On 3/10/2012 1:17 a.m., Luderitz Bob wrote:
We just cutover to our own network which has 3 sites using vpls connections and 1 ASA 5510 box used for both Firewall and Router at our HQ site. For our Internet we want to use a message labs external proxy and have introduced a Squid server at our HQ to forward all Internet traffic from the 3 sites out to Message Labs. We are using Cisco routers and using wccp protocol on the 3 routers. I am running 6.3 of CentOS Linux and 3.1 version of Squid. In order to use wccp there needs to be a GRE tunnel setup on my Squid box. In this version of Squid, there is a built in GRE tunnel gre0 and is working fine at our HQ site. I have tried to use the built in gre tunnel for the other sites and created separate tunnels but neither has worked. I get the traffic from the router to the the Squid box and see it via tcpdump commands but it does not get passed from the gre to the Squid to go out to the Message Labs proxy.
Not being passed from the GRE to Squid? what NAT or TPROXY rules are you using?
Wccpv2 is supposed to support using multiple routers but cannot seem to find the right combination, has anyone gotten this to work?
Simply listing the routers IPs or FQDN shoudl be enough to get Squid advertising itself to all of them. Beyond that sorry, nobody has mentioned it here before to educate me :-)
Amos
