Hi Henrik, thanks for your continued help. I changed the GRE tunnel
end point and the wccp2_router statement to match the router id of
150.125.127.142 but now squid and the router don't negotiate. As you
can see here below, there is a mismatch in the I_See_You packet IDs.
May 10 13:12:39.011 GMT: WCCP-EVNT:S00: Here_I_Am packet from
150.125.125.185 w/bad rcv_id 00000000
May 10 13:12:39.011 GMT: WCCP-PKT:S00: Sending I_See_You packet to
150.125.125.185 w/ rcv_id 00000002
ULAN-ISSR#sh ip wccp web
ULAN-ISSR#sh ip wccp web-cache d
WCCP Cache-Engine information:
Web Cache ID: 150.125.125.185
Protocol Version: 2.0
State: NOT Usable
Redirection: L2
Packet Return: L2
Packets Redirected: 0
Connect Time: 00:00:16
Assignment: MASK
ULAN-ISSR#
Here's my squid.conf:
wccp2_router 150.125.127.142
wccp2_version 4
wccp2_rebuild_wait on
wccp2_forwarding_method 2
wccp2_return_method 2
wccp2_service standard 0
I have also tried forwarding/return_method of 1 with the same results.
Any thoughts?
Thanks again,
-- Chad
On 5/10/07, Henrik Nordstrom <henrik@xxxxxxxxxxxxxxxxxxx> wrote:
ons 2007-05-09 klockan 15:27 -0400 skrev Chad Harrelson:
> Wow. Thanks Henrik! This is the command that got it going:
> echo 0 >/proc/sys/net/ipv4/conf/gre1/rp_filter
>
> I thought for sure that I had run across documentation that told me to
> enable rp_filter. Oh, it's working now. Now on the WCCPv2....
>
> When I try enabling version 2 I get the following error while sniffing
> my external interface:
>
> 15:17:12.108896 IP 150.125.125.185 > 150.125.127.142: ICMP
> 150.125.125.185 protocol 47 port 34878 unreachable, length 84
Sounds like the local/remote endpoint of your GRE tunnel does not match
how the router encapsulates the intercepted traffic.
> (150.125.127.142 is the automatic router ID that is displayed under: sh ip wccp)
And is what you should use as router IP for WCCP (and GRE),.
Regards
Henrik
