Awie, Better to change IOS as you was running before. There must be something wrong with IOS or WCCP module. If wccp module is working f9 then better to change IOS.
-- Best Regs, Masood Ahmad Shah System Administrator ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ | * * * * * * * * * * * * * * * * * * * * * * * * | Fibre Net (Pvt) Ltd. Lahore, Pakistan | Tel: +92-42-6677024 | Mobile: +92-300-4277367 | http://www.fibre.net.pk | * * * * * * * * * * * * * * * * * * * * * * * * ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie) ----- Original Message ----- From: "Awie" <[EMAIL PROTECTED]> To: "Masood Ahmad Shah" <[EMAIL PROTECTED]>; "Squid-users" <[EMAIL PROTECTED]> Sent: Friday, September 12, 2003 1:55 PM Subject: Re: [squid-users] WCCP issue | Masood, | | Seems the problem because of CEF issue. My router has IOS version 12.1.(3)T | that pretty old (as my friend at Cisco said), perhaps having problem with IP | GRE as stated in the FAQ below: | | ******************************************* | | IOS 12.x problems | Some people report problems with WCCP and IOS 12.x. They see truncated or | fragmented GRE packets arriving at the cache. Apparently it works if you | disable Cisco Express Forwarding for the interface: | | conf t | ip cef # some systems may already have 'ip cef global' | int Ethernet 0/0 (or int FastEthernet 0/0 or other internal interface) | no ip route-cache cef | CTRL Z | | This may well be fixed in later releases of IOS. | | ******************************************* | | Now, I use route map instead WCCP and run normally, but I still want to use | WCCP. As it is save and better than route map. | | Your advise please. | | Thx & Rgds, | | Awie | | ----- Original Message ----- | From: "Masood Ahmad Shah" <[EMAIL PROTECTED]> | To: "Awie" <[EMAIL PROTECTED]>; "Squid-users" <[EMAIL PROTECTED]> | Sent: Friday, September 12, 2003 1:33 PM | Subject: Re: [squid-users] WCCP issue | | | > no by default squid enable wccp ... so no need to compile with wccp | support. | > if you want to disable wccp then you can put --disable-wccp. | > There is some buggy IOS in cisco they did not redirect traffic or did not | > allot hash code. so better to change your IOS on cisco router. | > if it does not solve porblem then better to check wccp module.... | > lsmod | grep wccp | > | > | > onthing more make sure you have ip wccp redirect out on your router border | > interface | > | > -- | > | > Best Regs, | > Masood Ahmad Shah | > System Administrator | > | > ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ | > | * * * * * * * * * * * * * * * * * * * * * * * * | > | Fibre Net (Pvt) Ltd. Lahore, Pakistan | > | Tel: +92-42-6677024 | > | Mobile: +92-300-4277367 | > | http://www.fibre.net.pk | > | * * * * * * * * * * * * * * * * * * * * * * * * | > ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ | > Unix is very simple, but it takes a genius to understand the simplicity. | > (Dennis Ritchie) | > | > ----- Original Message ----- | > From: "Awie" <[EMAIL PROTECTED]> | > To: "Masood Ahmad Shah" <[EMAIL PROTECTED]>; "Squid-users" | > <[EMAIL PROTECTED]> | > Sent: Friday, September 12, 2003 9:11 AM | > Subject: Re: [squid-users] WCCP issue | > | > | > | After I clear WCCP statistic, I found a strange condition as below: | > | | > | dpr-gtw-01#sh ip wccp | > | Global WCCP information: | > | Router information: | > | Router Identifier: my.router.ip.adrr | > | Protocol Version: 1.0 | > | | > | Service Identifier: web-cache | > | Number of Cache Engines: 1 | > | Number of routers: 1 | > | Total Packets Redirected: 0 | > | Redirect access-list: redirect-to-squid | > | Total Packets Denied Redirect: 0 | > | Total Packets Unassigned: 4578 | > | Group access-list: squid-cache | > | Total Messages Denied to Group: 0 | > | Total Authentication failures: 0 | > | | > | dpr-gtw-01#sh ip wccp web-cache detail | > | WCCP Cache-Engine information: | > | IP Address: aaa.aaa.aaa.aaa | > | Protocol Version: 0.3 | > | State: Usable | > | Initial Hash Info: 00000000000000000000000000000000 | > | 00000000000000000000000000000000 | > | Assigned Hash Info: 00000000000000000000000000000000 | > | 00000000000000000000000000000000 | > | Hash Allotment: 0 (0.00%) | > | Packets Redirected: 0 | > | Connect Time: 00:08:25 | > | | > | dpr-gtw-01#sh ip wccp web-cache detail | > | WCCP Cache-Engine information: | > | IP Address: aaa.aaa.aaa.aaa | > | Protocol Version: 0.3 | > | State: Usable | > | Initial Hash Info: 00000000000000000000000000000000 | > | 00000000000000000000000000000000 | > | Assigned Hash Info: 00000000000000000000000000000000 | > | 00000000000000000000000000000000 | > | Hash Allotment: 0 (0.00%) | > | Packets Redirected: 0 | > | Connect Time: 00:08:30 | > | | > | dpr-gtw-01#sh ip wccp web-cache detail | > | WCCP Cache-Engine information: | > | IP Address: aaa.aaa.aaa.aaa | > | Protocol Version: 0.3 | > | State: Usable | > | Initial Hash Info: 00000000000000000000000000000000 | > | 00000000000000000000000000000000 | > | Assigned Hash Info: 00000000000000000000000000000000 | > | 00000000000000000000000000000000 | > | Hash Allotment: 0 (0.00%) | > | Packets Redirected: 0 | > | Connect Time: 00:08:30 | > | | > | There are only Unassigned Packets displayed and the HASH Allotment is 0. | I | > | suspect it is because of Linux / Squid issue instead Cisco IOS. | > | | > | I configured the Squid without any parameter. Should I use | > the --enable-wccp | > | parameters? | > | | > | Thx & Rgds, | > | | > | Awie | > | | > | ----- Original Message ----- | > | From: "Awie" <[EMAIL PROTECTED]> | > | To: "Masood Ahmad Shah" <[EMAIL PROTECTED]>; "Squid-users" | > | <[EMAIL PROTECTED]> | > | Sent: Thursday, September 11, 2003 11:24 PM | > | Subject: Re: [squid-users] WCCP issue | > | | > | | > | > Masood, | > | > | > | > Do you mean I can remove the both standard and extend access-list? | Would | > | you | > | > give me the IOS sample? | > | > | > | > I used the same IOS command as my last succesfull setting that using | > both | > | > access-list. | > | > | > | > Thx & Rgds, | > | > | > | > Awie | > | > | > | > ----- Original Message ----- | > | > From: "Masood Ahmad Shah" <[EMAIL PROTECTED]> | > | > To: "Awie" <[EMAIL PROTECTED]>; "Squid-users" | > | <[EMAIL PROTECTED]> | > | > Sent: Thursday, September 11, 2003 9:18 PM | > | > Subject: Re: [squid-users] WCCP issue | > | > | > | > | > | > > if you are using wccp then no need to deny Squid box ip in | > | > redirect-to-squid | > | > > access list. becoz cisco router does not route wccp cache to traffic | > to | > | > wccp | > | > > cache. | > | > > | > | > > -- | > | > > | > | > > Best Regs, | > | > > Masood Ahmad Shah | > | > > System Administrator | > | > > | > | > > ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ | > | > > | * * * * * * * * * * * * * * * * * * * * * * * * | > | > > | Fibre Net (Pvt) Ltd. Lahore, Pakistan | > | > > | Tel: +92-42-6677024 | > | > > | Mobile: +92-300-4277367 | > | > > | http://www.fibre.net.pk | > | > > | * * * * * * * * * * * * * * * * * * * * * * * * | > | > > ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ ^ | > | > > Unix is very simple, but it takes a genius to understand the | > simplicity. | > | > > (Dennis Ritchie) | > | > > | > | > > ----- Original Message ----- | > | > > From: "Awie" <[EMAIL PROTECTED]> | > | > > To: "Squid-users" <[EMAIL PROTECTED]> | > | > > Sent: Thursday, September 11, 2003 5:43 PM | > | > > Subject: [squid-users] WCCP issue | > | > > | > | > > | > | > > | All, | > | > > | | > | > > | I was succesfull to run WCCP with my old box (Linux 2.2.19 and | Squid | > | > > 2.3.S4) | > | > > | using WCCP patch of Joe Copper. | > | > > | | > | > > | Now, I use new version of Linux 2.4.21 and Squid 2.4S7 and Cisco | > 3660 | > | > with | > | > > | IOS 12.1. The router did not work well to redirect the packets. | > Below | > | > the | > | > > | messages in Linux box and Cisco Router as well. | > | > > | | > | > > | | > | > > | # lsmod | > | > > | | > | > > | Module Size Used by Not Tainted | > | > > | ipt_REDIRECT 1408 1 (autoclean) | > | > > | ip_wccp 1456 0 (unused) | > | > > | | > | > > | | > | > > | dpr-gtw-01#sh ip wccp | > | > > | Global WCCP information: | > | > > | Router information: | > | > > | Router Identifier: aaa.aaa.aaa.aaa | > | > > | Protocol Version: 1.0 | > | > > | | > | > > | Service Identifier: web-cache | > | > > | Number of Cache Engines: 1 | > | > > | Number of routers: 1 | > | > > | Total Packets Redirected: 14159 | > | > > | Redirect access-list: redirect-to-squid | > | > > | Total Packets Denied Redirect: 17336 | > | > > | Total Packets Unassigned: 222478 | > | > > | Group access-list: squid-cache | > | > > | Total Messages Denied to Group: 0 | > | > > | Total Authentication failures: 0 | > | > > | | > | > > | Herewith IOS setting : | > | > > | | > | > > | ! | > | > > | ip wccp version 1 | > | > > | ip wccp web-cache redirect-list redirect-to-squid group-list | > | squid-cache | > | > > | ! | > | > > | ! | > | > > | interface Serial1/0 | > | > > | Bla..bla...bla..... | > | > > | ip wccp web-cache redirect out | > | > > | ! | > | > > | interface Serial1/1 | > | > > | Bla..bla...bla..... | > | > > | ip wccp web-cache redirect out | > | > > | ! | > | > > | ! | > | > > | ip access-list standard squid-cache | > | > > | permit ip.of.my.Squid | > | > > | ! | > | > > | ip access-list extended redirect-to-squid | > | > > | deny tcp host ip.of.my.squid any eq www | > | > > | permit ip my.subnet.block.list any | > | > > | deny tcp any any eq www | > | > > | ! | > | > > | ! | > | > > | ! | > | > > | | > | > > | FYI, I have 2 Internet links that attached to both serial of | router. | > | > > | | > | > > | Why did the router display lines below? | > | > > | What does the packet unassigned mean? Is it any non-HTTP packet? | > | > > | | > | > > | Total Packets Denied Redirect: 17336 | > | > > | Total Packets Unassigned: 222478 | > | > > | | > | > > | Your answer is very appreciated and waited for. | > | > > | | > | > > | Thx & Rgds, | > | > > | | > | > > | Awie | > | > > | | > | > > | | > | > > | | > | > > | | > | > > | > | > | > | | > | | > | | > | | | | |
