WCCP not working
Hi,
I have issued these commands in my ASA 5520 to activate WCCP to redirect web traffic from a PC with IP 192.168.120.6 to a McAfee Web Gateway with IP 10.250.2.33:
access-list wccp-servers extended permit ip host 10.250.2.33 any
access-list wccp-traffic extended permit ip host 192.168.120.6 any
wccp 51 redirect-list wccp-traffic group-list wccp-servers password aspirina
wccp interface INSIDE_IF_FWSM 51 redirect in
We are seeing traffic in the WCCP statistics in ASA:
Global WCCP information:
Router information:
Router Identifier: 19X.5X.12X.9X
Protocol Version: 2.0
Service Identifier: 51
Number of Cache Engines: 1
Number of routers: 1
Total Packets Redirected: 906
Redirect access-list: wccp-traffic
Total Connections Denied Redirect: 0
Total Packets Unassigned: 10
Group access-list: wccp-servers
Total Messages Denied to Group: 0
Total Authentication failures: 0
Total Bypassed Packets Received: 0
However, the PC can't access the internet. Moreover, in the MWG we don't see GRE traffic.
Thanks in advance.
Though this is in the wrong forum, maybe I can help. Can you do 'show wccp 51 detail' ? Did you already do a packet capture on your proxy? What are you seeing there?
Similar Messages
-
WCCP is not working after ASR migration is done.
Hi Alls.
We recently migrated with new ASR router. However, WCCP is not working, which is using for WAE traffic redirection.
I checked the WCCP configuration. however, I can't find any issue from wccp configuration on ASR router.
Please have seeing following configuration related wccp.
Global)
ip wccp check services all
ip wccp 61 redirect-list waas-redirect
ip wccp 62 redirect-list waas-redirect
Intf)
interface GigabitEthernet0/0/x
ip wccp 61 redirect out
ip wccp 62 redirect in
show ip access-list waas-redirect)
270 deny tcp any eq 1719 any
280 deny tcp any eq 1720 any
290 deny tcp any eq 8443 any
300 deny tcp any eq 689 any
310 permit tcp any any
I confirmed that after migration is done, there was no issue for connectivity between ASR and WAAS.
Following is WAAS status;
Router Information for Service: TCP Promiscuous 61
Routers Seeing this Wide Area Engine(2)
Router Id Sent To
xxx.xxx.xxx.213 xxx.xxx.xxx.15
xxx.xxx.xxx.7 xxx.xxx.xxx.139
Routers not Seeing this Wide Area Engine
-NONE-
Routers Notified of from other WAE's
-NONE-
Multicast Addresses Configured
Router Information for Service: TCP Promiscuous 61
Routers Seeing this Wide Area Engine(2)
Router Id Sent To
xxx.xxx.xxx.213 xxx.xxx.xxx.15
xxx.xxx.xxx.7 xxx.xxx.xxx.139
Routers not Seeing this Wide Area Engine
-NONE-
Routers Notified of from other WAE's
-NONE-
Multicast Addresses Configured
I can't find any difference from configuration and issue with connectivity.
Can anyone help to check this issue? let me know if you need more inputs.
Thanks.Hi Felix,
I'm pasting the show output what you requested.
show ip wccp 61 de)
WCCP Client information:
WCCP Client ID: xxx.xxx.xxx.179
Protocol Version: 2.0
State: Usable
Redirection: GRE
Packet Return: GRE
Assignment: HASH
Initial Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
00000000000000000000000000000000
Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
00000000000000000000000000000000
Hash Allotment: 128 (50.00%)
Packets s/w Redirected: 0
Connect Time: 1w3d
Bypassed Packets
Process: 0
CEF: 0
Errors: 0
WCCP Client ID: xxx.xxx.xxx.178
Protocol Version: 2.0
State: Usable
Redirection: GRE
Packet Return: GRE
Assignment: HASH
Initial Hash Info: 00000000000000000000000000000000
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Assigned Hash Info: 00000000000000000000000000000000
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Hash Allotment: 128 (50.00%)
Packets s/w Redirected: 0
Connect Time: 1w3d
Bypassed Packets
Process: 0
CEF: 0
Errors: 0
show ip wccp 62 de)
WCCP Client information:
WCCP Client ID: xxx.xxx.xxx.179
Protocol Version: 2.0
State: Usable
Redirection: GRE
Packet Return: GRE
Assignment: HASH
Initial Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
00000000000000000000000000000000
Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
00000000000000000000000000000000
Hash Allotment: 128 (50.00%)
Packets s/w Redirected: 0
Connect Time: 1w3d
Bypassed Packets
Process: 0
CEF: 0
Errors: 0
WCCP Client ID: xxx.xxx.xxx.178
Protocol Version: 2.0
State: Usable
Redirection: GRE
Packet Return: GRE
Assignment: HASH
Initial Hash Info: 00000000000000000000000000000000
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Assigned Hash Info: 00000000000000000000000000000000
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Hash Allotment: 128 (50.00%)
Packets s/w Redirected: 0
Connect Time: 1w3d
Bypassed Packets
Process: 0
CEF: 0
Errors: 0
Could you check?
Thanks. -
WCCP does not work between WSA and ASA
I have configured WCCPv2 between WSA S160 ( 6.3.1-025) and ASA5540 (8.2(1)109).
Everything seems to be OK by "show wccp *" on ASA and showing wccp debugging messages (level 4) on S160. Despite of it, WCCP redirection does not work.
If I use packet-capture I figure out that S160 receives GRE packets with TCP SYN from particular LAN host to WWW sites but S160 does not handle them and does not send anything back to ASA.
It is an Exempt from authentication for this LAN host and in Forward proxy mode everything works well.
I have attached an example of a packet-capture (S160.txt - renamed from .cap) and debugging messages from S160 & "show" from ASA.
Does anybody have any idea what the problem is and how I can resolve it ?IronPort Support team helped me to find the trouble:
If I wish to handle specific port's (80, 8080, etc.) traffic by the transparent proxy I need to configure this port like a listener for the FORWARD proxy
("Security Services" -> "Proxy Settings" -> "HTTP Ports to Proxy")
The WSA guide doesn't clearly say about it.
So the Discussion can be closed ... -
Generic GRE not working (ver 4.1.3.55)
Hi everybody.
I'm testing in Lab a configuration for one customer.
It's a basic environment with :
DATA CENTER (wccp)
1 WAEs 7341 and 1 Cat6506 routers
BRANCH (inline)
1 WAE 574.
Optimization works with l2-redirect and gre return in DATA CENTER !!
It does not work with egress-method generic-gre inteception-method wccp.
This is the problem that i can see with " show wccp gre" on the 7341..
" Packets received on a disabled service: 667790".
I read some manuals but...
I don't understand .. The service 61 and 62 works !!
So any idea ?
Thanks a lot to everybody
VittorioHy and thanks to be interested.
That's the output you ask :
WAE-DC-01#sh egress-methods
Intercept method : WCCP
TCP Promiscuous 61 :
WCCP negotiated return method : WCCP GRE
Egress Method Egress Method
Destination Configured Used
any Generic GRE Generic GRE
TCP Promiscuous 62 :
WCCP negotiated return method : WCCP GRE
Egress Method Egress Method
Destination Configured Used
any Generic GRE Generic GRE
Intercept method : Generic L2
Egress Method Egress Method
Destination Configured Used
any not configurable IP Forwarding
And here there is another useful :
WAE-DC-01#sh wccp gre
Transparent GRE packets received: 52082
Transparent non-GRE packets received: 0
Transparent non-GRE non-WCCP packets received: 0
Total packets accepted: 0
Invalid packets received: 0
Packets received with invalid service: 0
Packets received on a disabled service: 50118
Packets received too small: 1964
Packets dropped due to zero TTL: 0
Packets dropped due to bad buckets: 0
Packets dropped due to no redirect address: 0
Packets dropped due to loopback redirect: 0
Pass-through pkts dropped on assignment update:0
Connections bypassed due to load: 0
Packets sent back to router: 50118
GRE packets sent to router (not bypass): 0
Packets sent to another WAE: 0
GRE fragments redirected: 28770
GRE encapsulated fragments received: 0
Packets failed encapsulated reassembly: 0
Packets failed GRE encapsulation: 0
Packets dropped due to invalid fwd method: 0
Packets dropped due to insufficient memory: 0
Packets bypassed, no pending connection: 0
Packets due to clean wccp shutdown: 0
Packets bypassed due to bypass-list lookup: 0
Conditionally Accepted connections: 0
Conditionally Bypassed connections: 0
L2 Bypass packets destined for loopback: 0
Packets w/WCCP GRE received too small: 0
Packets dropped due to received on loopback: 0
Packets dropped due to IP access-list deny: 0
Packets fragmented for bypass: 28770
Packets fragmented for egress: 0
Packet pullups needed: 57543
Packets dropped due to no route found: 0
Any new idea ?
Thanks
Vittorio -
We have 2 ASAs configured as active/standby failover cluster. Recently we upgraded the IOS to 9.0(2) and WCCP stopped working due to a FQDN entry in the redirection access list. We have since removed that entry and everything worked fine for about two weeks until yesterday when it stopped working again. I checked the configuration and the configuration looked correct:
wccp 1 redirect-list RedirectToCache group-list WebCacheEngines password *****
wccp interface Inside 1 redirect in
However, if I run the command Show WCCP here is what I received:
ASA# sh wccp
Global WCCP information:
Router information:
Router Identifier: 192.168.2.3
Protocol Version: 2.0
Service Identifier: 1
Number of Cache Engines: 0
Number of routers: 0
Total Packets Redirected: 508141596
Redirect access-list: RedirectToCache
Total Connections Denied Redirect: 6374402
Total Packets Unassigned: 1232
Group access-list: WebCacheEngines
Total Messages Denied to Group: 0
Total Authentication failures: 0
Total Bypassed Packets Received: 494904
Notice number of Cache Engines and Number of Routers is zero. I removed the wccp configuration shown above and then added it back in exactly as it was and things started working again. Now if I run the show wccp command, it shows me 1 cache engine and 1 router.
Has anyone experienced this type of problem before? any tips on troubleshooting wccp?
I am not quite sure what caused this interruption specially when the configuration was in place and I know for a fact that there have been no changes to either the ASA or the Cache Engine (Ironport WSA) for several days. Things were working on Monday, I'm sure because I run a report on the Ironport appliance for usage so it stopped working sometime either Monday evening or Tuesday.
ThanksThough this is in the wrong forum, maybe I can help. Can you do 'show wccp 51 detail' ? Did you already do a packet capture on your proxy? What are you seeing there?
-
Not work tablet UI on Prestigio 5080 PRO tablet
I read that browser.ui.layout.tablet = "1" can fix this problem. But it not works. I can work only in pnone interface that is not good for my 8'' tablet.
Would it be possible for you to share the problematic pdf and OS information with us at [email protected] so that we may investigate?
Thanks,
Adobe Reader Team -
Why self-defined access sequences of free goods can not work?
Hi gurus,
I have maintained access sequences of free goods self-defined.but when i creat the SO it does not work!
when i used the standard access sequences ,it is OK .
Can anybody tell me why?
thanks in advanceDear Sandy,
Go to V/N1 transaction select your self defined access sequence then go in to the accesses and fields and check all fields are activated.
Make sure that these fields are flowing in your sales order.
I hope this will help you,
Regards,
Murali. -
Adobe bridge raw not working with windows vista in photoshop cc, why?
adobe bridge raw not working in photoshop cc, is there a fix?
Your sure your using photoshop cc on windows vista?
I was under the impression that photoshop cc would not even install on windows vista.
What version of camera raw do you have?
In photoshop under Help>About Plugin does it list Camera Raw and if so which version is it?
(click on the words Camera Raw to see the version)
Camera raw doesn't work if it's a camera raw file or some other file type such as jpeg or tif?
What camera are the camera raw files from?
Officially camera raw 8.3 is the latest version of camera raw that will work on windows vista. -
Adobe Bridge CS5 in windows 7 not working?
Adobe Bridge CS5 in windows 7 not working. I was using bridge perfectly for last 2 years. It stops working since 3 days. I tried to install updates. Showing some error to install.
Tried to install creative cloud..again some error. Error code : 82
Could you please advice how I can fix my adobe bridge.https://www.youtube.com/watch?v=xDYpTOoV81Q&feature=youtu.be
please check this video I uploaded..this is what happens when I click adobe bridge.. just blinks and go off. bridge not working on task manager -
ADOBE CLOUD ON MY DESKTOP WILL NOT WORK. IT LOADS UP BUT NOTHING FILLS THE WINDOW
ADOBE CLOUD ON MY DESKTOP WILL NOT WORK. IT LOADS UP BUT NOTHING FILLS THE WINDOW
BLANK Cloud Screen http://forums.adobe.com/message/5484303 may help
-and step by step http://forums.adobe.com/thread/1440508?tstart=0
-and http://helpx.adobe.com/creative-cloud/kb/blank-white-screen-ccp.html -
Partner application logoff not working
We have a partner application registered with sso with custom login screen. The login works fine. We use the following code to logoff the partner application in logoff.jsp
response.setHeader("Osso-Return-Url", "http://my.oracle.com" );
response.sendError(470, "Oracle SSO");
session.invalidate();
but the logoff is not working properly. It is not invalidating the session and the logout http request is not going from the application server to the sso server.
Are there any additional configurations for SSO logoff.Any help is appreciated.
ThanksHi
The WF should also trigger if i add the Partner function in UI.If i change any Attribute the WF triggers but i dont want to change the attribute when i add the partner function.
If i have only one event for WF that is Partner Change the WF will not trigger it for the 1st time when i save the UI. But next i come to the same saved doc and add a partner function then the Wf triggers.
So this means that Partner change is active.
the issue here is i need to trigger the WF on , the 1st time i save the UI, for which i wil be using Attribute Change and next time when i come back to saved doc the and add only the partner function and no changes are made to attributes the WF should again trigger.
Thanks
Tarmeem -
IPhone 4 Voice Memos not working/saving
Hi there,
I'm having trouble with my voice memos too. Up until yesterday they were working fine and now, even though the record button works, the stop button does not and I can only pause them. Worse again is that the button to go into the menu to view all voice memos is not working so I can't play them from my iPhone and nothing new is saving to my iTunes. Please help!I've always had the "Include Voice Memos" option selected. I think that only pertains to syncing voice memos from iTunes to the iPhone after it has been copied to iTunes. It has to be the new OS/iTunes not communicating that new memos have been recorded. For some reason they won't sync when I want them to, and then a few syncs later they magically appear.
By the way, I'm VERY comfortable with the iTunes and iPhone systems. I've been using iTunes for 5 years, and I've been recording class lectures with the iPhone voice memo app (and another app) for a couple years. It's not an error of not seeing that the memos were added; they don't exist in my library or music folders.
JUST OUT OF CURIOSITY, POST WHICH FIRMWARE YOU ARE RUNNING EXACTLY!!!
I'm on an iPhone 4, running firmware 4.0.1 -
Installed Premiere Pro CS4 but video display does not work?
I just got my copy of CS$. After installing Premiere I found two things that seem very wrong:
1) video display does not work, not even the little playback viewer next to improted film clips located on the project / sequence window. Audio works fine.
2) the UI is way too slow for my big beefy system.
My pc is a dual boot Vista-32 and XP system with 4GB of memory installed and nvidia geforce 280 graphics board with plenty of GPU power. The CS4 is installed on the Vista-32 partition. My windows XP partition on the same PC with Premiere CS2 works great and real fast.
Any ideas how to solve this CS4 install issue?
RonI would like to thank Dan, Hunt, and Haram:
The problem is now very clear to me. The problem only shows up with video footage imported into PP CS4 encoded with "MS Video 1" codec. So this seems to be a bug. The codec is very clearly called out and supported within various menues but video with this codec just will not play in any monitor or preview window. In addition the entire product looks horrible with respect to performance while PP CS4 trys its best to play the video. Audio will start playing after about 30 seconds. And once in awhile part of video shows up at the wrong magnification before blanking out again.
My suggestion to the Adobe team: fix the bug and add some sample footage to the next release so new installations can test their systems with known footage.
My PC is brand new with the following "beefy" components:
Motherboard
nForce 790i SLI FTW
Features:
3x PCI Express x16 graphics support
PCI Express 2.0
NVIDIA SLI-Ready (requires multiple NVIDIA GeForce GPUs)
DDR3-2000 SLI-Ready memory w/ ERP 2.0 (requires select third party system memory)
Overclocking tools
NVIDIA MediaSheild w/ 9 SATA 3 Gb/sec ports
ESA Certified
NVIDIA DualNet and FirstPacket Ethernet technology
Registered
CPU: Intel Core 2 Quad Q9550
S-Spec: SLAWQ
Ver: E36105-001
Product Code: BX80569Q9550
Made in Malaysia
Pack Date: 09/04/08
Features:
Freq.: 2.83 GHz
L2 Cache: 12 MHz Cache
FSB: 1333 MHz (MT/s)
Core: 45nm
Code named: Yorkfield
Power:95W
Socket: LGA775
Cooling: Liquid Cooled
NVIDIAGeForce GTX 280 SC graphics card
Features:
1 GB of onboard memory
Full Microsoft DirectX 10
NVIDIA 2-way and 3-way SLI Ready
NVIDIA PureVideo HD technology
NVIDIA PhysX Ready
NVIDI CUDA technology
PCI Express 2.0 support
Dual-link HDCP
OpenGL 2.1 Capaple
Output: DVI (2 dual-link), HDTV
Western Digital
2 WD VelociRaptor 300 GB SATA Hard Drives configured as Raid 0
Features:
10,000 RPM, 3 Gb/sec transfer rate
RAM Memory , Corsair 4 GB (2 x 2 GB) 1333 MHz DDR3
p/n: TW3X4G1333C9DHX G
product: CM3X2048-1333C9DHX
Features:
XMS3 DHX Dual-Path 'heat xchange'
2048 x 2 MB
1333 MHz
Latency 9-9-9-24-2T
1.6V ver3.2 -
Ideapad A1-07 tablet wifi-bluet​ooth does not work!
Hello everyone. As you can see from the title on my tablet is not working wifi and bluetooth. When turning wifi tablet is reset and continues to be off and on until it forcibly turns off, and when you turn it on again, and do not touch wifi everything is normal and there are no problems with resetting. Can someone help me and give suggestion to solve this stupid problem. I'm from Croatia and I'm bad with the English writing.
Hi
Welcome To Lenovo Community
Please perform a factory reset
Please ensure you have backed any important data before doing factory reset
Hold the volume down and the power till Lenovo logo appears .
System will boot into recover mode. Follow the instructions
Hope This Helps
Cheers!!!
Important Note: If you need help, post your question in the forum, and include your system type, model number and OS. Do not post your serial number.
Did someone help you today? Press the star on the left to thank them with Kudos!
If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"! This will help the rest of the Community with similar issues identify the verified solution and benefit from it.
Follow @LenovoForums on Twitter! -
Polygonal lasso tool not working with stylus on Surface Pro 2
Hi guys,
I'm new here so please bare with me if I'm posting in the wrong place or don't make immediate sense.
Hardeware / software used: surface pro 2 and I'm running photoshop CS5.
Problem is a fairly basic one: I am trying to make basic selections using the polygonal lasso tool (using the stylus that comes with the tablet) but it simply will not work. All I get when I touch the stylus to the screen is the circle that appears then fades. If I attach the keypad and try using that then it works no problem at all.
Does anyone have any ideas as to whether there is a particular setting that I need to switch on or off e.g. something relating to pressure sensitivity (although not sure why this would affect this particular selection tool)?
I've searched the web and come up with nothing so far so any help is greatly appreciated!
Thanks for your time
Scottsame problem on surface pro 3 !!!!
and i think quite significant, for lot of artists using polygonal lasso a lot (including me). How come that the stupid surface cannot work properly
Maybe you are looking for
-
When I use Merge duplicate Values
Hi When I use MERGE for to INSERT It is duplicating values, I put condition in ON MERGE /*+ append nologging */ INTO sysadm.ps_loc_item_sn_zz2 t3 USING (WITH tmp_ps_loc_item AS (SELECT loc_cntr_id_sn, setid,
-
I have been having some issues with my iCloud email account and Mavericks. I wasn't sure if this was an iCloud issue or an issue with Apple Mail. It has to do with saving Sent messages. A couple of months ago, I had some issues with Mail. I deleted t
-
HT1848 how do i get my apps and music from my ipod to my iphone
how do i get my apps and music from my ipod touch to my iphone?????????
-
Hi all, I am using srm mdm catalog 3.0 . Please let me know, how can i map the below fields fron Catalog.xsl file with SRM MDM pre-defined repository: 1-Image 2.Hypelinks 3.Catalog Name , Catalog ID [the client is asking whether , it's mandatory to m
-
I'm trying to execute a control file. Below is the error message SQL*Loader: Release 10.2.0.1.0 - Production on Thu Sep 10 10:54:10 2009 Copyright (c) 1982, 2005, Oracle. All rights reserved. SQL*Loader-704: Internal error: ulconnect: OCIServerAttac