Cisco Wide Area Application Engine 612 Manual de usuario descargar pdf (Pagina 22)

96 Chapter 4: Network Integration and Interception

conﬁgured with the IP address of each WAE in the service group. Each router listens

passively for WCCPv2 messages from the WAEs in the service group and responds only as

a result of receiving those messages.

The WAE in the service group with the lowest IP address is elected as the “lead” WAE. The

lead WAE is responsible for communicating the list, or view, of the routers in the service

group to the service group routers. The lead WAE is also responsible for informing the

routers how trafﬁc should be distributed across WAEs in the service group. Upon receiving

the view of the routers in the service group from the lead WAE, each router responds

individually with a Router View. The Router View contains a list of each WAE that the

router is currently communicating with. What is implied is that the routers in the service

group do not communicate directly with each other; they learn about each other through

the Router View advertised by the WAE. Likewise, the WAEs in a service group do not

communicate directly with each; they learn about each other from the WAE View advertised

by the routers.

Redirect Lists

For deployments where you may want to limit redirection to speciﬁc types of trafﬁc, you

can use a WCCPv2 redirect list. A WCCPv2 redirect list is a standard or extended IOS

access list that is associated with a WCCPv2 service. Trafﬁc passing through an interface

on the router with WCCPv2 redirection conﬁgured must match not only the protocol/port

speciﬁed as part of the service group, but also a permit entry in the redirect list. Packets that

match the service group protocol/port criteria but do not match a permit entry in the redirect

list are forwarded normally. Example 4-10 demonstrates the use of a WCCPv2 redirect list.

In this example, TCP trafﬁc sourced from or destined to subnet 10.10.10.0/24 will be

intercepted and redirected by WCCPv2. Another option is to use a redirect list to specify a

subset of TCP ports for redirection. Example 4-11 shows how this could be done.

Example 4-10 WCCP Redirection Using a Redirect List

access-list 100 permit ip 10.10.10.0 0.0.0.255 any

access-list 100 permit ip any 10.0.0.0 0.0.0.255

access-list 100 deny ip any any

ip wccp 61 redirect-list 100

ip wccp 62 redirect-list 100

1 2 ... 17 18 19 20 21 22 23 24 25 26 27 ... 40 41

Sin comentarios

Cisco Wide Area Application Engine 612 Manual de usuario Pagina 22