OpenForum RSS: wccp

wccp (Matz)

Wed, 11 Jun 2008 07:06:34 GMT

squid ��.
KiM, �� . �� . �� , �� .

Cisco:
....
ip wccp version 1
ip wccp web-cache
!
....
!
!Internet interface
interface GigabitEthernet0/0
ip address 81.*.*.* 255.255.255.0
ip wccp web-cache redirect out
ip nat outside
duplex auto
speed auto
no cdp enable
no mop enabled
!LAN interface
interface GigabitEthernet0/1
ip address 192.168.1.175 255.255.255.0 secondary
ip address 192.168.33.50 255.255.255.0
ip nat inside
duplex auto
speed auto
no cdp enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0 81.*.*.*
!
no ip http server
ip nat inside source list 100 interface GigabitEthernet0/0 overload
!
access-list 100 deny gre 192.168.33.0 0.0.0.255 host 192.168.33.75
access-list 100 permit ip 192.168.33.0 0.0.0.255 any
access-list 100 permit ip 192.168.1.0 0.0.0.255 any
....

Linux(squid):
#ifconfig eth0 192.168.33.75 netmask 255.255.255.0
#route add default 192.168.33.50
#ip tunnel add

wccp (KiM)

Tue, 10 Jun 2008 12:46:45 GMT

>[�� ]
>DNAT tcp -- 0.0.0.0/0
>
>192.168.90.75 tcp dpt:80 to:192.168.90.75:5556
>
>�� , �� ACCEPT
>
>��-�� ? �� -�� , ��
>�� .
>
>�� .

� �� http://www.opennet.ru/base/cisco/squid_wccp.txt.html

wccp (KiM)

Tue, 10 Jun 2008 12:44:50 GMT

>[�� ]
>DNAT tcp -- 0.0.0.0/0
>
>192.168.90.75 tcp dpt:80 to:192.168.90.75:5556
>
>�� , �� ACCEPT
>
>��-�� ? �� -�� , ��
>�� .
>
>�� .

� �� ?(squid,ISA,etc)

http://www.cisco.com/en/US/docs/ios/12_1/configfun/command/reference/frd3005.html

wccp (Matz)

Mon, 09 Jun 2008 07:15:12 GMT

KiM, �� . �� .

�� :
cisco
gi0/0 -- �� (ip nat outside ; ip wccp web-cache redirect out)
gi0/1 -- �� (ip nat insude)
t0 -- gre ��

�� gre �� . tcpdump � debug ��, �� .
�� 80 ��, tcpdump �� tnl �� :
11:59:19.510071 IP 192.168.90.175 > 192.168.90.75: GREv0, length 64: gre-proto-0x883e
11:59:19.510098 IP 192.168.90.75 > 192.168.90.175: ICMP 192.168.90.75 protocol 47 unreachable, length 92

�� gre �� gre �� ... � �� .

�� :
modprobe ip_gre
ip tunnel add tnl0 mode gre local 192.168.33.75 remote 192.168.33.50 ttl 255
ip addr add 192.168.90.75 dev tnl0
ip link set tnl0 up
ip route add 192.168.90.0/24 dev tnl0

#iptables -L -n -t nat
target prot opt source destination
DNAT tcp -- 0.0.0.0/0 192.168.90.75 tcp dpt:80 to:

wccp (KiM)

Sat, 07 Jun 2008 16:56:57 GMT

>[�� ]
> WCCP Cache Engines NOT Visible:
> -none-
>
>
>tcpdump �� squid:
>15:00:18.280494 IP 192.168.33.75.2048 > 192.168.33.50.2048: UDP, length 52
>15:00:18.280881 IP 192.168.33.50.2048 > 192.168.33.75.2048: UDP, length 64
>
>�� . �� , web �� , ��
>�� . �� ?

� �� 80 �� acl ��
ip access-list ext nat
10 permit tcp host 192.168.33.75 any
20 deny tcp 192.168.33.0 0.0.0.255 any eq 80
30 deny tcp 192.168.35.0 0.0.0.255 any eq 80
40 deny tcp 192.168.1.0 0.0.0.255 any eq 80
50 permit ip 192.168.33.0 0.0.0.255 any
60 permit ip 192.168.35.0 0.0.0.255 any
70 permit ip 192.168.1.0 0.0.0.255 any