tor 2006-09-14 klockan 18:52 -0600 skrev Shaun Skillin (home): > > Hello, > > I've been looking for quite some time for instructions on using WCCPv2. > squid-cache.org docs section points to visolve, and their site has nothing > on WCCPv2 that I can find. I've read sooo many posts regarding how to set it > up, but most of the posts have to do with version 1, which virtually NO Cisco > device supports anymore. For ver2, the Cisco docs are at least clear, so I > think I have that side set up correctly. From what I have gleaned, I should > do the following: > > I'm using CENTOS 4.3 and SQUID-2.6STABLE3 > > Modprobe ip_gre > > iptunnel add gre1 mode gre remote <ip-address-of-router> local > <ip-address-of-squid-cache> dev eth0 ifconfig gre1 127.0.0.2 up > > from /etc/sysctl.conf: > > net.ipv4.ip_forward =3D 1 > net.ipv4.conf.all.rp_filter =3D 1 > kernel.sysrq =3D 0 > > iptables -t nat -A PREROUTING -i eth0 -p tcp -m tcp --dport 80 -j REDIRECT > --to-ports 3128 > > Are these the correct steps? This info was from a doc on version 1. > What's missing? Is there a current HOWTO for today's most current builds > (Sept 14, 2006 as of this writing)?
The FAQ has detailed instructions on the ip_gre requirements. There is some pecularities in which IP addresses you should use.. http://wiki.squid-cache.org/SquidFaq/InterceptionProxy#head-a7fed84c39e23407b93737da0815d1e6ed926a4f additionally when you use ip_gre the iptables rule should be on the gre device you created, not the ethernet. Regards Henrik
signature.asc
Description: Detta är en digitalt signerad meddelandedel
