WAAS- WCCP config on ISR with NME
Is the "ip wccp redirect exclude in" command needed under the "interface Integrated-Service-Engine for the NME"? I am not running inline.
Jeff,
The 502 and the 512 are definitely different size boxes.
NME-502 can handle up to 500 Optimized TCP connections and has a 120 GB hard drive with 1 GB of RAM.
WAE-512-1GB can handle up to 750 Optimized TCP connections and has a 250 GB hard drive (optional RAID 1) with 1 GB of RAM.
WAE-512-2GB can handle up to 1500 Optimized TCP connections and has a 250 GB hard drive (optional RAID 1) with 2 GB of RAM.
So they should be directed at different size of sites as there is more processing power as well as disk cache space on the WAE-512. The NME-522 can handle roughly the same number of connections as the WAE-512, however it still doesn't have as much disk space for cache.
Hope that helps,
Dan
Similar Messages
-
NME-WAE-502 wccp config example?
I have a branch deployed with an appliance using WCCP and I just purchased a module for a smaller site. I am having trouble equating my appliance wccp config over to the module. Read all the white papers but I am missing something really simple.
In the appliance deployment I have a subinterface on my router with a dedicated segment for the appliance (lets say .1 on the router and .5 on the appliance)
On the module I am not able to give the IN 1/0 interface an IP on the same segment as my subinterface, hence my confusion. none of the documents I have read really address the config to that level of detail (IP schemes)
I have given the module a dummy IP and its configured other than the fact that im not sure how to IP it vs the router to get the traffic to flow properly.
a config example would be greatly appreciated.
Thanks,
-ScottHere is the router using wccp with the appliance, see if this looks okay.
ip wccp 61 redirect-list 111
ip wccp 62 redirect-list 111
interface Multilink1
bandwidth 3072
ip address x.x.x.x 255.255.255.252
ip wccp 62 redirect in
no peer neighbor-route
ppp chap hostname p1672490-1810058
ppp multilink
ppp multilink group 1
ppp multilink fragment disable
service-policy output wanQOS
interface GigabitEthernet0/0
description DATA
ip address 10.75.121.3 255.255.255.0
ip helper-address 10.60.6.119
ip wccp 61 redirect in
ip flow ingress
duplex auto
speed auto
standby 0 ip 10.75.121.1
standby 0 priority 110
standby 0 preempt
interface GigabitEthernet0/0.74
description waas
encapsulation dot1Q 74
ip address 10.74.121.2 255.255.255.0
ip helper-address 10.60.6.119
ip wccp redirect exclude in
ip flow ingress
standby 0 ip 10.74.121.1
standby 0 priority 110
standby 0 preempt
interface GigabitEthernet0/0.76
description VOICE
encapsulation dot1Q 76
ip address 10.76.121.3 255.255.255.0
ip helper-address 10.60.6.119
ip wccp redirect exclude in
ip flow ingress
standby 0 ip 10.76.121.1
standby 0 priority 110
standby 0 preempt
access-list 111 deny ip 10.60.200.0 0.0.0.255 any <--callmanager segment
access-list 111 deny ip 10.76.0.0 0.0.255.255 any
access-list 111 permit ip any any -
I have a branch deployed with an appliance using WCCP and I just purchased a module for a smaller site. I am having trouble equating wccp config over to the module. Read all the white papers but I am missing something really simple.
I will apreciate to help me about this issue, I have two week with the same issue.
I send the configuration the remote BRANCH and the topology..
I wait for your coments , specially with the words marks.
ip wccp 61 redirect-list CRONOS
ip wccp 62
interface Loopback1
description Loopback BGP
ip address 192.168.249.8 255.255.255.255
interface GigabitEthernet0/0
description Interface LAN
ip address 192.168.161.4 255.255.255.0
no ip proxy-arp
ip accounting output-packets
ip wccp 61 redirect in
ip wccp 62 redirect out
ip route-cache flow
duplex auto
speed auto
standby 1 ip
standby 1 priority 220
standby 1 preempt
service-policy input LAN-PANA2-MARQ
service-policy output WAN-PANA2-QOS
interface GigabitEthernet0/1
description ENLACE TLC_ASB_50
ip address 192.168.167.13 255.255.255.252
no ip proxy-arp
duplex auto
speed auto
service-policy input LAN-PANA2-MARQ
interface Serial0/0/0
description Enlace a PERU
bandwidth 2048
ip address 192.168.114.9 255.255.255.252
ip accounting output-packets
ip wccp 61 redirect in
ip wccp 62 redirect in
ip flow ingress
ip flow egress
encapsulation ppp
load-interval 30
shutdown
interface Serial0/0/1
no ip address
shutdown
clock rate 2000000
interface Integrated-Service-Engine1/0
ip address 192.168.165.129 255.255.255.128
ip wccp redirect exclude in
service-module ip address 192.168.165.140 255.255.255.128
service-module ip default-gateway 192.168.165.129
no keepalive
router eigrp 12
redistribute static
redistribute bgp 250 metric 10000000 1 255 255 1500
network 192.168.161.0
network 192.168.167.12 0.0.0.3
network 192.168.249.0
no auto-summary
ip flow-cache timeout active 1
ip flow-export source Loopback1
ip flow-export version 9
ip flow-export destination 130.1.8.30 2055
p access-list extended CRONOS
permit ip host 192.168.161.13 192.168.112.0 0.0.0.255
permit ip host 192.168.161.16 192.168.112.0 0.0.0.255
permit ip host 192.168.161.23 192.168.112.0 0.0.0.255
permit ip host 192.168.161.91 192.168.112.0 0.0.0.255
permit ip host 192.168.161.71 192.168.112.0 0.0.0.255
permit ip host 192.168.161.72 192.168.112.0 0.0.0.255
permit ip host 192.168.161.76 192.168.112.0 0.0.0.255
permit ip host 192.168.161.77 192.168.112.0 0.0.0.255!
Regards,Daniel,
I send a topology, for your opinio and best practice the how configurate the WAAS in WCCP.
I hope your help for this issue,
It posible to configure this command in the router WAN (ip wccp 62 redirect in) and the router WAAS ((ip wccp 62 redirect out , (ip wccp 61 redirect in)?.
Or I need more commands for this configuration.
Yesterday I sent the configuration the R1, today I send you agein.
ip wccp 61 redirect-list CRONOS
ip wccp 62
interface Loopback1
description Loopback BGP
ip address 192.168.249.8 255.255.255.255
interface GigabitEthernet0/0
description Interface LAN
ip address 192.168.161.4 255.255.255.0
no ip proxy-arp
ip accounting output-packets
ip wccp 61 redirect in
ip wccp 62 redirect out
ip route-cache flow
duplex auto
speed auto
standby 1 ip
standby 1 priority 220
standby 1 preempt
service-policy input LAN-PANA2-MARQ
service-policy output WAN-PANA2-QOS
interface GigabitEthernet0/1
description ENLACE TLC_ASB_50
ip address 192.168.167.13 255.255.255.252
no ip proxy-arp
duplex auto
speed auto
service-policy input LAN-PANA2-MARQ
interface Serial0/0/0
description Enlace a PERU
bandwidth 2048
ip address 192.168.114.9 255.255.255.252
ip accounting output-packets
ip wccp 61 redirect in
ip wccp 62 redirect in
ip flow ingress
ip flow egress
encapsulation ppp
load-interval 30
shutdown
interface Serial0/0/1
no ip address
shutdown
clock rate 2000000
interface Integrated-Service-Engine1/0
ip address 192.168.165.129 255.255.255.128
ip wccp redirect exclude in
service-module ip address 192.168.165.140 255.255.255.128
service-module ip default-gateway 192.168.165.129
no keepalive
I wait your answers,
Thanks
Best Regards, -
Router IOS requirements to work with WAAS WCCP?
Can some help me with up to date switch and router IOS requirements to work with WAAS WCCP configuration? There used to be a Cisco document explaining that but I can't find it any more.
Here is out WAAS 4.2.3 deployment in the network:
Data center: Cat6500 Sup720-3B running IOS 12.2(18)SXF12a will do WCCP L2 redirection. I've seen minimum Sup720 IOS requirement of 12.2(18)SXF13 in one place and 12.2(18)SXF16 in another, but there are also examples of using 12.2 (18) SXF5. Which one is the latest Cisco recommendation?
Remote sites: 3825 and 3845 routers (some are running 12.4 T train and some are in 12.4 main line) will do WCCP GRE redirection to WAE's. One of the routers will use a WAE-NME-522 module. Others are WAE applicances. Again, what are the latest Cisco recommendations?
Another question: for an IOS release, does it matter which package to use, such as advanced IP services, enterprise services, or SP services?
Thanks a lot.Here you go.
http://www.cisco.com/en/US/partner/prod/collateral/contnetw/ps5680/ps6870/white_paper_c11-608042.html
For IOS release, you will need a package that has WCCP support.
Hope this helps.
Regards.
PS: Please mark this as Answered, if this answers your question. -
How does QoS work with WAAS WCCP? What's the interaction between Router QoS Traffic Classification and WAE Traffic Application Policy?
By default, WAAS preserves the DSCP marking on intercepted packets. There is a configuration option to set/override the DSCP value at the global (device), application, and classifier levels. Currently WAAS provides marking only. There is no action taken by WAAS based on the DSCP value.
Regards,
Zach -
WAAS / WCCP service groups / L2 adjacencies
Hi all,
I'm having trouble finding a definitive answer on this one. I'm working on a WAAS deployment in a network with asymmetric routing. I want to deploy WAAS accelerators at two geographically dispersed data centre sites (head end). Do the WAAS boxes themselves need to be L2 adjacent with each other in this configuration? i.e. can the service group consist of two routers (one at each DC) and two WAEs (one at each site), with routed links between the DCs (WAEs in separate IP subnets)?
Something like:
- two routers (rtr-A, rtr-B)
- two WAAS accelerators (waas-A, waas-B)
- rtr-A and waas-A are L2 adjacent and use WCCP w/L2 redirection
- rtr-B and waas-B are L2 adjacent and use WCCP w/L2 redirection
- rtr-A and waas-B are not L2 adjacent and use WCCP w/GRE redirection
- rtr-B and waas-A are not L2 adjacent and use WCCP w/GRE redirection
Here's a quick diagram:
http://i4.tinypic.com/62nhf5u.jpg
(all links are L3/routed)
cheers!Dale,
There is no requirement for the WAE's to be L2 adjacent to each other. Note that the WCCP Forwarding Method is negotiated per Service Group -- so it can either be L2 or GRE. Based on your description, you would want to use GRE Forwarding.
Regards,
Zach -
WAAS WCCP 6500 ACL Redirection
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
Hi All
I'm sure I'm missing something simple here on a new install and I hope some one can point it out easily. I implemented the following config which worked except it understandably broke connections as everything got redirected. I'm running the WCCP config on a 6500 running 12.2(18) SXF
This config showed total redirected packets climbing sharply in a 'show ip wccp' on the 6500 but this config broke other things.
WAE:
interface GigabitEthernet 1/0
ip address 10.254.0.251 255.255.255.248
ip default-gateway 10.254.0.249
wccp router-list 1 10.254.0.249
wccp tcp-promiscuous router-list-num 1 l2-redirect mask-assign
6500:
ip wccp 61
ip wccp 62
interface Vlan<vlans to be accelerated>
description Local VLAN to be accelerated
ip wccp 61 redirect in
interface Vlan <WAAS vlan>
description WAAS Devices(CM and WAE)
ip address 10.254.0.249 255.255.255.248
interface Vlan <Vlan for WAN transit>
description Incoming WAN VLAN
ip wccp 62 redirect in
To try and limit redirection to just LAN space I swapped this:
ip wccp 61
ip wccp 62
for this:
/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-qformat:yes;
mso-style-parent:"";
mso-padding-alt:0in 5.4pt 0in 5.4pt;
mso-para-margin:0in;
mso-para-margin-bottom:.0001pt;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-fareast-font-family:"Times New Roman";
mso-fareast-theme-font:minor-fareast;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;}
Ip access-list ext WAAS_Inbound
Permit ip 10.22.0.0 0.0.255.255 10.0.0.0 0.0.255.255
Ip access-l ext WAAS_Outbound
Permit ip 10.0.0.0 0.0.255.255 10.22.0.0 0.0.255.255
Ip wccp 62 redirect-list WAAS_Inbound
Ip wccp 61 redirect-list WAAS_Outbound
Once I did this, 'show ip wccp' on the 6500 stopped showing redirected packets but did start showing packets being denied redirect. Optimization stopped(according to the GUI) and I saw no hits on the access-lists(should I?).
Thanks for your help in advance.A fews questions/comments:
What type of Supervisor are you using?
What is the exact version of software you are using?
The fact that the 'packets redirected' counter is incrementing is a bad thing on the 6500. It means that the redirection is happening in software.
Can you also provide the output from the following commands:
sh ip wccp
sh ip wccp 61 det
sh ip wccp 62 det
Thanks,
Zach -
I have a pioneer vsx-910-k and airport express.I have a wireless network at home. What's the best arquiecture/config to do with this hardware?
I would suggest that you connect the Pioneer to the AirPort Express Base Station using an optical digital audio cable that has a TOSlink connector on one end and a 3.5 mm optical connector (Mini Plug) on the other. You can then connect the Mini Plug end into the AirPort's audio port and the TOSlink end into one of the Pioneer's optical digital audio ports.
-
ISR with Adobe Interactive Forms: java.io.FileNotFoundException
Dear SDN readers,
I am currently working on an ISR with Adobe Interactive Forms project, and I must say that I find the configuration rather complex, however until now I kept making progress.
Now I've come to the next error given by webdynpro, when testing the scenario from the testbutton in transaction QISRSCENARIO:
java.io.FileNotFoundException:
.\temp\webdynpro\public\sap.com\pcui_gp~isr\webdynpro\
Components\com.sap.pcui_gp.isr.isrprocessevent.showform.
VcISRShowForm\
..\..\sap.com\pcui_gp~isr\IsrForm\
~wd_key18_1135844968237\unknown.pdf
... <i>(some more info)</i> ... (The system cannot find the path specified)
Indeed, this path does not exist on our portal. I assume this has something to do with credential files, but since the ADS is running fine from ABAP I cannot see why.
Has anyone experienced this before, or can someone point me into a direction to look for?
Thanks in advance and best regards, HansFound it. The problem occurs on the conbination ECC SP8 and Netweaver 13.
See note 874130, but make sure to read it in German.
Message was edited by: Hans Gmelig Meyling -
keyword.url field bloked for changes in a firefox about:config tab (firefox with yandex)
Start Firefox in <u>[[Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox (Tools) > Add-ons > Appearance/Themes).
*Don't make any changes on the Safe mode start window.
*https://support.mozilla.com/kb/Safe+Mode
*https://support.mozilla.com/kb/Troubleshooting+extensions+and+themes -
NO IPv6 on ISR with HWIC-AP???
Hi,
i just tried to enable IPv6 on of our ISRs with a wireless HWIC and found out it is NOT SUPPORTED if you use VLANS because the irb feature does not support IPv6 at all :O
anyone got an idea when CSCej50923 will be fixed?Hi,
i just tried to enable IPv6 on of our ISRs with a wireless HWIC and found out it is NOT SUPPORTED if you use VLANS because the irb feature does not support IPv6 at all :O
anyone got an idea when CSCej50923 will be fixed? -
I would like to know, who knows, how i can make a connection J2ME with NMEA protocol(GPS), somebody can give me a source code example? Thanks !!
You can find a very nice tutorial on http://servlet.java.sun.com/javaone/sf2002/conf/sessions/18-introductory-expanded.en.jsp
You should have found this if you had googled "j2me nmea", it was on the third place ;)
And now that you know this, can you write a GPS-spy program for me, because I'm a total newbe in this kind of stuff. (just kidding :) -
WAAS WCCP Topology 1800 - 3750
<p>Hi Guys,</p>
<p>Simple Q, we have an 1800 used for the WAN router connected to a stack of 3750s. We want to use WCCP for WAN acceleration, but both the ethernet ports on the 1800 are used.</p>
<p>It is a routed link NOT .1q from the 3750 to the 1800. Can WCCP work over routed links?</p>
<p>Or could we use the 3750 for WCCP?</p>
<p> </p>
<p>CHeers!</p>You can use wccp on the 1800 and have the WAE utilize "WCCP negotiated return" to avoid re-interception of the egress traffic. This would probably be the most common installation scenario. You can also run WCCP on the 3750 with the more recent IOS codes (there have been a few posts on how to do this already).
Both will work, however most people will target the software based router.
Dan -
Sample configuration of IME 7.0 with NME-IPS-K9 and How to get licence for NME-IPS-K9?
Dear all,
I already installed NME-IPS-K9 with Cisco Router 2821 series successfully and I used IME(Cisco IPS Manager Express 7.0.1) to configure NME-IPS-K9 but I never try with this before. I have some issue need everyone help:
1. Could you share the sameple for configuring IME with NME-IPS-K9 to monitor and manage all network traffice or package that attack to NME-IPS-K9?
2. Could you show me how to get licence for NME-IPS-K9?
Thanks everyone for your time to help me and share your great ideas.
I am really appreciated and looking for forward to hearing response from you all.
With my warm regards,
Sarem Phy
H/P:092562530CPU 100% on the NME-IPS module is normal. It will always show 100%. CPU on IPS is not related to the inspection load.
To check if the IPS module is overloaded, please check the "Inspection Load" speedometer. -
WAAS: WCCP Mask or Hash on Routers?
I'm starting thinking about using mask assign on an ISR router running 12:4(24)T with GRE/GRE. Has anyone done this before and can you use mask assign with GRE/GRE? We need to use it with GRE/GRE because our egress method has to be WCCP return. My thought was mask assign will be much better at load balancing across multiple WAEs in a cluster than hash because you can specify a long mask assignment. Right now, see more load on WAE than the other and are sometimes getting TFO overload.
The page you linked contains recommendations (in bold) for each platform. On the ISR G2 specifically, you should be able to use any combination of GRE/L2 and MASK/HASH assignment. Some other platforms require specific disribution and redirection methods to maintain the hardware acceleration of WCCP traffic. However, the ISR G2 does not have this requirement.
WCCP GRE and HASH distribution on ISR G2 is typically recommended to make deployment easier. With GRE, content devices can be an L3 hop away (if needed), and it reduces the chance of customers accidentally creating a WCCP redirect loop.
L2 distribution and HASH redirection method should typically require the least CPU and memory load on the ISR. These should perform the best in most cases.
The MASK distribution method gives better controls on how load is divided between multiple content devices, typically at the cost of more CPU and memory utilization. If you have only one or two content devices in your cluster, typically HASH will meet the need for slightly less CPU. As Zach said, most times MASK is used on the Datacenter side to give the ability to 'tweak' how the load is distributed across multiple devices.
Thanks,
Aaron
Maybe you are looking for
-
How do I transfer MP4 videos from Macbook to iPad2
(I am very frustrated at this point, so please forgive me if my wording sounds like I am pulling out my hair.) I want to put some MP4 videos on the iPad2. They are currently on my Macbook Pro. I have attached the iPad2 to the Macbook, and iTunes open
-
Timecode via sdi from timeline
I am a bit frudtrated seeing that i can not get timecode from timeline out via sdi to my pdw-hd1500. In fcp7 you can crash record straight to xdcam disc and the timecode comes right through the sdi. anyone have any thoughts? Thanks!
-
Correct page not open . but open page another site.
I use Firefox latest version 5.0.1 . when i type address bar any website name and enter then start advertise and business related website are open. suppose i search any song Google site and then enter so, related webpage not open . the page open in a
-
Get the document info panel details
I need to get the document info panel (Windows>Document Info) details through scripting in illustrator cs3. Kindly advice me is it possible or not.
-
Posting of semi finished products
Hello Everyone, I had an issue regarding posting of semi finished products. Earlier during production, Production executives had created some production orders for semi finished products and had not transferred the corresponding quantities to the sto