Dear all,
I've a problem to setting up My Router and proxy.
The specify our machine is:
1. The Router 7200 Software (C7200-IS-M), Version 12.2(17a)
IP-> 10.10.10.1
2. Proxy using RH 7.0 with squid 2.5stable2, with patch for ip_wccp
(with 1 interface ethernet)
IP-> 10.10.20.2
Here is my config in the router :
clock timezone GMT+7 7
ip subnet-zero
no ip source-route
ip wccp version 1
ip wccp web-cache redirect-list testWCCP group-list 20
ip cef
!
The result was:
Global WCCP information:
Router information:
Router Identifier: 10.10.10.1
Protocol Version: 1.0
Service Identifier: web-cache
Number of Cache Engines: 1
Number of routers: 1
Total Packets Redirected: 11
Redirect access-list: testWCCP
Total Packets Denied Redirect: 0
Total Packets Unassigned: 0
Group access-list: 20
Total Messages Denied to Group: 4
Total Authentication failures: 0
WCCP Cache-Engine information:
Web Cache ID: 0.0.0.0
Protocol Version: 0.4
State: Usable
Initial Hash Info: 00000000000000000000000000000000
00000000000000000000000000000000
Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
Hash Allotment: 256 (100.00%)
Packets Redirected: 3
Connect Time: 00:00:37
WCCP Routers Informed of:
-none-
WCCP Cache Engines Visible:
10.10.20.2
WCCP Cache Engines NOT Visible:
-none-
I've already redirect the packet from port www to 3128:
iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT
--to-ports 3128
When i install squid :
./configure --prefix=/usr/local/squid --enable-async-io --enable-storeio=diskd,ufs
-enable-wccp -enable-underscores --enable-linux-netfilter
make all install
In my squid.conf i've already config this :
wccp_router
httpd_accel_host
httpd_accel_port
httpd_accel_with_proxy
httpd_accel_uses_host_header
I've also enable IP Forwarding by editing /etc/sysctl.conf with:
net.ipv4.ip_forward = 1
net.ipv4.conf.all.rp_filter = 1
kernel.sysrq = 0
The problem is my client can't detect the proxy (where i was setting
as transparent proxy) and he cannot browsing, but if the client using
manual proxy, it's ok....
Thanks in advance for any help
