Topology
目的：上海（田林）数据中心与苏州分公司之间加速通道无法建立。上海田林使用wccp旁路部署，HA做高可用性。苏州使用串接部署。
issue: 苏州设备上架后，加速通道无法建立。
排错思路：
CPIC WCCP Configuration Steps
Step 1. Configure the SteelHead a an in-path device and enable in-path support.
#--- Configure the basic IP addressing of the SteelHead.
#--- Primary address is used for management as well as for RiOS data store sync.
#--- The primary interface is not shown in the diagram
#--- as this can be attached to any accessible network.
interface primary ip address 10.193.23.11 /24
ip default-gateway x.x.x.x
interface inpath0_0 ip address x.x.x.x /xx
ip in-path-gateway inpath0_0 x.x.x.x
interface inpath0_1 ip address x.x.x.x /xx
ip in-path-gateway inpath0_1 x.x.x.x
in-path enable
#-- Enable virtual In-path support for WCCP
in-path oop enable
#--- Enables Connection Forwarding to neighbor RB2-Address
#--- allow-failure allows the SteelHead to continue optimizing
#--- traffic even if the neighbor is down
steelhead communication enable
steelhead name SH2 main-ip Peer-RB-WAN0_0-ADDRESS
steelhead communication allow-failure
steelhead communication advertiseresync
#--- Enable WCCP and create Service Groups 61 & 62; assign
#--- router IP addresses for each service group.
#--- If the SteelHead is Layer-2 adjacent use the interface IP of the router
wccp enable
wccp interface inpath0_0 service-group 61 routers INTERFACE-IP-OF-ROUTER1 INTERFACE-IP-OF-ROUTER2
wccp interface inpath0_0 service-group 62 routers INTERFACE-IP-OF-ROUTER1 INTERFACE-IP-OF-ROUTER2
wccp interface inpath0_1 service-group 61 routers INTERFACE-IP-OF-ROUTER1 INTERFACE-IP-OF-ROUTER2
wccp interface inpath0_1 service-group 62 routers INTERFACE-IP-OF-ROUTER1 INTERFACE-IP-OF-ROUTER2
#--- The above omits configurations related to selecting redirection or assignment methods.
#--- It is recommended to read, understand, and select the methods most appropriate for the
#--- environment. For example, the majority of L3 switches prefer L2 redirection and mask
#--- assignment. When using mask assignment, follow the best practices to ensure consistent
#--- assignment in either direction, typically by using source IP mask in one service group,
#--- and destination IP mask in the other.
#--- Enable RiOS data store synchronization and set this SteelHead as the primary
datastore sync master
datastore sync peer-ip 10.10.1.13
datastore sync enable
#--- Save && Restart
write memory
restart
=====================================================================================
Step 2. Enable WCCP on the router by creating a service group on the router.
!--- Create the access control lists that determine what traffic to redirect
!--- to the SteelHeads. Creating two separate ACLs is optional
!--- Deny all traffic sourced from or destined to the SteelHead
!--- in-path IP addresses and allow traffic from the client subnets to
!--- the server subnets
ip access-list extended WCCP_ACL_61
deny tcp <WAN0_0-Subnet> <Reserve-Subnet-Mask> any
deny tcp any <WAN0_0-Subnet> <Reserve-Subnet-Mask>
permit tcp <LAN-subnets> <WAN-subnets>
!--- Deny all traffic sourced from or destined to the SteelHead
!--- in-path IP addresses and allow traffic from the server subnets to
!--- the client subnets
ip access-list extended WCCP_ACL_62
deny tcp <WAN0_0-Subnet> <Reserve-Subnet-Mask> any
deny tcp any <WAN0_0-Subnet> <Reserve-Subnet-Mask>
permit tcp <LAN-subnets> <WAN-subnets>
=====================================================================================
Step 3. Set the router to use WCCP to redirect traffic to the WCCP SteelHead.
!--- Enable WCCPv2 and service groups 61 & 62; define the redirect
!--- lists for each service group
ip wccp version 2
ip wccp 61 redirect-list WCCP_ACL_61
ip wccp 62 redirect-list WCCP_ACL_62
=====================================================================================
Step 4. Attach the desired SteelHead in-path interface WAN interface to the network. The WAN interface must be able to communicate with the switch or router on which WCCP is configured and where WCCP redirection takes place.
!--- Add WCCP service group 62 to the server-facing interfaces
interface f0/0
ip wccp 62 redirect in
!--- Add WCCP service group 61 to the client-facing interfaces
interface s0/0
ip wccp 61 redirect in
=====================================================================================
Step 5. Add the service group on the WCCP SteelHead interface.
!--- As a best practice use “redirect exclude in” on the interfaces or VLANs
!--- that are connected to the SteelHeads. If you are using
!--- redirect out on any interface this command is REQUIRED.
interface f0/1
ip wccp redirect exclude in
end
write memory
=====================================================================================
问题描述，客户7069路由器使用l2转换方法， 只有直连路由器的WCCP连接才能建立，所以必须删除多余的disconnected wccp邻居。