WCCP not working

Hi, 
I have issued these commands in my ASA 5520 to activate WCCP to redirect web traffic from a PC with IP 192.168.120.6 to a McAfee Web Gateway with IP 10.250.2.33:
access-list wccp-servers extended permit ip host 10.250.2.33 any
access-list wccp-traffic extended permit ip host 192.168.120.6 any
wccp 51 redirect-list wccp-traffic group-list wccp-servers password aspirina
wccp interface INSIDE_IF_FWSM 51 redirect in
We are seeing traffic in the WCCP statistics in ASA:
Global WCCP information:
    Router information:
        Router Identifier:                   19X.5X.12X.9X
        Protocol Version:                    2.0
    Service Identifier: 51
        Number of Cache Engines:             1
        Number of routers:                   1
        Total Packets Redirected:            906
        Redirect access-list:                wccp-traffic
        Total Connections Denied Redirect:   0
        Total Packets Unassigned:            10
        Group access-list:                   wccp-servers
        Total Messages Denied to Group:      0
        Total Authentication failures:       0
        Total Bypassed Packets Received:     0
However, the PC can't access the internet. Moreover, in the MWG we don't see GRE traffic.
Thanks in advance.

Though this is in the wrong forum, maybe I can help.  Can you do 'show wccp 51 detail' ?  Did you already do a packet capture on your proxy?  What are you seeing there?
 

Similar Messages

  • WCCP is not working after ASR migration is done.

    Hi Alls.
    We recently migrated with new ASR router. However, WCCP is not working, which is using for WAE traffic redirection.
    I checked the WCCP configuration. however, I can't find any issue from wccp configuration on ASR router.
    Please have seeing following configuration related wccp.
    Global)
    ip wccp check services all
    ip wccp 61 redirect-list waas-redirect
    ip wccp 62 redirect-list waas-redirect
    Intf)
    interface GigabitEthernet0/0/x
    ip wccp 61 redirect out
    ip wccp 62 redirect in
    show ip access-list waas-redirect)
        270 deny tcp any eq 1719 any
        280 deny tcp any eq 1720 any
        290 deny tcp any eq 8443 any
        300 deny tcp any eq 689 any
        310 permit tcp any any
    I confirmed that after migration is done, there was no issue for connectivity between ASR and WAAS.
    Following is WAAS status;
    Router Information for Service: TCP Promiscuous 61
            Routers Seeing this Wide Area Engine(2)
            Router Id       Sent To
            xxx.xxx.xxx.213  xxx.xxx.xxx.15
            xxx.xxx.xxx.7     xxx.xxx.xxx.139
            Routers not Seeing this Wide Area Engine
                    -NONE-
            Routers Notified of from other WAE's
                    -NONE-
            Multicast Addresses Configured
    Router Information for Service: TCP Promiscuous 61
            Routers Seeing this Wide Area Engine(2)
            Router Id       Sent To
            xxx.xxx.xxx.213  xxx.xxx.xxx.15
            xxx.xxx.xxx.7     xxx.xxx.xxx.139
            Routers not Seeing this Wide Area Engine
                    -NONE-
            Routers Notified of from other WAE's
                    -NONE-
            Multicast Addresses Configured
    I can't find any difference from configuration and issue with connectivity.
    Can anyone help to check this issue? let me know if you need more inputs.
    Thanks.

    Hi Felix,
    I'm pasting the show output what you requested.
    show ip wccp 61 de)
    WCCP Client information:
            WCCP Client ID:          xxx.xxx.xxx.179
            Protocol Version:        2.0
            State:                   Usable
            Redirection:             GRE
            Packet Return:           GRE
            Assignment:              HASH
            Initial Hash Info:       FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                     00000000000000000000000000000000
            Assigned Hash Info:      FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                     00000000000000000000000000000000
            Hash Allotment:          128 (50.00%)
            Packets s/w Redirected:  0
            Connect Time:            1w3d
            Bypassed Packets
              Process:               0
              CEF:                   0
              Errors:                0
            WCCP Client ID:          xxx.xxx.xxx.178
            Protocol Version:        2.0
            State:                   Usable
            Redirection:             GRE
            Packet Return:           GRE
            Assignment:              HASH
            Initial Hash Info:       00000000000000000000000000000000
                                     FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
            Assigned Hash Info:      00000000000000000000000000000000
                                     FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
            Hash Allotment:          128 (50.00%)
            Packets s/w Redirected:  0
            Connect Time:            1w3d
            Bypassed Packets
              Process:               0
              CEF:                   0
              Errors:                0
    show ip wccp 62 de)
    WCCP Client information:
            WCCP Client ID:          xxx.xxx.xxx.179
            Protocol Version:        2.0
            State:                   Usable
            Redirection:             GRE
            Packet Return:           GRE
            Assignment:              HASH
            Initial Hash Info:       FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                     00000000000000000000000000000000
            Assigned Hash Info:      FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
                                     00000000000000000000000000000000
            Hash Allotment:          128 (50.00%)
            Packets s/w Redirected:  0
            Connect Time:            1w3d
            Bypassed Packets
              Process:               0
              CEF:                   0
              Errors:                0
            WCCP Client ID:          xxx.xxx.xxx.178
            Protocol Version:        2.0
            State:                   Usable
            Redirection:             GRE
            Packet Return:           GRE
            Assignment:              HASH
            Initial Hash Info:       00000000000000000000000000000000
                                     FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
            Assigned Hash Info:      00000000000000000000000000000000
                                     FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
            Hash Allotment:          128 (50.00%)
            Packets s/w Redirected:  0
            Connect Time:            1w3d
            Bypassed Packets
              Process:               0
              CEF:                   0
              Errors:                0
    Could you check?
    Thanks.

  • WCCP does not work between WSA and ASA

    I have configured WCCPv2 between WSA S160 (         6.3.1-025) and ASA5540 (8.2(1)109).
    Everything seems to be OK by "show wccp *" on ASA and showing wccp debugging messages (level 4) on S160. Despite of it, WCCP redirection does not work.
    If I use packet-capture I figure out that S160 receives GRE packets with TCP SYN from particular LAN host to WWW sites but S160 does not handle them and does not send anything back to ASA.
    It is an Exempt from authentication for this LAN host and in Forward proxy mode everything works well.
    I have attached an example of a packet-capture (S160.txt - renamed from .cap) and debugging messages from S160 & "show" from ASA.
    Does anybody have any idea what the problem is and how I can resolve it ?

    IronPort Support team helped me to find the trouble:
    If I wish to handle specific port's (80, 8080, etc.) traffic by the transparent proxy I need to configure this port like a listener for the FORWARD proxy
    ("Security Services" -> "Proxy Settings" -> "HTTP Ports to Proxy")
    The WSA guide doesn't clearly say about it.
    So the Discussion can be closed ...

  • Generic GRE not working (ver 4.1.3.55)

    Hi everybody.
    I'm testing in Lab a configuration for one customer.
    It's a basic environment with :
    DATA CENTER (wccp)
    1 WAEs 7341 and 1 Cat6506 routers
    BRANCH (inline)
    1 WAE 574.
    Optimization works with l2-redirect and gre return in DATA CENTER !!
    It does not work with egress-method generic-gre inteception-method wccp.
    This is the problem that i can see with " show wccp gre" on the 7341..
    " Packets received on a disabled service: 667790".
    I read some manuals but...
    I don't understand .. The service 61 and 62 works !!
    So any idea ?
    Thanks a lot to everybody
    Vittorio

    Hy and thanks to be interested.
    That's the output you ask :
    WAE-DC-01#sh egress-methods
    Intercept method : WCCP
    TCP Promiscuous 61 :
    WCCP negotiated return method : WCCP GRE
    Egress Method Egress Method
    Destination Configured Used
    any Generic GRE Generic GRE
    TCP Promiscuous 62 :
    WCCP negotiated return method : WCCP GRE
    Egress Method Egress Method
    Destination Configured Used
    any Generic GRE Generic GRE
    Intercept method : Generic L2
    Egress Method Egress Method
    Destination Configured Used
    any not configurable IP Forwarding
    And here there is another useful :
    WAE-DC-01#sh wccp gre
    Transparent GRE packets received: 52082
    Transparent non-GRE packets received: 0
    Transparent non-GRE non-WCCP packets received: 0
    Total packets accepted: 0
    Invalid packets received: 0
    Packets received with invalid service: 0
    Packets received on a disabled service: 50118
    Packets received too small: 1964
    Packets dropped due to zero TTL: 0
    Packets dropped due to bad buckets: 0
    Packets dropped due to no redirect address: 0
    Packets dropped due to loopback redirect: 0
    Pass-through pkts dropped on assignment update:0
    Connections bypassed due to load: 0
    Packets sent back to router: 50118
    GRE packets sent to router (not bypass): 0
    Packets sent to another WAE: 0
    GRE fragments redirected: 28770
    GRE encapsulated fragments received: 0
    Packets failed encapsulated reassembly: 0
    Packets failed GRE encapsulation: 0
    Packets dropped due to invalid fwd method: 0
    Packets dropped due to insufficient memory: 0
    Packets bypassed, no pending connection: 0
    Packets due to clean wccp shutdown: 0
    Packets bypassed due to bypass-list lookup: 0
    Conditionally Accepted connections: 0
    Conditionally Bypassed connections: 0
    L2 Bypass packets destined for loopback: 0
    Packets w/WCCP GRE received too small: 0
    Packets dropped due to received on loopback: 0
    Packets dropped due to IP access-list deny: 0
    Packets fragmented for bypass: 28770
    Packets fragmented for egress: 0
    Packet pullups needed: 57543
    Packets dropped due to no route found: 0
    Any new idea ?
    Thanks
    Vittorio

  • WCCP Stopped working

    We have 2 ASAs configured as active/standby failover cluster. Recently we upgraded the IOS to 9.0(2) and WCCP stopped working due to a FQDN entry in the redirection access list. We have since removed that entry and everything worked fine for about two weeks until yesterday when it stopped working again. I checked the configuration and the configuration looked correct:
    wccp 1 redirect-list RedirectToCache group-list WebCacheEngines password *****
    wccp interface Inside 1 redirect in
    However, if I run the command Show WCCP here is what I received:
    ASA# sh wccp
    Global WCCP information:
        Router information:
            Router Identifier:                   192.168.2.3
            Protocol Version:                    2.0
        Service Identifier: 1
            Number of Cache Engines:             0
            Number of routers:                   0
            Total Packets Redirected:            508141596
            Redirect access-list:                RedirectToCache
            Total Connections Denied Redirect:   6374402
            Total Packets Unassigned:            1232
            Group access-list:                   WebCacheEngines
            Total Messages Denied to Group:      0
            Total Authentication failures:       0
            Total Bypassed Packets Received:     494904
    Notice number of Cache Engines and Number of Routers is zero. I removed the wccp configuration shown above and then added it back in exactly as it was and things started working again. Now if I run the show wccp command, it shows me 1 cache engine and 1 router.
    Has anyone experienced this type of problem before? any tips on troubleshooting wccp?
    I am not quite sure what caused this interruption specially when the configuration was in place and I know for a fact that there have been no changes to either the ASA or the Cache Engine (Ironport WSA) for several days. Things were working on Monday, I'm sure because I run a report on the Ironport appliance for usage so it stopped working sometime either Monday evening or Tuesday.
    Thanks

    Though this is in the wrong forum, maybe I can help.  Can you do 'show wccp 51 detail' ?  Did you already do a packet capture on your proxy?  What are you seeing there?
     

  • Not work tablet UI on Prestigio 5080 PRO tablet

    I read that browser.ui.layout.tablet = "1" can fix this problem. But it not works. I can work only in pnone interface that is not good for my 8'' tablet.

    Would it be possible for you to share the problematic pdf and OS information  with us at [email protected] so that we may investigate?
    Thanks,
    Adobe Reader Team

  • Why self-defined access sequences of free goods can not work?

    Hi gurus,
    I have maintained access sequences of free goods self-defined.but when i creat the SO it does not work!
    when i used the standard access sequences ,it is OK .
    Can anybody tell me why?
    thanks in advance

    Dear Sandy,
    Go to V/N1 transaction select your self defined access sequence then go in to the accesses and fields and check all fields are activated.
    Make sure that these fields are flowing in your sales order.
    I hope this will help you,
    Regards,
    Murali.

  • Adobe bridge raw not working with windows vista in photoshop cc, why?

    adobe bridge raw not working in photoshop cc, is there a fix?

    Your sure your using photoshop cc on windows vista?
    I was under the impression that photoshop cc would not even install on windows vista.
    What version of camera raw do you have?
    In photoshop under Help>About Plugin does it list Camera Raw and if so which version is it?
    (click on the words Camera Raw to see the version)
    Camera raw doesn't work if it's a camera raw file or some other file type such as jpeg or tif?
    What camera are the camera raw files from?
    Officially camera raw 8.3 is the latest version of camera raw that will work on windows vista.

  • Adobe Bridge CS5 in windows 7 not working?

    Adobe Bridge CS5 in windows 7 not working. I was using bridge perfectly for last 2 years. It stops working since 3 days. I tried to install updates. Showing some error to install.
    Tried to install creative cloud..again some error. Error code : 82
    Could you please advice how I can fix my adobe bridge.

    https://www.youtube.com/watch?v=xDYpTOoV81Q&feature=youtu.be
    please check this video I uploaded..this is what happens when I click adobe bridge.. just blinks and go off. bridge not working on task manager

  • ADOBE CLOUD ON MY DESKTOP WILL NOT WORK. IT LOADS UP BUT NOTHING FILLS THE WINDOW

    ADOBE CLOUD ON MY DESKTOP WILL NOT WORK. IT LOADS UP BUT NOTHING FILLS THE WINDOW

    BLANK Cloud Screen http://forums.adobe.com/message/5484303 may help
    -and step by step http://forums.adobe.com/thread/1440508?tstart=0
    -and http://helpx.adobe.com/creative-cloud/kb/blank-white-screen-ccp.html

  • Partner application logoff not working

    We have a partner application registered with sso with custom login screen. The login works fine. We use the following code to logoff the partner application in logoff.jsp
    response.setHeader("Osso-Return-Url", "http://my.oracle.com" );
    response.sendError(470, "Oracle SSO");
    session.invalidate();
    but the logoff is not working properly. It is not invalidating the session and the logout http request is not going from the application server to the sso server.
    Are there any additional configurations for SSO logoff.Any help is appreciated.
    Thanks

    Hi
    The WF should also trigger if i add the Partner function in UI.If i change any Attribute the WF triggers but i dont want to change the attribute when i add the partner function.
    If i have only one event for WF that is Partner Change the WF will not trigger it for the 1st time when i save the UI. But next i come to the same saved doc and add a partner function then the Wf triggers.
    So this means that Partner change is active.
    the issue here is i need to trigger the WF on , the 1st time i save the UI, for which i wil be using Attribute Change and next time when i come back to saved doc the and add only the partner function and no changes are made to attributes the WF should again trigger.
    Thanks
    Tarmeem

  • IPhone 4 Voice Memos not working/saving

    Hi there,
    I'm having trouble with my voice memos too. Up until yesterday they were working fine and now, even though the record button works, the stop button does not and I can only pause them. Worse again is that the button to go into the menu to view all voice memos is not working so I can't play them from my iPhone and nothing new is saving to my iTunes. Please help!

    I've always had the "Include Voice Memos" option selected. I think that only pertains to syncing voice memos from iTunes to the iPhone after it has been copied to iTunes. It has to be the new OS/iTunes not communicating that new memos have been recorded. For some reason they won't sync when I want them to, and then a few syncs later they magically appear.
    By the way, I'm VERY comfortable with the iTunes and iPhone systems. I've been using iTunes for 5 years, and I've been recording class lectures with the iPhone voice memo app (and another app) for a couple years. It's not an error of not seeing that the memos were added; they don't exist in my library or music folders.
    JUST OUT OF CURIOSITY, POST WHICH FIRMWARE YOU ARE RUNNING EXACTLY!!!
    I'm on an iPhone 4, running firmware 4.0.1

  • Installed Premiere Pro CS4 but video display does not work?

    I just got my copy of CS$. After installing Premiere I found two things that seem very wrong:
    1) video display does not work, not even the little playback viewer next to improted film clips located on the project / sequence window. Audio works fine.
    2) the UI is way too slow for my big beefy system.
    My pc is a dual boot Vista-32 and XP system with 4GB of memory installed and nvidia geforce 280 graphics board with plenty of GPU power. The CS4 is installed on the Vista-32 partition. My windows XP partition on the same PC with Premiere CS2 works great and real fast.
    Any ideas how to solve this CS4 install issue?
    Ron

    I would like to thank Dan, Hunt, and Haram:
    The problem is now very clear to me. The problem only shows up with video footage imported into PP CS4 encoded with "MS Video 1" codec. So this seems to be a bug. The codec is very clearly called out and supported within various menues but video with this codec just will not play in any monitor or preview window. In addition the entire product looks horrible with respect to performance while PP CS4 trys its best to play the video. Audio will start playing after about 30 seconds. And once in awhile part of video shows up at the wrong magnification before blanking out again.
    My suggestion to the Adobe team: fix the bug and add some sample footage to the next release so new installations can test their systems with known footage.
    My PC is brand new with the following "beefy" components:
    Motherboard
    nForce 790i SLI FTW
    Features:
    3x PCI Express x16 graphics support
    PCI Express 2.0
    NVIDIA SLI-Ready (requires multiple NVIDIA GeForce GPUs)
    DDR3-2000 SLI-Ready memory w/ ERP 2.0 (requires select third party system memory)
    Overclocking tools
    NVIDIA MediaSheild w/ 9 SATA 3 Gb/sec ports
    ESA Certified
    NVIDIA DualNet and FirstPacket Ethernet technology
    Registered
    CPU: Intel Core 2 Quad Q9550
    S-Spec: SLAWQ
    Ver: E36105-001
    Product Code: BX80569Q9550
    Made in Malaysia
    Pack Date: 09/04/08
    Features:
    Freq.: 2.83 GHz
    L2 Cache: 12 MHz Cache
    FSB: 1333 MHz (MT/s)
    Core: 45nm
    Code named: Yorkfield
    Power:95W
    Socket: LGA775
    Cooling: Liquid Cooled
    NVIDIAGeForce GTX 280 SC graphics card
    Features:
    1 GB of onboard memory
    Full Microsoft DirectX 10
    NVIDIA 2-way and 3-way SLI Ready
    NVIDIA PureVideo HD technology
    NVIDIA PhysX Ready
    NVIDI CUDA technology
    PCI Express 2.0 support
    Dual-link HDCP
    OpenGL 2.1 Capaple
    Output: DVI (2 dual-link), HDTV
    Western Digital
    2 WD VelociRaptor 300 GB SATA Hard Drives configured as Raid 0
    Features:
    10,000 RPM, 3 Gb/sec transfer rate
    RAM Memory , Corsair 4 GB (2 x 2 GB) 1333 MHz DDR3
    p/n: TW3X4G1333C9DHX G
    product: CM3X2048-1333C9DHX
    Features:
    XMS3 DHX Dual-Path 'heat xchange'
    2048 x 2 MB
    1333 MHz
    Latency 9-9-9-24-2T
    1.6V ver3.2

  • Ideapad A1-07 tablet wifi-bluet​ooth does not work!

    Hello everyone. As you can see from the title on my tablet is not working wifi and bluetooth. When turning wifi tablet is reset and continues to be off and on until it forcibly turns off, and when you turn it on again, and do not touch wifi everything is normal and there are no problems with resetting. Can someone help me and give suggestion to solve this stupid problem.  I'm from Croatia and I'm bad with the English writing.

    Hi
    Welcome To Lenovo Community
    Please perform a  factory reset 
    Please ensure you have backed any important data before doing factory reset
    Hold the volume down and the power till Lenovo logo appears .
    System will boot into recover mode. Follow the instructions
    Hope This Helps
    Cheers!!!
    Important Note: If you need help, post your question in the forum, and include your system type, model number and OS. Do not post your serial number.
    Did someone help you today? Press the star on the left to thank them with Kudos!
    If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"!  This will help the rest of the Community with similar issues identify the verified solution and benefit from it.
    Follow @LenovoForums on Twitter!

  • Polygonal lasso tool not working with stylus on Surface Pro 2

    Hi guys,
    I'm new here so please bare with me if I'm posting in the wrong place or don't make immediate sense.
    Hardeware / software used: surface pro 2 and I'm running photoshop CS5.
    Problem is a fairly basic one: I am trying to make basic selections using the polygonal lasso tool (using the stylus that comes with the tablet) but it simply will not work. All I get when I touch the stylus to the screen is the circle that appears then fades. If I attach the keypad and try using that then it works no problem at all.
    Does anyone have any ideas as to whether there is a particular setting that I need to switch on or off e.g. something relating to pressure sensitivity (although not sure why this would affect this particular selection tool)?
    I've searched the web and come up with nothing so far so any help is greatly appreciated!
    Thanks for your time
    Scott

    same problem on surface pro 3 !!!!
    and i think quite significant, for lot of artists using polygonal lasso a lot (including me). How come that the stupid surface cannot work properly

Maybe you are looking for

  • When I use Merge duplicate Values

    Hi When I use MERGE for to INSERT It is duplicating values, I put condition in ON MERGE                         /*+  append nologging */ INTO sysadm.ps_loc_item_sn_zz2 t3    USING (WITH tmp_ps_loc_item AS                (SELECT loc_cntr_id_sn, setid,

  • Apple Mail and Sent Messages

    I have been having some issues with my iCloud email account and Mavericks. I wasn't sure if this was an iCloud issue or an issue with Apple Mail. It has to do with saving Sent messages. A couple of months ago, I had some issues with Mail. I deleted t

  • HT1848 how do i get my apps and music from my ipod to my iphone

    how do i get my apps and music from my ipod touch to my iphone?????????

  • SRM MDM Catalog - Data import

    Hi all, I am using srm mdm catalog 3.0 . Please let me know, how can i map the below fields fron Catalog.xsl file with SRM MDM pre-defined repository: 1-Image 2.Hypelinks 3.Catalog Name , Catalog ID [the client is asking whether , it's mandatory to m

  • SQL*Loader-704

    I'm trying to execute a control file. Below is the error message SQL*Loader: Release 10.2.0.1.0 - Production on Thu Sep 10 10:54:10 2009 Copyright (c) 1982, 2005, Oracle.  All rights reserved. SQL*Loader-704: Internal error: ulconnect: OCIServerAttac