Date: Fri, 27 Oct 2006 13:20:20 +0400 From: "Andrew Pantyukhin" <infofarmer@FreeBSD.org> To: "Alan Garfield" <alan@fromorbit.com> Cc: FreeBSD Questions <questions@freebsd.org> Subject: Re: Squid2.6/WCCP2/GRE Message-ID: <cb5206420610270220r65f04ae0q12912c297c0af1ec@mail.gmail.com> In-Reply-To: <1161932589.3003.3.camel@localhost.localdomain> References: <1161932589.3003.3.camel@localhost.localdomain>
next in thread | previous in thread | raw e-mail | index | archive | help
On 10/27/06, Alan Garfield <alan@fromorbit.com> wrote:
> Hey guys,
>
> I'm hoping someone will have a configuration of the following they can
> share as I'm pulling my hair out here trying to get this to work.
Sure :-)
* squid runs at X.X.5.76
* wccp2 runs at C2800 with multiple addresses, X.X.5.66
and X.X.78.241 among them
* X.X.5.66 is in the same subnet with squid, so we send
wccp2 notifications from squid there
* X.X.78.241 gets chosen by IOS as Router Identifier, so
we have to configure it as the gre tunnel remote endpoint
* 172.X.X.X are deliberately non-existent, they are just
place holders
===========================
squid.conf:
wccp2_router X.X.5.66
wccp2_address X.X.5.76
===========================
rc.firewall:
ipfw add fwd 127.0.0.1,3128 tcp from any to not me dst-port \
80-82,8080-8083,3128,8007,8022 not uid squid
===========================
rc.conf:
ifconfig_eth0="inet X.X.5.76/27"
ifconfig_gre0="inet 172.10.20.30/32 172.10.20.31 link0 \
link2 tunnel X.X.5.76 X.X.78.241 up"
===========================
br2#sh run | incl wccp
ip wccp web-cache redirect-list guys_to_cache
ip wccp web-cache redirect out
===========================
br2#sh ip wccp
Global WCCP information:
Router information:
Router Identifier: X.X.78.241
Protocol Version: 2.0
===========================
Service Identifier: web-cache
Number of Cache Engines: 1
Number of routers: 1
Total Packets Redirected: 1208456314
Process: 559
Fast: 0
CEF: 1208455755
Redirect access-list: guys_to_cache
Total Packets Denied Redirect: 65691876
Total Packets Unassigned: 816778
Group access-list: -none-
Total Messages Denied to Group: 0
Total Authentication failures: 0
Total Bypassed Packets Received: 0
===========================
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?cb5206420610270220r65f04ae0q12912c297c0af1ec>