Squid2.6/WCCP2/GRE

[Alan Garfield]

Hey guys,

I'm hoping someone will have a configuration of the following they can
share as I'm pulling my hair out here trying to get this to work.

I have a Cisco 1841 setup on my test bench with WCCP2 configured to
redirect web traffic to the FreeBSD squid proxy via gre.

I can see the traffic on the gre interface on the FreeBSD box, but squid
never sees the traffic and eventually the Cisco removes the cache as a
dead cache.

If anyone has a squid.conf and the proper configuration for ipfw and gre
that would be excellent!

Many thanks,
Alan.


___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]

Re: Squid2.6/WCCP2/GRE

[Andrew Pantyukhin]

On 10/27/06, Alan Garfield [EMAIL PROTECTED] wrote:

Hey guys,

I'm hoping someone will have a configuration of the following they can
share as I'm pulling my hair out here trying to get this to work.


Sure :-)

* squid runs at X.X.5.76
* wccp2 runs at C2800 with multiple addresses, X.X.5.66
 and X.X.78.241 among them
* X.X.5.66 is in the same subnet with squid, so we send
 wccp2 notifications from squid there
* X.X.78.241 gets chosen by IOS as Router Identifier, so
 we have to configure it as the gre tunnel remote endpoint
* 172.X.X.X are deliberately non-existent, they are just
 place holders
===
squid.conf:
wccp2_router X.X.5.66
wccp2_address X.X.5.76
===
rc.firewall:
ipfw add fwd 127.0.0.1,3128 tcp from any to not me dst-port \
80-82,8080-8083,3128,8007,8022 not uid squid
===
rc.conf:
ifconfig_eth0=inet X.X.5.76/27
ifconfig_gre0=inet 172.10.20.30/32 172.10.20.31 link0 \
link2 tunnel X.X.5.76 X.X.78.241 up
===
br2#sh run | incl wccp
ip wccp web-cache redirect-list guys_to_cache
 ip wccp web-cache redirect out
===
br2#sh ip wccp
Global WCCP information:
   Router information:
   Router Identifier:   X.X.78.241
   Protocol Version:2.0
===
   Service Identifier: web-cache
   Number of Cache Engines: 1
   Number of routers:   1
   Total Packets Redirected:1208456314
   Process: 559
   Fast:0
   CEF: 1208455755
   Redirect access-list:guys_to_cache
   Total Packets Denied Redirect:   65691876
   Total Packets Unassigned:816778
   Group access-list:   -none-
   Total Messages Denied to Group:  0
   Total Authentication failures:   0
   Total Bypassed Packets Received: 0
===
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to [EMAIL PROTECTED]