|
|
This chapter provides detailed descriptions of the commands used to configure Web Cache Communication Protocol Version 1 (WCCPv1) and Version 2 (WCCPv2) on your router.
For configuration tasks and examples, refer to the "Network Management Using WCCP"chapter in the Release 12.1 Cisco IOS Configuration Fundamentals Configuration Guide.
Table 119 lists those commands that have been replaced since Cisco IOS Release 12.0.
| Command in IOS 12.0: | Replaced By or Integrated Into: |
|---|---|
ip wccp enable | ip wccp |
ip wccp redirect-list | ip wccp |
ip web-cache redirect | ip wccp web-cache redirect out |
show ip wccp web-caches | show ip wccp web-cache detail |
 |
Note Cisco IOS 12.1 allows you to enable either WCCPv1 functionality or WCCPv2 functionality on your router uing the ip wcp version command. However, you must use the new commands introduced with WCCPv2 to configure WCCPv1. The original WCCPv1 configuration commands that have been replaced in this release (see Table 119) will no longer function. |
To remove Web Cache Communication Protocol (WCCP) statistics (counts) maintained on the router for a particular service, use the clear ip wccp EXEC command.
clear ip wccp {web-cache | service-number}
Syntax Description
web-cache Directs the router to remove statistics for the web cache service. service-number Directs the router to remove statistics for a specified cache service. The number can be from 0 to 99.
Defaults
No default behavior or values.
Command Modes
User EXEC, Privileged EXEC
Command History
11.1 CA This command was introduced for Cisco 7200 and 7500 platforms. 11.2 P Support for this command was added to a variety of Cisco platforms. 12.0(3)T This command was expanded to be explicit about service using the web-cache keyword and the service-number argument.
Release
Modification
Usage Guidelines
Use the show ip wccp and show ip wccp detail commands to display WCCP statistics. If Cisco Cache Engines are used in your service group, the reverse proxy service is indicated by a value of 99.
Examples
The following command removes all statistics associated with the web cache service:
clear ip wccp web-cache
Related Commands
ip wccp Directs a router to enable or disable the support for a cache engine service group. show ip wccp Displays global statistics related to the WCCP.
Command
Description
To direct a router to enable or disable the support for a cache engine service group, use the ip wccp global configuration command. To remove the ability of a router to control support for a service group, use the no form of this command.
ip wccp {web-cache | service-number} [group-address groupaddress] [redirect-list access-list] [group-list access-list] [password password]
Syntax Description
web-cache Enables the web cache service. service-number Enables the specified WCCP service. Services are identified using a number from 0 to 99. If Cisco Cache Engines are being used in your service group, the reverse-proxy service is indicated by a value of 99. group-address groupaddress (Optional) Directs the router to use a specified multicast IP address for communication with the WCCP service group. redirect-list access-list (Optional) Directs the router to use an access list to control traffic redirected to this service group. The access-list argument uses a string of 64 characters or less to specifiy the name of the previously configured access list to be used. group-list access-list (Optional) Directs the router to use an access list to determine which cache engines are allowed to participate in the service group. The access-list argument uses a string of 64 characters or less to specifiy the name of the previously configured access list to be used. password (Optional) A string that directs the router to apply MD5 authentication to messages received from the service group specified by the service name given. Messages that are not accepted by the authentication are discarded. The password can be up to seven characters in length. password The password name that will be combined with the HMAC MD5 value to create security for the connection between the router and the cache engine.
The groupaddress argument requires a multicast address used by the router to determine which cache engine should recieve redirected messages.
Defaults
WCCP services are not enabled on the router.
Command Modes
Global configuration
Command History
12.0(3)T This command was introduced.
Release
Modification
Usage Guidelines
This configuration command instructs a router to enable or disable the support for the Service Group specified by the service-name given. A service-name may be either one of the provided standard keyword definitions or a number representing a cache engine dynamically defined definition. Once the Service is enabled, the router can participate in the establishment of a Service Group.
Currently the only provided keyword definition to be used as a service name is web-cache. This keyword is used to describe the existing WCCP version 1 functionality.
When the ip wccp global configuration command is issued, it instructs the router to allocate space and enable support of the specifed WCCP service for participation in a Service Group.
When the no ip wccp global configuration command is issued, it instructs the router to terminate participation in the Service Group, deallocate space if none of the interfaces still have the service configured, and terminate the WCCP task if no other services are configured.
|
Note The ip wccp command has replaced the ip wccp enable, ip wccp redirect-list, and ip wccp group-list commands from the version 1 implementation of WCCP. |
The keywords following the service-name are optional and may be specified in any order, but only may be specified once. The following sections outline the specific usage of each of the optional forms of this command:
ip wccp {web-cache | service-number} group-address groupaddress
This option instructs the router to use the specified multicast IP address to coalesce the I See You responses for the Here I Am messages that it has received on this group-address. The response is sent to the group-address as well. The default is for no group-address to be configured, in which case all Here I Am messages are responded to with a unicast reply.
ip wccp {web-cache | service-number} redirect-list access-list
This option instructs the router to use an access list to control the traffic that is redirected to the Cache Engines of the Service Group specified by the service-name given. The access-list parameter specifies either a number from 1 to 99 to represent a standard or extended access list number, or a name to represent a named standard or extended access list. The access list itself specifies what traffic is permitted to be redirected. The default is for no redirect-list to be configured (all traffic is redirected).
|
Note WCCP requires that the following protocol/ports are not filtered by any access-lists: ---UDP (protocol type 17) port 2048. This port is used for control signaling. Blocking this type of traffic will prevent WCCP from establishing a connection between the router and cache engines. ---GRE encapsulated (protocol type 47) frames. Blocking this type of traffic will prevent the cache engines from ever seeing the packets intercepted. |
ip wccp {web-cache | service-number} group-list access-list
This option instructs the router to use an access list to control the Cache Engines allowed to participate in the specified Service Group. The access-list parameter specifies either a number from 1 to 99 to represent a standard access list number, or a name to represent a named standard access list. The access list itself specifies which Cache Engines are permitted to participate in the Service Group. The default is for no group-list to be configured, in which case all Cache Engines may participate in the Service Group.
|
Note The ip wccp {web-cache | service-number} group-list command syntax resembles the ip wccp {web-cache | service-number} group-listen command, but these are entirely different commands. Please note the the ip wccp group-listen command is an interface configuration command, used to configure an interface to listen for multicast notifications from a cache cluster. See the description of the ip wccp group-listen command in this chapter for further information. |
ip wccp {web-cache | service-number} password password
This option instructs the router to use MD5 authentication on the messages received from the Service Group specified by the service-name given. Use this form of the command to set the password on the router. You must also configure the same password separately on each cache engine. The password can be up to a maximum of seven characters. Messages that do not authenticate when authentication is enabled on the Router are discarded. The default is for no authentication password to be configured and authentication to be disabled.
Examples
The following example shows a router configured to run WCCP reverse proxy service, using the multicast address of 224.1.1.1:
Router# configure terminal Router(config)# ip wccp 99 group-address 224.1.1.1 Router(config)# interface ethernet 0 Router(config-if)# ip wccp web-cache group-list
The following example configures a router to redirect web-related packets without a destination of 192.168.196.51 to the Cache Engine:
Router# configure terminal Router(config)# access-list 100 deny ip any host 192.168.196.51 Router(config)# access-list 100 permit ip any any Router(config)# ip wccp redirect-list 100 Router(config)# interface Ethernet 0 Router(config-if)# ip web-cache redirect-list Router(config-if)# end Router# %SYS-5-CONFIG_I: Configured from console by console.
Related Commands
ip wccp version Specifies which version of WCCP you wish to use on your router.
Command
Description
The ip wccp command replaces the ip wccp enable command. See the description of the ip wccp command in this chapter for more information.
To configure an interface on a router to enable or disable the reception of IP multicast packets for the Web Cache Communication Protocol (WCCP) feature, use the ip wccp group-listen interface configuration command. To remove control of the reception of IP multicast packets for the WCCP feature, use the no form of this command.
ip wccp {web-cache | service-number} group-listen
Syntax Description
web-cache Directs the router to transmit packets to the web cache service. service-number The identification number of the cache engine service group being controlled by a router. The number can be from 0 to 99.
Defaults
This command is disabled by default.
Command Modes
Interface configuration
Command History
12.0(3)T This command was introduced.
Release
Modification
Usage Guidelines
On routers that are to be members of a Service Group when IP multicast is used, the following configuration is required:
Step 2 The interface(s) that the router wishes to receive the IP multicast address on needs to be configured with the ip wccp {web-cache | service-number} group-listen interface configuration command.
Examples
The following example shows that multicast packets have been enabled for a web cache with a multicast address of 224.1.1.100.
router#configure terminal router(config)#ip wccp web-cache group-address 244.1.1.100 router(config)#interface ethernet 0
router(config-if)#ip wccp web-cache group listen
Related Commands
ip wccp Directs a router to enable or disable the support for a WCCP cache engine service group. ip wccp redirect out Enables WCCP redirection on an interface.
Command
Description
To configure an interface to exclude packets received on an interface from being checked for redirection, use the ip wccp redirect exclude in global configuration command. To disable the ability of a router to exlude packets from redirection checks, use the no form of this command.
ip wccp redirect exclude inSyntax Description
This command has no arguments or keywords.
Defaults
Redirection exclusion is disabled.
Command Modes
Interface configuration
Command History
12.0(3)T This command was introduced.
Release
Modification
Usage Guidelines
This configuration command instructs the interface to exclude inbound packets from any redirection check that may occur at the outbound interface. Note that the command is global to all the services and should be applied to any inbound interface that you wish to exclude from redirection.
This command is intended to be used to accelerate the flow of packets from a Cache Engine to the internet as well as allow for the use of the WCCPv2 Packet Return feature.
Related Commands
ip wccp Directs a router to enable or disable the support for a cache engine service group. ip wccp redirect out Configures an interface to enable a the ability of a router to verify that appropriate packets are being redirected to a cache engine.
Command
Description
To enable packet redirection an outbound interface using WCCP, use the ip wccp redirect out interface configuration command. To disable the ability of a router to verify that appropriate packets are being redirected, use the no form of this command.
ip wccp {web-cache | service-number} redirect out
Syntax Description
web-cache Enables the web cache service. service-number The identification number of the cache engine service group being controlled by a router. The number can be from 0 to 99. If Cisco Cache Engines are used in the cache cluster, the reverse proxy service is indicated by a value of 99.
Defaults
Redirection checking on the interface is disabled.
Command Modes
Interface configuration
Command History
12.0(3)T This command was introduced.
Release
Modification
Examples
The following example shows that reverse proxy packets on Ethernet interface 0 are being checked for redirection and redirected to Cisco Cache Engines, beginning in global configuration mode:
router#configure terminal router(config)#ip wccp 99 router(config)#interface ethernet 0 router(config-if)#ip wccp 99 redirect out
Related Commands
ip wccp redirect exclude in Enables redirection exclusion on an interface.
Command
Description
This command is now documented as part of the ip wccp {web-cache | service-number} command. See the description of the ip wccp command in this chapter for more information.
The ip wccp redirect out command replaces the ip web-cache redirect command. See the description of the ip wccp redirect out command in this chapter for more information.
To specify which version of WCCP you wish to configure on your router, use the ip wccp version command.
ip wccp version {1 | 2}
Syntax Description
1 Web Cache Communication Protocol Version 1 (WCCPv1). 2 Web Cache Communication Protocol Version 2 (WCCPv2).
Defaults
WCCPv2
Command Modes
Global configuration
Command History
12.0(5)T This command was introduced.
Release
Modification
Examples
The following example shows the process of changing the WCCP version from the default of WCCPv2 to WCCPv1, starting in privileged EXEC mode:
router#show ip wccp % WCCP version 2 is not enabled router#configure terminal router(config)#ip wccp version 1 router(config)#end router#show ip wccp % WCCP version 1 is not enabled
To display global statistics related to the Web Cache Communication Protocol (WCCP) feature, use the show ip wccp EXEC command.
show ip wccp {web-cache | service-number} [view | detail]
Syntax Description
web-cache Directs the router to display statistics for the web cache service. service-number The identification number of the cache engine service group being controlled by a router. The number can be from 0 to 99. For cache engine clusters using Cisco Cache Engines, the reverse proxy service is indicated by a value of 99. view (Optional) Displays which other members of a particular service group have or have not been detected. detail (Optional) Displays information for the router and all cache engines in the currently configured cluster.
Defaults
No default behavior or values.
Command Modes
EXEC
Command History
11.1 CA This command was introduced for Cisco 7200 and 7500 platforms. 11.2 P Support for this command was added to a variety of Cisco platforms. 12.0(3)T The following keywords were added:
Release
Modification
Usage Guidelines
Use the clear ip wccp command to reset the counter for the "Packets Redirected" information.
Examples
This section contains examples and field descriptions for the three forms of this command:
The following example is sample output from the show ip wccp command:
show ip wccp Global WCCP Information: Service Name: web-cache: Number of Cache Engines: 1 Number of Routers: 1 Total Packets Redirected: 213 Redirect access-list: no_linux Total Packets Denied Redirect: 88 Total Packets Unassigned: -none- Group access-list: 0 Total Messages Denied to Group: 0 Total Authentication failures: 0 Service Name: 1 Number of Cache Engines: 1 Number of Routers: 2 Total Packets Redirected: 198 Redirect access-list: -none- Total Packets Denied Redirect: 0 Total Packets Unassigned: 0 Group access-list: 11 Total Messages Denied to Group: 0 Total Authentication failures: 0
Table 120 describes the fields shown in the example.
| Field | Description |
|---|---|
Service Name | Indicates which service is detailed. |
Number of Cache Engines | Number of Cisco cache engines using the router as their home router. |
Number of Routers | The number of routers in the service group. |
Total Packets Redirected | Total number of packets redirected by the router. |
Redirect access-list | The name or number of the access list that determines which packets will be redirected. |
Total Packets Denied Redirect | Total number of packets that were not redirected because they did not match the access list. |
Total Packets Unassigned | Number of packets that were not redirected because they were not assigned to any cache engine. Packets may not be assigned during initial discovery of cache engines or when a cache is dropped from a cluster. |
Group access-list | Indicates which cache engine is allowed to connect to the router. |
Total Messages Denied to Group | Indicates the number of messages disallowed by the router because they did not meet all the requirements of the service group. |
Total Authentication failures | The number of instances where a password did not match |
The following sample shows output from the show ip wccp service 1 view command:
show ip wccp service 1 view WCCP Router Informed of: 192.168.88.10 192.168.88.20 WCCP Cache Engines Visible 192.168.88.11 192.168.88.12 WCCP Cache Engines Not Visible: -none-
If any cache engine is displayed under the WCCP Cache Engines Not Visible field, the router needs to be reconfigured to map the cache engine that is not visible to it. Table 121 describes the fields shown in the example.
| Field | Description |
|---|---|
WCCP Routers Informed of | A list of routers detected by the current router. |
WCCP Cache Engines Visible | A list of cache engines that are visible to the router and other cache engines in the service group. |
WCCP Cache Engines Not Visible | A list cache engines in the service group that are not visible to the router and other cache engines in the service group. |
The following example displays cache engine and WCCP router statistics for a particular service group:
show ip wccp web-cache detail WCCP Router information: IP Address 192.168.88.10 Protocol Version: 2.0 WCCP Cache-Engine Information IP Address: 192.168.88.11 Protocol Version: 2.0 State: Usable Initial Hash Info: AAAAAAAAAAAAAAAAAAAAAAAAAA AAAAAAAAAAAAAAAAAAAAAAAAAA Assigned Hash Info: FFFFFFFFFFFFFFFFFFFFFFFFFF FFFFFFFFFFFFFFFFFFFFFFFFFF Hash Allotment: 256 (100.00%) Packets Redirected: 21345 Connect Time: 00:13:46
Table 122 describes the fields shown in the example.
| Field | Description |
|---|---|
WCCP Router information | The header for the area that contains fields for the IP address and version of WCCP associated with the router connected to the cache engine in the service group. |
IP Address | The IP address of the router connected to the cache engine in the service group. |
Protocol Version | The version of WCCP being used by the router in the service group. |
WCCP Cache-Engine information | Contains fields for information on cache engines. |
IP Address | The IP address of the cache engine in the service group. |
Protocol Version | The version of WCCP being used by the cache engine in the service group. |
State | Indicates whether the cache engine is operating properly and can be contacted by a router and other cache engines in the service group. |
Initial Hash Info | The initial state of the hash bucket assignment. |
Assigned Hash Info | The current state of the hash bucket assignment. |
Hash Allotment | The percent of buckets assigned to the current cache engine. Both a value and a percent figure are displayed. |
Packets Redirected | The number of packets that have been redirected to the cache engine. |
Connect Time | The amount of time it took for the cache engine to connect to the router. |
Related Commands
Clears the counter for packets redirected using WCCP. Enables WCCP on a router and specifies the type of services to be used. show ip interface Lists a summary of the IP information and status of an interface.
Command
Description
The show ip wccp web-cache detail command replaces the show ip wccp web-caches command. See the description of the show ip wccp command for more informations.
Posted: Thu Mar 30 15:39:05 PST 2000
Copyright 1989 - 2000©Cisco Systems Inc.