leonardo,
Did you try disabling wccp on router as well as WAE and re-enable it on router and then WAE and see if that makes a difference? If you have already done that and since as per documentation MASK assignment is supported in version you are running on router and it was working prior to upgrade, i would suggest capturing WCCP communication i.e HIA and ISU and opening a TAC case for further investigation. Did you follow the procedure as suggested in release notes during upgrade?
WCCP Interoperability
Central Managers running Version 5.1.1x can manage WAEs running software Versions 4.2.1 and later. However, we recommend that all WAEs in a given WCCP service group be running the same version.
Note All WAEs in a WCCP service group must have the same mask.
To upgrade the WAEs in your WCCP service group, follow these steps:
Step 1 You must disable WCCP redirection on the Cisco IOS router first. To remove the global WCCP configuration, use the following no ip wccp global configuration commands:
Router(config)# no ip wccp 61
Router(config)# no ip wccp 62
Step 2 Perform the WAAS software upgrade on all WAEs using the WAAS Central Manager GUI.
Step 3 Verify that all WAEs have been upgraded in the Devices pane of the WAAS Central Manager GUI. Choose Devices to view the software version of each WAE.
Step 4 If mask assignment is used for WCCP, ensure that all WAEs in the service group are using the same WCCP mask value.
Step 5 Reenable WCCP redirection on the Cisco IOS routers. To enable WCCP redirection, use the ip wccp global configuration commands:
Router(config)# ip wccp 61
Router(config)# ip wccp 62
Release notes for your reference.
http://www.cisco.com/en/US/docs/app_ntwk_services/waas/waas/v511/release/notes/ws511xrn.html#wp151010
Regards,
Kanwal

Branch IPSEC VPN Site with WCCP setup for vWAAS - Overthinking this

OK, I have a fairly large WAAS environment so I'm kicking myself for overthinking this. I have a particular branch that has an 881 router that terminates an IPSEC connection back to my main location. I have a vWAAS at this branch site, so I'm going WCCP. I got the license upgrade to enable to the WCCP feature set. Now Im confused on the WCCP setup. There is only 1 VLAN at the branch. I have the WAAS setup to do WCCP GRE.
Question is: Would I do the redirect 61,62 on the VLAN1 internface? I think I would, but Im used to dropping the 62 on the serial interface of my MPLS. I.E.:
int vlan1
ip wccp 62 redirect in
ip wccp 61 redirect in
HERE IS THE CURRENT CONFIG
ip wccp 61 redirect-list branch-waas
ip wccp 62 redirect-list branch-waas
interface Vlan1
description Branch Data VLAN
ip address 10.22.1.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
ip tcp adjust-mss 1452
crypto ipsec client ezvpn Corporate-client inside
ip access-list extended branch-waas
remark WCCP Redirect ACL
deny   tcp any any eq telnet
deny   tcp any any eq 22
permit ip any any

wccp 62 is to intercept the WAN traffic, but if you put it on the LAN side, you have to catch the traffic on its way out:
ip wccp 62 redirect out
There is no need to deny telnet and ssh, those both have policies in WAAS for passthrough. Also, I prefer to put my WAAS device on its own VLAN. However, if it is going to be on VLAN 1, your access list will need:
ip access-list extended branch-waas
remark WCCP Redirect ACL
deny   ip any host (WAAS IP)
deny   ip host (WAAS IP) any
permit ip any any
To make sure you do not loop WCCP traffic.
Just edited to change from TCP to IP in access list.

WCCP Mask change in 4.2.3c

Hi All,
We upgraded the WAE from 4.1.5f to 4.2.3c. We did not disable WCCP in the IOS router before and after the upgarde so the Mask assignment remained the same ( 0x1741).
We have the situtaion where , we need to add a new WAE with code with code 4.2.3c to existing setup which has existing WAE.
How do we change the WCCP Mask assignment to 0xF00 in the IOS router so that we can make both WAE to work in load sharing basis.
Thanks,
-Dhana

Dhana,
Before adding the 4.2.3 WAE to this farm which should have the default mask of 0xF00 configured already, you will need to go to the CLI of the other two WAEs that were upgraded from 4.1.5 and execute the config command "wccp mask is src-ip-mask 0xf00 dst-ip-mask 0x0"
Then all three WAEs will have the same mask value, and it will be safe to bring the 3rd WAE into this farm.
No configuration changes are required on the router.
Regards,
Mike Korenbaum
Cisco WAAS PDI Help Desk
http://www.cisco.com/go/pdihelpdesk

Cisco WAAS and Content Switching Module compatiblity

We are planning to implement WAAS on our hub's 6500 core switches, so that TCP connections from the end sites users to the servers in the hub can be optimized. But we have the servers VLAN groups under the Cisco CSM module already. Are the client-server connections still able to be optimized by WAAS?

Hi Joe
let's seperate out the two topics here.
a) WAAS traffic interception with wccp
b) CSM
a) when you say vlan 200 is where target servers are connected, is that the CSM client side vlan? or the actual server vlan ?
the bottom line is you need to make sure the interface where you configure "ip wccp 61 redirect in" is recieving traffic from servers towards .
Good reference for WCCP best practices in 6500
http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_paper_c11-629052.html
b) yes you can configure stickiness for session persistance as in below URL
http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/csm/4.2.x/configuration/guide/addftrs.html
Thanks

Waas doubling traffic instead of reducing it?

I have 2 WAAS boxes redirected with WCCP (promiscous lists 61/62 on 3800 routers)...We have deployed before like this with no issue but in this case, for some reason, it appears the CIFS traffic that is tunneled over port 4050 between the pair of boxes is not reducing, but yet doubling in size! This is occuring on multiple conversations between the 2 boxes. I thought maybe it was an asymetrical thing but the GRE stuff is enabled on both appliances with "egress-method negotiated-return intercept-method wccp"
Any ideas?
Polices say TCP_OPTIMIZE + DRE +LZ but its doubling the traffic bizzaare

The only reason I can currently think of is that WAAS compression have made it possible for extra traffic to cross the WAN.

WAAS support by non WCCPv2 switches ?

My company is considering a evaluation / test of the WAAS etechnology. We already use 2811 remote routers and core 7206 routers. Our switching is by Enterasys (Cabletron). Enterasys switches do not support WCCPv2. Will we be required to upgrate to Cisco switches to get the WCCPv2 support? Does WAAS require WCCPv2 ?

Mike,
WAAS does not require WCCP for interception. You can also use Policy-Based Routing (PBR), although I'm not sure if there is an equivilant on Enterasys switches.
Can you not run WCCP on the 2811 and 7206 routers?
Zach

WCCP - Questions

Hello All,
I am looking at WCCP for traffic redirection for our WAAS deployment and here is my scenario. At the data center I have a 6509 with MSFC2 and two WAN routers connecting to the 6509. My question is where do I enable WCCP for traffic redirection ?
1- Do I create another VLAN for the WAAS network and enable WCCP at the MSFC only ?
2- Do I enable WCCP on both WAN routers only ?
3- Do I enable WCCP on the WAN routers as well as the MSFC ?
Thanks very much !!
Danny

These URLS might help :
http://www.cisco.com/en/US/docs/switches/lan/catalyst6500/ios/12.2SX/configuration/guide/wccp.html
http://www.cisco.com/en/US/docs/ios/12_2/configfun/command/reference/frf018.html

WAAS mobile with Vista

Hi All,
when I turn on WAAS client on the windows Vista, the network connection is disconnected but it works with XP like a charm. any suggestion would be very appreciated.
Alex

Thanks for the reply,
I've upgraded to newest version of WAAS mobile and upgrade client as well and problem has been resolved. But still I have another issue, when I run Cisco VPN client with WAAS mobile enable, then I try to access to the web page intranet. I can ping web server IP address, I can access to the web page, but when I enter username and password, it doesn't let me to login. when I turn off WAAS client, I am able to login to intranet web page.
any suggetion?
thanks
Alex

ASR1002 WCCP L2 Forwarding Redirection setup

Hi WCCP experts,
Two questions please.
According to
IP Application Services Configuration Guide, Cisco IOS XE Release 3S (Cisco ASR 1000).
• The following limitation applies to WCCP Layer 2 Forwarding and Return feature:
Layer 2 redirection requires that content engines be directly connected to an interface on each WCCP router.
Q1. Will it work if there is a L2 switch between the WCCP router and conte engines?
Right now we have the WCCP ASR1002 router connected to a L2 switch trunk port. One of the sub-interfaces will be used for the connection to content engines.
. For content engines running Application and Content Networking System (ACNS) software, use the wccp
custom-web-cache command with the l2-redirect keyword to configure L2 redirection. For content
engines running Cisco Wide Area Application Services (WAAS) software, use the wccp tcp-promiscuous
command with the l2-redirect keyword to configure L2 redirection.
Q2. I have Blue Coat as content engines. What configuration commands ASR1002 should have for L2 redirection?
Thanks
Cedar

Hi Cedar,
If i am not wrong the directly connected actually means that ASR and CE or in your case Blue coat proxy should be in the same subnet. If they are in the same subnet then of course you can use switch in between.
http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipapp/configuration/xe-3s/iap-xe-3s-book/iap-wccp.html#GUID-CAE67F60-CD04-4134-9E7B-995E76608216
Have a look at the link above and look at L2 redirection and return.
Wccp customer-web-cache etc are all services and you can use any one or custom numbers as your network requirment. You can use 90 or web-cache which is for port 80 or 61, 62 etc.
You can see the list of well known service groups.
Regards,
Kanwal

WAAS 4.41 upgrade & WCCP

Similar Messages

Maybe you are looking for