WAAS, wccp service groups and DC/Branch deployment

Hi,
I have two design queries relating to wccp service groups and WAAS in DC and branch deployments.
Firstly, lets say at the DC end I use wccp service 61 (source address) on the WAN interface of my edge-layer switches. I configure the L3 interfaces on the same switches (connecting to the LAN side) to use use wccp service 62 (destination address). The WAEs are using L2 at the edge layer; with masking etc.
I've read that at the branch office you need to 'reverse' the service group setup - so that if I have the same sort of setup at the branch using 3750s and WAEs then the WAN interface should be using wccp service 62 and the LAN side using wccp service 61.
If I assume that is correct, then how does this affect things when two branches are communicating with each other (and they are both setup the same) - will be waas not be effective in this scenario? (Assume that the DC waas does not see any branch-to-branch communication).
What happens if you have a consistent design across your network (61 on WAN, and 62 at LAN interfaces across all WAAS sites)?
Secondly, when using L2 wccp redirection and masking; do most deployments leave the mask as default (0x1741)? I'm thinking that in some situations it might be better to have an entire geographic location covering a few branches being sent to the same DC end WAE. For example, I might want everyone on a /24 subnet in one branch to be using the same WAE/dre cache at the DC; rather than the possibility of duplicate dre caches on DC end WAEs service the same branch subnet (I realise that redundancy might be an advantage should one DC WAE fail).
Is there a table/calculator somewhere that can work out what mask I could use to cover /24 or /22 or even /16 subnets to direct requests to the same WAE at the DC?
Thanks
Cameron

Cameron,
Excellent questions. Rule of thumb is to use source IP based load balancing, so in the branches 61/LAN - 62/WAN and in the DC 61/WAN and 62/LAN. That being said, if there is some site to site traffic at the edges, you may get some splitting, however, unless there is enough traffic to make it a "mini-dc", changing the services around is generally a wash. Also, if you only have a single WAE at the edge, it won't matter either.
On the mask, default mask is definitely not desirable. I generally use Calc and convert my desired Mask from Binary to Hex. The following examples are assuming 4 bit masks, but you can use from 1 up to 6 or 7 max bits if you need more buckets.
If you are looking to group /24, you could be 0xF00 or similar.
If you are looking to group /22, use 0x3C00 or similar
When calculating your mask, don't put your bits in the host bits, only in the network bits. Also, remember that the leftmost bit is usually the decision maker, so don't make it too far to the left or all your traffic will be on one WAE. The less WAEs in your WCCP cluster, the less bits you should use in your mask (allow some extras for fault tolerence).
Hope that helps,
Dan

Similar Messages

  • WAAS / WCCP service groups / L2 adjacencies

    Hi all,
    I'm having trouble finding a definitive answer on this one. I'm working on a WAAS deployment in a network with asymmetric routing. I want to deploy WAAS accelerators at two geographically dispersed data centre sites (head end). Do the WAAS boxes themselves need to be L2 adjacent with each other in this configuration? i.e. can the service group consist of two routers (one at each DC) and two WAEs (one at each site), with routed links between the DCs (WAEs in separate IP subnets)?
    Something like:
    - two routers (rtr-A, rtr-B)
    - two WAAS accelerators (waas-A, waas-B)
    - rtr-A and waas-A are L2 adjacent and use WCCP w/L2 redirection
    - rtr-B and waas-B are L2 adjacent and use WCCP w/L2 redirection
    - rtr-A and waas-B are not L2 adjacent and use WCCP w/GRE redirection
    - rtr-B and waas-A are not L2 adjacent and use WCCP w/GRE redirection
    Here's a quick diagram:
    http://i4.tinypic.com/62nhf5u.jpg
    (all links are L3/routed)
    cheers!

    Dale,
    There is no requirement for the WAE's to be L2 adjacent to each other. Note that the WCCP Forwarding Method is negotiated per Service Group -- so it can either be L2 or GRE. Based on your description, you would want to use GRE Forwarding.
    Regards,
    Zach

  • ESB METADATA ISSUES WHILE DEPLOYING ESB SERVICE GROUPS AND SERVICES

    Customer has SOA Suite 10.1.3.4 with MLR#8.
    We have 2 separate SOA based integrations being shipped to the customer which
    he can install together. The 2 integrations share a ESB service group called
    "EBS" under which some ESb services are registered.
    One of the integration was installed/deployed on the SOA server successfully
    and the services were running successfully.
    When the second integration was installed, it gave some errors while
    deploying/registering the common ESB service group and the ESB services under
    it.
    <error code="1067" severity="5">
    <description>Already esb metadata is getting modified by {0}.Concurrent
    modification of esb metadata is not allowed.</description>
    <fix>Please try after sometime.If Error Persists, Contact Oracle
    Support</fix>
    </error>
    The customer tried bouncing the SOA server and the SOA db as well before
    re-trying but no help.
    Any pointers ?
    Thanks.

    i would recommend delete and recreate the ESB Components.
    R u using some scripts to create it or is it manually from ESB Console ?

  • Business Service , Service Group  and Provider System for CE 7.2

    Hi
    I need documentation about Business Service , Service Group  and Provider System for CE 7.2.
    Att,
    Marco

    Did you get one? I need too.
    In SAP Help Portal there are a large quantity of documents, such as:
    http://help.sap.com/saphelp_nwce72/helpdata/en/88/a552908d4c44dc99b3ec247069921e/frameset.htm
    But the content is so much and I do not know with which part I should start.
    In the web blog of Ms. Stefanie Bacher:
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/50d70a19-45a3-2b10-bba0-807d819daf46?quicklink=index&overridelayout=true
    she has mentioned how to create a service group shortly. But I cannot follow it in my NWDS CE7.1.
    Anyone could give me some tipps, how to resolve authorization problem of consuming web services.
    Thanks and regards
    Rene

  • Wccp service groups query

    Hi Experts,
    I am trying to understand how wccp service redirect determines when to and not to redirect traffic.
    Given the below:
    Router
    int gi0/0 ---> inside lan interface
    int gi1/0 ---> WAE connected interface with redirect exlude in
    int s0/1 ---> WAN interface
    ip wccp 61 redirect out
    ip wccp 62 redirect in
    From what i've understood so far, traffic coming from a client will enter the inside interface and hit the serial interface and given the redirect 61 statement will be redirected to the WAE via int gi1/0. After the WAE optimizes the traffic, it sends it back to the router and the packet then makes it way out the serial interface to a remote destination where another WAE is set.
    My question is, does the WAE tag the optimized traffic that when it reaches the serial interface of the router, wccp of the router sees this and does not redirect it back to the WAE?
    Thanks in advance.

    The wccp redirect exclude in configured on the WAE connected interface (gig 1/0 in your example) is what tells the router to not redirect the traffic coming from the WAE on this interface.
    Regards,
    Mike

  • CSSimport.bat error: while migrating the Shared Services groups and users

    Hi,
    I am trying to migrate the shared services native users and group from 9.3.1(on server A) to 11.1.1.3(on server B)
    - I have taken the export in CSV format from 9.3.1 using CSSexport.bat.(export.csv) -Successful.
    - I have copied this on the 11.1.1.3 server and changed lil details like removing the admin user etc.
    - When I am trying the import this on 11.1.1.3, I am getting the below error:
    CSSimport importexport.properties2010-10-11 09:36:41,328 Attempting a import operation
    log4j:WARN No appenders could be found for logger (com.hyperion.css.common.CSSLogger).
    log4j:WARN Please initialize the log4j system properly.
    null
    Aborting program...
    - There are not log or error files geting generated - The only error recieved , is given above.
    - I have made the necessary changes to the impotexport.properties file on 11.1.1.3 before starting the CSSimport utility.
    Can you please let meknow what should I do to overcome this error.
    -thanks,
    Ankit

    First thing I would try would be on the 11.1.1.3, try and run an export, if it works then run the import on the same file, this way you will make sure you have the version 11 utility working.
    Once you have done that then you can move on to the 9.3.1 export file.
    Cheers
    John
    http://john-goodwin.blogspot.com/

  • Regd-LM Service 701 and LM tool deployment dependancy in Solution Manager

    Hi,
      While Upgrading LM Service to 701 patch 4, i am getting a dependancy error. The log details are as follows,
    <!LOGHEADER[START]/>
    <!HELP[Manual modification of the header may cause parsing problem!]/>
    <!LOGGINGVERSION[1.5.3.7185 - 630]/>
    <!NAME[E:\usr\sap\DSM\DVEBMGS10\SDM\program\log\sdmcl20090917072303.log]/>
    <!PATTERN[sdmcl20090917072303.log]/>
    <!FORMATTER[com.sap.tc.logging.TraceFormatter(%24d %s: %m)]/>
    <!ENCODING[UTF8]/>
    <!LOGHEADER[END]/>
    Sep 17, 2009 8:23:05 AM  Info: -
    Starting validation -
    Sep 17, 2009 8:23:05 AM  Info: Prerequisite error handling strategy: OnPrerequisiteErrorSkipDepending
    Sep 17, 2009 8:23:05 AM  Info: Update strategy: UpdateLowerOrChangedVersions
    Sep 17, 2009 8:23:05 AM  Info: Starting deployment prerequisites:
    Sep 17, 2009 8:23:08 AM  Info: Loading selected archives...
    Sep 17, 2009 8:23:08 AM  Info: Loading archive 'E:\usr\sap\DSM\DVEBMGS10\SDM\program\temp\LMTOOLS04_1-10005881.SCA'
    Sep 17, 2009 8:23:12 AM  Info: Selected archives successfully loaded.
    Sep 17, 2009 8:23:13 AM  Error: Unresolved dependencies found for the following SDAs:
    1.: development component 'tc/di/cts/config/service/appl'/'sap.com'/'MAIN_NW701P04_C'/'2969406'/'1'
    dependency:
           name:     'tc/di/cts/common'
         vendor:     'sap.com'
    There is no component either in SDM repository or in Deployment batch that resolves the dependency.
    Deployment will be aborted.
    Sep 17, 2009 8:23:13 AM  Error: No Software Component Archive (SCA) or Software Delivery Archive (SDA) selected. Select at least one.
    Deployment will be aborted.
    Sep 17, 2009 8:23:13 AM  Error: Prerequisites were aborted.
    Sep 17, 2009 8:23:13 AM  Error: Error while creating deployment actions. No Software Component Archive (SCA) or Software Delivery Archive (SDA) selected. Select at least one.
    Deployment will be aborted.
    Sep 17, 2009 8:23:14 AM  Info: -
    Ending validation -
    Kindly help me to resolve this issue.
    Thanks & Regards,
    Vaishali.K

    Hi,
    LMSERVICE03P_4-20004805.SCA   Patch 4 for SOLMANDIAG 7.01 SP03  (Software package in production process (See note 1120196)
    Hope this helps.
    Feel free to revert back.
    -=-Ragu

  • What is difference between ESB Service and ESB Service Group

    Guys please tell me What is difference between ESB System and ESB Service Group and when we use them, i mean in what condition.
    Many Thanks
    Deepak

    The use of these is explained in the ESB developers guide along with some examples in what case to use them. See: http://download-west.oracle.com/docs/cd/B31017_01/integrate.1013/b28211/esb_jdev.htm#sthref167

  • Is it okay to use different service group numbers?

    A new deployment of vWAAS in a DC connected to a Cat 6509 with existing WCCP redierection from an old WAAS deployment on that switch using service groups 61 and 62. I have researched service group numbers but only find a handful and want to ask the community if there are any issues using service groups 51 and 52, or 71 and 72 for this new deployment.
    Thanks, Karl

    Hi Karl,
    Service groups 61 and 62 are tcp promiscous groups and will redirect all TCP traffic. Also, in case of the wccp web-cache , this is going to redirect all the traffic from TCP port 80 from routers to Cisco Cache/ACNS devices. Other Custom WCCP services c will use custom wccp number (90 - 97) . So if you want to redirect port 8080 you can use custom WCCP service group.
    Some of the well known service groups are listed below and you can use which ever you want according to your requirement.
    Service Name
    Service Number
    Protocol
    Port
    Priority
    web-cache
    0
    tcp
    80
    240
    dns
    53
    udp
    53
    202
    ftp-native
    60
    tcp
    200
    tcp-promiscuous
    61
    tcp
    34
    tcp-promiscuous
    62
    tcp
    34
    https-cache
    70
    tcp
    443
    231
    rtsp
    80
    tcp
    554
    200
    wmt
    81
    tcp
    1755
    201
    mmsu
    82
    udp
    1755
    201
    rtspu
    83
    udp
    5005
    201
    cifs-cache
    89
    tcp
    139, 445
    224
    custom
    90
    220
    custom
    91
    221
    custom
    92
    222
    custom
    93
    223
    custom
    94
    224
    custom
    95
    225
    custom
    96
    226
    custom
    97
    227
    custom-web-cache
    98
    tcp
    80
    230
    reverse-proxy
    99
    tcp
    80
    235
    Regards,
    Kanwal

  • WCCP src group & redirect/return method

    Has anyone here implemented 3rd party WAN optimization such as Bluecoat or Riverbed w/ WCCP?
    What service groups and redirect/return methods did you use, and on which Cisco switch/router platforms?
    I'd like to know what works, and what doesn't...
    It looks like you generally use service group 61 & 62 to redirect all TCP traffic to WAAS, based on source/destination IP's.
    Do those two service groups also work w/ 3rd party devices?
    If they don't, do I just pick some random service groups, other than the well known ones?
    How would the switch/router know what traffic to redirect, if no redirect-list is used?
    The Networkers' wccp presentation slides say if GRE is to be used w/ 6500's, generic GRE needs to be used instead of WCCP GRE.
    Where would you configure what type of GRE is used, within WAAS?
    Does anyone know if such setting exists on 3rd party devices?
    Our Bluecoat SE isn't even aware of two different versions of GRE, and neither was I, before I watched the Networkers session.

    Hi,
    I know with Riverbed you can use wccp 61/62 as well. I don't have experience with other vendors though.
    The router knows what to redirect based on the WCCP service number. It can be a well-known service or a custom service where you define what to redirect directly on the optimizer/web-cache device. The redirect list is only used to further limit what is redirected.
    In h/w forwarding platform WCCP GRE is handled in s/w, this is why using generic GRE is suggested. On WAAS you can configure it using "egress-method generic-gre intercept-method wccp"
    For more details check the "Egress Method" section in the following doc:
    http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_paper_c11-629052.html
    Here you have WCCP redirection method supported and suggested for different Cisco platforms:
    http://www.cisco.com/en/US/prod/collateral/contnetw/ps5680/ps6870/white_paper_c11-608042.html
    hope this helps,
    Fabrizio

  • Service Group is blank after transporting into IST system

    Hi All,
    We have 2 CE 7.2 systems as DEV and IST which are well connected to NWDI. In DEV NWDI track, we have many WDJava components which consume web services available on DEV system. For these services, we have created a Service Group which has all these services inside it. IN DEV, I have assigned the local system to all these services inside the service group and it works fine.
    Then we released all our components to IST system and this service group also got deployed in IST. I configued the service group also in IST to point it to proper system. Then some how after releaseing some new activites, all the references in IST service group are valished but the consumer proxies in IST for these services show they are part of service group.
    We released new activity for service group also from Dev to IST but still the service group in IST is blank.
    Can anyone explain why this could have happened and any solution for this?

    Hello Panda,
    Please make sure that all the report elements are collected while transporting, because some elements might have got missed or not collected in the transport request. You can collect the same report again in a new transport and check it.
    Thanks
    Chandran

  • WCCP Multivendor Group

    Hello,
    I'm trying to build a WCCP service group with a CE500 ACNS 5.2.3,
    Cisco Router with 12.2.8T5 and
    CE BlueCoat ProxySG 3.2.4.8,
    At this time the router can build the service just with one of them, but not with both.
    Do you know if there is some restriction to form this multivendor service group in order to do load-balancing?
    Your responses will be greatly appreciated...
    Erick

    Thanks for your response,
    As Release notes http://www.cisco.com/en/US/products/sw/conntsw/ps491/prod_release_note09186a008034fc5d.html appoints:
    "Because of these enhancements, receivers using ACNS 5.2 software cannot interact with senders using ACNS 5.0 or 5.1 software. The ACNS 5.2 multicast receiver will ignore files sent from an ACNS 5.0 or 5.1 multicast sender. However, an ACNS 5.2 multicast sender can interoperate with ACNS 5.0 or 5.1 multicast receivers because the software detects the lower software version and disables the checkpoint feature. Therefore, we recommend that you upgrade your multicast sender to ACNS 5.2 software first and then upgrade your receivers to ACNS 5.2 software"
    After reading this note, I have open this case, please note that I'm dealing with a CacheFlow running another operating system not ACNS and I hope to add my Cisco ACNS CE to his group.
    Regards,
    Erick

  • WAAS WCCP from fortinet

    hello,
    I need your help, we want to configure WCCP on WAE but the customer have a fortinet  firewall in agencies.
    Has anyone had to do this type of setup ?
    what are the  WCCP services 61 and 62? did I need to configure also to Fortinet?
    Thanks for your help.

    Hi Fatoumata,
    The WCCP service is a number specified in the protocol to define what kind of traffic is going to be matched, so, it's not relevant for a firewall.
    To allow WCCP traffic to go through a firewall (assuming it's located between the WAE and the router), you just need to allow UDP port 2048 in both directions.
    If what you need to do is allowing the optimized traffic to go through the FW (which would happen if you have the FW between the router and the WAN link), then, you would need to enable some kind of WAAS inspection on the Fortinet firewall to allow the modifications that WAAS does on the TCP packets (adding a TCP option in the SYN and SYN/ACK packets and a sequence number shift after the TCP handshake). Unfortunately, I don't know how this can be done because I'm not familiar with that firewall.
    Regards
    Daniel

  • Java Web Services wrapper and connection management.

    We are currently evaluating the use of the SES Java web-services for a custom front end. I've downloaded the sample code and have read through the documentation but I'm confused on a few points.
    We will be OSSO protecting the app, so the flow I think I need to use is (on the OracleSearchService object):
    *setSoapURL
    *proxyLogin
    *setSearchUser
    *doOracleSearch
    (do whatever with results)
    From what I can tell each one of these does a separate call into the actual web service. Does this keep a connection open between these calls and if so how do we need to manage our connections in this case. Is there an explicit close method we should be calling? I see that we can get an OracleSoapHTTPConnection from the undocumented getConnection method on OracleSearchService but I'm unsure if we are supposed to interact with it directly.
    In a related vein how should we managing our OracleSearchService objects? Should we save an instance for each user in our httpSession, or just create a new instance on each call?
    Any insights appreciated,
    Jason

    No Problem at all
    Nomally the Web Service is big different between Web application. or you can build your Web service structure like web application structure. It depends on the web server:
    If the Web Server of hosting company has WEB Service framework, you just need know how to deploy your Web service to Web Service framework and How to deploy to Web Server. In this case, you need deploy it two time, one is for Web Server framework and one is for Web Service framework
    If the Web Server of hosting company doesn't has WEB Service framework, you need build your own Web Service framework into a web application, then you just need know how to deploy your web application with Web service into Web Server framework

  • Roles, Groups and Class of Service

    Hi,
    I am new to LDAP, have a good RDBMs background. I have read the Sun documentation to understand the concepts. Can someone recommend a good source that provide examples on how to set up Roles, Groups and Class of Services.
    Thanks,
    Bala.

    Directory Server documentation set contains the best examples to my knowledge.
    You may want to start with the Deployment Guide for introduction to the concepts and Administration Guide for setting them up and examples.
    Regards,
    Ludovic.

Maybe you are looking for

  • Itunes wont let me update my ipod

    I tried putting too many songs on my ipod and it told me there isnt enough room so itunes made a seperate playlist with every song in it (i forget why). so i left the playlist there, deleted some videos for more space and updated my ipod. everything

  • Being forced to use Windows due serious Entourage 08 problems

    I posted this over in Markspaces forums but my last year of many happy years of using the Mac has not been happy. I thought I'd share this as I think this issue around core software for the Mac might put the recent rise of the Mac in jeopardy. I'm su

  • Modules In Distribution, Financial and Manufaturing

    Hi, Please List out all the module in Distribution, Financial and Manufacturing. 1. Distribution 2. Financial 3. Manufacturing. Thanks in Advance. Varma. Edited by: 843404 on Mar 16, 2011 3:34 PM

  • Firefox crashed on loading V4 and will not come. How to recover?

    I opened Firefox on my desktop this morning (4-1-11 about 7:30 am) and received and message to up grade to v4. I click on the icon. It started to upgrade then crashed. Reset to yesterday but Firefox would not come up. How do I recover?

  • Can't open program, no error message

    Hello! I'm looking for some itunes help ideas. When I try to open itunes, it won't open. I get the hourglass and then nothing, no error messages. History: My husband received a new ipod for Christmas that wanted the update. I installed the update, bu