Search squid archive

Re: help for my intercept proxy setup

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 
Show WCCP section of yout squid.conf please.


27.04.16 3:05, maileh пишет:
> Hi
> Here is my router wccp config
> In global config i enable ip wccp
> #ip wccp web-cache redirect-list WCCP_HTTP
> #ip wccp 70 redirect-list WCCP_HTTPS
> Interface facing my Clients and also Squid is in the same subnet
>
> int g0/0.904
> ip wccp web-cache redirect out
> ip wccp 70 redirect out.
>
> Verification
>
> #sh ip wccp sum
> WCCP version 2 enabled, 2 services
>
> Service     Clients   Routers   Assign      Redirect   Bypass
> -------     -------   -------   ------      --------   ------
> Default routing table (Router Id: x.x.x.x):
> web-cache   1         1         HASH        GRE        GRE
> 70                  1         1         HASH        GRE        GRE
>
> #sh tunnel groups wccp
>  WCCP : service group 0 in "Default", ver v2, assgnmnt: hash-table
>    intf: Tunnel2, locally sourced
>  WCCP : service group 326 in "Default", ver v2, assgnmnt: hash-table
>    intf: Tunnel0, locally sourced
>
> #sh adjacency tunnel 0 detail
> Protocol Interface                 Address
> IP       Tunnel0                   10.240.0.30(3)
>                                    connectionid 1
>                                    0 packets, 0 bytes
>                                    epoch 0
>                                    sourced in sev-epoch 31
>                                    Encap length 28
>                                    4500000000000000FF2FC732CA861F08
>                                    0AF0001E0000883E01460000
>                                    Tun endpt
>                                    Next chain element:
>                                     IP adj out of GigabitEthernet0/0.904,
> addr 10.240.0.30
> #sh adjacency tunnel 2 detail
>     Protocol Interface                 Address
> IP       Tunnel2                   10.240.0.30(3)
>                                    connectionid 1
>                                    0 packets, 0 bytes
>                                    epoch 0
>                                    sourced in sev-epoch 32
>                                    Encap length 28
>                                    4500000000000000FF2FC732CA861F08
>                                    0AF0001E0000883E00000000
>                                    Tun endpt
>                                    Next chain element:
>                                     IP adj out of GigabitEthernet0/0.904,
> addr 10.240.0.30
> #sh ip wccp web-cache detail
> WCCP Client information:
>         WCCP Client ID:          10.240.0.30
>         Protocol Version:        2.0
>         State:                   Usable
>         Redirection:             GRE
>         Packet Return:           GRE
>         Assignment:              HASH
>         Initial Hash Info:       00000000000000000000000000000000
>                                  00000000000000000000000000000000
>         Assigned Hash Info:      FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
>                                  FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF
>         Hash Allotment:          256 (100.00%)
>         Packets s/w Redirected:  0
>         Connect Time:            00:08:42
>         GRE Bypassed Packets
>           Process:               0
>           CEF:                   0
>           Errors:                0
> If you can see all seems to be established between the router and
squid box
> but no PACKET has been redirected.
> For my IOS
> ROM: System Bootstrap, Version 15.0(1r)M15, RELEASE SOFTWARE (fc1)
>
> It's been over two weeks now and i seems to looking everywhere but no
luck.
> Also here is my iptables rules for you info whch run on ubuntu 14.04 with
> squid
>
> # squid -v
> Squid Cache: Version 3.5.16
> Service Name: squid
> Intercept/WCCPv2/LibreSSL/CRTD/(A)UFS/DISKD/ROCK/eCAP/64/GCC Production
> configure options:  '--prefix=/usr/local' '--enable-translation'
> '--enable-external-acl-helpers=none'
'--enable-storeio=ufs,aufs,diskd,rock'
> '--enable-removal-policies=lru,heap' '--enable-wccp2'
> '--enable-follow-x-forwarded-for' '--enable-cache-digests'
> '--enable-auth-negotiate=none' '--disable-auth-digest'
'--disable-auth-ntlm'
> '--disable-url-rewrite-helpers' '--enable-storeid-rewrite-helpers=file'
> '--enable-log-daemon-helpers=file' '--with-openssl=/usr/local'
> '--enable-ssl' '--enable-ssl-crtd' '--enable-zph-qos' '--enable-snmp'
> '--enable-inline' '--with-dl'
'--with-build-environment=POSIX_V6_LP64_OFF64'
> 'CFLAGS=-O3 -m64 -pipe' 'CXXFLAGS=-O3 -m64 -pipe'
> 'LIBOPENSSL_CFLAGS=-I/usr/local/include'
> 'PKG_CONFIG_PATH=/usr/local/lib/pkgconfig'
'--disable-strict-error-checking'
>
'--enable-build-info=Intercept/WCCPv2/LibreSSL/CRTD/(A)UFS/DISKD/ROCK/eCAP/64/GCC
> Production'
> IPtables Rules for redirection to squid ports
> -A PREROUTING -i wccp0 -p tcp -m tcp --dport 80 -j REDIRECT --to-ports
3127
> -A PREROUTING -i wccp0 -p tcp -m tcp --dport 443 -j REDIRECT
--to-ports 3129
> -A POSTROUTING -j MASQUERADE
>
>
> Appreciate you kind asistance ....
> hanks in advance
> Maile
>
>
>
> --
> View this message in context:
http://squid-web-proxy-cache.1019090.n4.nabble.com/help-for-my-intercept-proxy-setup-tp4677279.html
> Sent from the Squid - Users mailing list archive at Nabble.com.
> _______________________________________________
> squid-users mailing list
> squid-users@xxxxxxxxxxxxxxxxxxxxx
> http://lists.squid-cache.org/listinfo/squid-users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXH+RBAAoJENNXIZxhPexG174H/3r5IBojH3EKdMCMknRQjwD3
RVrM29M9K3VQX4U2UXj8RVYoBWju+X4NQDtDn/k21Zd3albE/L9bFP0fmPEMb1z1
r0hPUoskPBFqXXYUp6NZ4Yi8TNbbvgvbJ1tGWeMdPWaoE/qvv1tqAKBHeGCCcM2A
P67chV8418cUsTqRyOYCKF9ad4fj1FobWRr9/o826PQ+azCVN0xDD3BjswB8DAzE
i+ZCHCIAEOyCwis84nFb2EqvKGnlqN64WrOkJ6IkFHKxuWg8PTqWnj+NZmMuzhkf
VsMvKrVxd/w9Eh1T6xW0CGfxG/B9V8bCXId0ez0NPyLr/H7kiFqYPNlWZyzCBIw=
=G5AM
-----END PGP SIGNATURE-----

Attachment: 0x613DEC46.asc
Description: application/pgp-keys

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux