On 10/27/06, Alan Garfield <[EMAIL PROTECTED]> wrote:
Hey guys,

I'm hoping someone will have a configuration of the following they can
share as I'm pulling my hair out here trying to get this to work.

Sure :-)

* squid runs at X.X.5.76
* wccp2 runs at C2800 with multiple addresses, X.X.5.66
 and X.X.78.241 among them
* X.X.5.66 is in the same subnet with squid, so we send
 wccp2 notifications from squid there
* X.X.78.241 gets chosen by IOS as Router Identifier, so
 we have to configure it as the gre tunnel remote endpoint
* 172.X.X.X are deliberately non-existent, they are just
 place holders
===========================
squid.conf:
wccp2_router X.X.5.66
wccp2_address X.X.5.76
===========================
rc.firewall:
ipfw add fwd 127.0.0.1,3128 tcp from any to not me dst-port \
80-82,8080-8083,3128,8007,8022 not uid squid
===========================
rc.conf:
ifconfig_eth0="inet X.X.5.76/27"
ifconfig_gre0="inet 172.10.20.30/32 172.10.20.31 link0 \
link2 tunnel X.X.5.76 X.X.78.241 up"
===========================
br2#sh run | incl wccp
ip wccp web-cache redirect-list guys_to_cache
 ip wccp web-cache redirect out
===========================
br2#sh ip wccp
Global WCCP information:
   Router information:
       Router Identifier:                   X.X.78.241
       Protocol Version:                    2.0
===========================
   Service Identifier: web-cache
       Number of Cache Engines:             1
       Number of routers:                   1
       Total Packets Redirected:            1208456314
       Process:                             559
       Fast:                                0
       CEF:                                 1208455755
       Redirect access-list:                guys_to_cache
       Total Packets Denied Redirect:       65691876
       Total Packets Unassigned:            816778
       Group access-list:                   -none-
       Total Messages Denied to Group:      0
       Total Authentication failures:       0
       Total Bypassed Packets Received:     0
===========================
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to