Search squid archive

Re: Squid Transparent WEB Captatif : Cisco ASA WCCP

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
 


15.07.2016 21:52, Maxime Lambert пишет:
> Hi everyone !!
>
> My issue is that i didn't received any data in access.log. I work on Ubuntu Server 16.04 with Squid 5.3.20 compiled with :
> ./configure --prefix=/usr --localstatedir=/var --libexecdir=${prefix}/lib/squid --datadir=${prefix}/share/squid --sysconfdir=/etc/squid --with-default-user=proxy --with-logdir=/var/log/squid --with-pidfile=/var/run/squid.pid --with-openssl --enable-icmp *--enable-linux-netfilter --enable-wccpv2* --enable-gnuregex --enable-xmalloc-statistics --enable-async-io --enable-delay-pools --enable-useragent-log --enable-kill-parent-hack --enable-htpc --enable-forw-via-db --enable-cache-digests --enable-dl-malloc --enable-time-hack --enable-ssl --enable-ssl-crtd
>
> This is my conf :
>
>                  Internet
>                        |
>                        |                           10.12.3.200
>                Cisco-ASA  -----------------------  Squid Server

http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2
>                        |   10.12.1.1
>                        |
>               /------------------------/
>                                    |
>                                    |   10.12.2.18
>                               Client
>
> If my Squid server is UP my client can't go on web, else if my Squid server is DOWN he can surf on it.
>
> I've allow localnet 10.12.1.0/24.
> And i've tunnel GRE, and my Cisco saw it.

Why you are using GRE as assignment method when your clients and proxy in the same L2 segment? Reasonable to use L2 method, which is hardware accelerated.
>
> squid.conf :  
>         ...
>         http_port 80 intercept                                      <== Should I write intercept or transparent ?

If your using Squid 3.5.20, this must be intercept, as documented in manuals - did you read it?
>         http_port 3128      
>         wccp_version 2                                               <== Should I write 2 or 4 ?

http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2
http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2
>         wccp2_router 10.12.1.1
>         wccp2_forwarding_method 1                          <== Should I write gre or 1 ?

http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2
http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2
>         wccp2_return_method 1                                  <== Should I write  gre or 1 ?
http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2
http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2
>         wccp2_service standard 0 password=XXXX
http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2
http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2
>
> I've also : ip tunnel add wccp0 mode gre remote 10.12.1.1 local 10.12.12.200 dev ens32
>
> I received packet WCCP "Are you here - I see you..."
>
> But i can't access on web with my client if Squid server is UP and my access.log file stay empty... Could you help me ?

http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2
http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2
>
>
> Best regards,
>
> Maxime Lambert
>
>
>
>
>
> _______________________________________________
> squid-users mailing list
> squid-users@xxxxxxxxxxxxxxxxxxxxx
> http://lists.squid-cache.org/listinfo/squid-users


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
 
iQEcBAEBCAAGBQJXiSLyAAoJENNXIZxhPexGEFcIAMSKBWzRlc4mUQ6OZ2LHchLC
CC2b0q28Kg3U4dnOpM+wrHJaxAt363CTn2LTa7kHGUoKNmOGZqTZgH9KvcxYn2JB
8WYIg6oIdnsdHvWXkcfI99U6dvOCUOylc8u5cNtc6w0k6/p73IBHR9ZCHTTGfvhx
x6UxSrIDHUy448qsQkQwIy6BiO0S+Jt1bmAZ1j8toMB2ikPzNBW24utwWOVutEb3
XIvuebtyNAcYVu6+twCy3/DQKhjHzaaHCYZfPiXLsPtdnXbQD+SOVFNtjuQ0NWjA
9ebnv8FbZpuJL1o3H0F3xCuIJ8PePhbZAARjtP8fDfrIQMjFk01Ve9NvzhBZOcs=
=3Q2B
-----END PGP SIGNATURE-----

Attachment: 0x613DEC46.asc
Description: application/pgp-keys

_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users

[Index of Archives]     [Linux Audio Users]     [Samba]     [Big List of Linux Books]     [Linux USB]     [Yosemite News]

  Powered by Linux