Out-of-Path with WCCP : Overview

Overview
In this scenario, the Silver Peak appliances are not connected in the direct path of the network traffic. As a result, a network traffic redirection technique is used to forward traffic to the appliance.
Web Cache Communications Protocol (WCCP) supports the redirection of any TCP or UDP connections to appliances participating in WCCP Service Groups. The appliance intercepts only those packets that have been redirected to it. The appliance accelerates traffic flows that the Route Policy directs to a tunnel; all other traffic passes through the appliance unmodified.
In the unlikely event that the appliance fails, WCCP on the WAN router removes the appliance from the WCCP Service Group and resumes forwarding traffic normally, according to its routing tables.
At Site A, both the router and the participating appliance require a separate WCCP service group for each protocol used in the tunnel. So, if a tunnel uses both TCP and UDP, you must create a separate WCCP Service Group for each protocol (TCP and UDP) used in the A-to-B tunnel.
Network Diagram
Out-of-Path Deployment: Silver Peak Appliance peered with an L3 router using WCCP
The Silver Peak appliances optimize traffic to/from 10.110.31.0/24 and 10.110.11.0/24.
Note You don’t need a spare router port for this configuration. The Silver Peak appliance can be connected to an existing or newly configured subinterface on the router via a VLAN trunk such that a spare port on the LAN switch can be used for the physical connection.
Summary
Appliance wan0 interface connects to network
Do not connect lan0 interface
Fail-Safe Behavior
Fail-safe behavior should always be tested before production deployment by ensuring that traffic continues to flow in each of the following cases:
1
2
3
Summary of Configuration Tasks
Physical appliance: Connect the Site A appliance to the Site A router, and insert the Site B appliance between its WAN edge router and the Ethernet switch. Verify connectivity, connect power, and verify LEDs.
Virtual appliance: Configure the hypervisor, with the required interfaces.
Configure an Access Control List (ACL) that redirects all traffic from the Site A subnet to the Site B subnet
Configure Site A’s appliance for out-of-path deployment1
Access the Initial Config Wizard to assign Appliance IP and Management IP addresses for Site A’s appliance.
Configure the WCCP Service Groups on Site A’s appliance
Run the Initial Config Wizard to set up Site B’s Silver Peak appliance in Bridge mode.
Ensure that the cable connections are sound and you haven’t misconfigured any IP addresses.
Create a tunnel and Route Policy on Site A’s appliance

1
IMPORTANT: The WAN Next Hop IP Address must be the IP address of the WAN edge router. This may or may not be the same as the Management Interface Next Hop IP Address for hosts on the LAN side of your network. If in doubt, check with your network administrator.

Collecting the Necessary Information
The example makes the following assumptions:
n
n
n
Out-of-Path Deployment: Silver Peak Appliance peered with an L3 router using WCCP
mgmt0 IP Address / Mask1
LAN Next-hop IP Address (optional) 2

1
In this example, all mgmt0 IP addresses are in the same subnet. In your actual network, it’s likely that mgmt0 IP addresses are in different subnets.

2
LAN next-hop IP is only required when there are subnets for which the Silver Peak appliance does not have a configured IP address.


Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.