Out-of-Path with WCCP Redundant (Active/Active) Appliances : Configuring WCCP on A1
Configuring WCCP on A1
As a best practice, and for easier ACL management, we’ll configure two Service Groups (TCP, UDP) for outbound traffic redirection and two Service Groups (TCP, UDP) for inbound traffic redirection.
Configuring WCCP Service Groups for Outbound Traffic Redirection
Each Silver Peak appliance has a default weight of 100, which we’ll leave unchanged.
To configure WCCP on the first appliance, you’ll need to use the Appliance Manager’s Configuration - WCCP page to do the following:
•
Create a WCCP Service Group for TCP
•
Create a WCCP Service Group for UDP
•
Verify that the state of each WCCP Service Group changes from INIT to ACTIVE.
Note ACTIVE - Designated will be the state for one Silver Peak appliance — this is the device that owns the communication for WCCP with the routers.
w
To enable WCCP Service
1
From the menus, select Configuration > WCCP. The Configuration - WCCP page appears, with the Service Group tab displayed.
2
At the top of the page, select Enable WCCP.
w
To create a WCCP Service Group for the TCP protocol
To optimize the two most commonly used protocols — TCP and UDP — you’ll create two WCCP service groups in the Silver Peak appliance.
If you intend to optimize traffic other than TCP and UDP, create a new service group for that protocol, and select the protocol name from the Protocol drop-down menu when creating the service group.
1
Click Add Service Group. The new WCCP Service group appears with the default settings.
2
In the Service Group ID field, enter the WCCP Service Group number you entered on the router as a placeholder for the TCP protocol. On the router, we entered 53.
3
In the Admin field, accept the default of up.
4
In the Protocol field, leave tcp selected.
5
To access the Service Groups Advanced Settings page, click Advance Settings.
a
In the Forwarding Method field, select either. Either allows the appliance and the router to negotiate the best method for assignment. That is, GRE (Generic Routing Encapsulation) or L2.
b
In the Weight field, keep the max default value of 100.
c
In the Assignment Method field, leave the default of either. Either allows the appliance and the router to negotiate the best method for assignment. That is, hash or mask.
d
Leave Force L2 Return deselected.
e
In the Password field, optionally enter a password.
f
In the Assignment Detail field, select lan-ingress.
•
If you’re not configuring the tunnel traffic for auto-optimization, then accept the default of lan-ingress. This is the assumption made for this example, since all redirection will be from the LAN to the WAN.
•
wan-ingress assignment detail is only required when redirection is needed from the WAN to the LAN, when using TCP/IP auto-optimization.
•
custom is used to provide granular control of flow distribution. Contact Silver Peak Technical Support for assistance.
g
To save the settings and close the dialog box, click OK.
6
From the Interface field, select wan0.
7
For Compatibility Mode, select the option appropriate for your router. If a WCCP group is peering with a router running Nexus OS, then the appliance must adjust its WCCP protocol packets to be compatible. By default, the appliance is IOS-compatible.
8
In the Router IP Address field, enter the IP address of the WCCP router, 10.110.31.1.
9
Click Apply. A new WCCP Service Group for TCP appears.
w
To create a WCCP Service Group for the UDP protocol
1
On the Configuration - WCCP page, click Add Service Group. A new WCCP Service Group appears with the default settings.
2
In the Service Group ID field, enter the WCCP Service Group number you entered on the router as a placeholder for the UDP protocol. On the router, we entered 54.
3
In the Admin field, accept the default of up.
4
In the Protocol field, leave udp selected.
5
To access the Service Groups Advanced Settings page, click Advance Settings.
a
In the Forwarding Method field, select either. Either allows the appliance and the router to negotiate the best method for assignment. That is, GRE (Generic Routing Encapsulation) or L2.
b
In the Weight field, keep the max default value of 100.
c
In the Assignment Method field, leave the default of either. Either allows the appliance and the router to negotiate the best method for assignment. That is, hash or mask.
d
Leave Force L2 Return deselected.
e
In the Password field, optionally enter a password.
f
In the Assignment Detail field, select lan-ingress.
•
If you’re not configuring the tunnel traffic for auto-optimization, then accept the default of lan-ingress. This is the assumption made for this example, since all redirection will be from the LAN to the WAN.
•
wan-ingress assignment detail is only required when redirection is needed from the WAN to the LAN, when using TCP/IP auto-optimization.
•
custom is used to provide granular control of flow distribution. Contact Silver Peak Technical Support for assistance.
g
To save the settings and close the dialog box, click OK.
6
From the Interface field, select wan0.
a
For Compatibility Mode, select the option appropriate for your router. If a WCCP group is peering with a router running Nexus OS, then the appliance must adjust its WCCP protocol packets to be compatible. By default, the appliance is IOS-compatible.
b
In the Router IP Address field, enter the IP address of the WCCP router, 10.110.31.1.
7
Click Apply.
•
The data entry area disappears, and the table displays the new WCCP Service Group for UDP.
•
State changes from INIT to ACTIVE, DESIGNATED.
•
This means that the WCCP protocol is working properly with the router, and that this appliance is Primary and Active.
State
Definition
INIT
WCCP Service Group initialization
ACTIVE
Active WCCP Service group
BACKUP
Backup WCCP Service group
- Designated
[Used as a modifier for ACTIVE or BACKUP].
Appliance with the lowest IP address in a WCCP group that notifies Routers how to redirect traffic.
8
Click Save Changes.
Configuring WCCP Service Groups for Inbound Traffic Redirection
Each Silver Peak appliance has a default weight of 100, which we’ll leave unchanged.
To configure WCCP on the first appliance, you’ll need to use the Appliance Manager’s Configuration - WCCP page to do the following:
•
Create a WCCP Service Group for TCP
•
Create a WCCP Service Group for UDP
•
Verify that the state of each WCCP Service Group changes from INIT to ACTIVE.
Note ACTIVE - Designated will be the state for one Silver Peak appliance — this is the device that owns the communication for WCCP with the routers.
w
To enable WCCP Service
1
From the menus, select Configuration > WCCP. The Configuration - WCCP page appears, with the Service Group tab displayed.
2
At the top of the page, select Enable WCCP.
w
To create a WCCP Service Group for the TCP protocol
To optimize the two most commonly used protocols — TCP and UDP — you’ll create two WCCP service groups in the Silver Peak appliance.
If you intend to optimize traffic other than TCP and UDP, create a new service group for that protocol, and select the protocol name from the Protocol drop-down menu when creating the service group.
1
Click Add Service Group. The new WCCP Service group appears with the default settings.
2
In the Service Group ID field, enter the WCCP Service Group number you entered on the router as a placeholder for the TCP protocol. On the router, we entered 55.
3
In the Admin field, accept the default of up.
4
In the Protocol field, leave tcp selected.
5
To access the Service Groups Advanced Settings page, click Advance Settings.
a
In the Forwarding Method field, select either. Either allows the appliance and the router to negotiate the best method for assignment. That is, GRE (Generic Routing Encapsulation) or L2.
b
In the Weight field, keep the max default value of 100.
c
In the Assignment Method field, leave the default of either. Either allows the appliance and the router to negotiate the best method for assignment. That is, hash or mask.
d
Leave Force L2 Return deselected.
e
In the Password field, optionally enter a password.
f
In the Assignment Detail field, select wan-ingress.
wan-ingress assignment detail is required when redirection is needed from the WAN to the LAN, when using TCP/IP auto-optimization.
g
To save the settings and close the dialog box, click OK.
6
From the Interface field, select wan0.
7
For Compatibility Mode, select the option appropriate for your router. If a WCCP group is peering with a router running Nexus OS, then the appliance must adjust its WCCP protocol packets to be compatible. By default, the appliance is IOS-compatible.
8
In the Router IP Address field, enter the IP address of the WCCP router, 10.110.31.1.
9
Click Apply. A new WCCP Service Group for TCP appears.
w
To create a WCCP Service Group for the UDP protocol
1
On the Configuration - WCCP page, click Add Service Group. A new WCCP Service Group appears with the default settings.
2
In the Service Group ID field, enter the WCCP Service Group number you entered on the router as a placeholder for the UDP protocol. On the router, we entered 56.
3
In the Admin field, accept the default of up.
4
In the Protocol field, leave udp selected.
5
To access the Service Groups Advanced Settings page, click Advance Settings.
a
In the Forwarding Method field, select either. Either allows the appliance and the router to negotiate the best method for assignment. That is, GRE (Generic Routing Encapsulation) or L2.
b
In the Weight field, keep the max default value of 100.
c
In the Assignment Method field, leave the default of either. Either allows the appliance and the router to negotiate the best method for assignment. That is, hash or mask.
d
Leave Force L2 Return deselected.
e
In the Password field, optionally enter a password.
f
In the Assignment Detail field, select wan-ingress.
wan-ingress assignment detail is only required when redirection is needed from the WAN to the LAN, when using TCP/IP auto-optimization.
g
To save the settings and close the dialog box, click OK.
6
From the Interface field, select wan0.
a
For Compatibility Mode, select the option appropriate for your router. If a WCCP group is peering with a router running Nexus OS, then the appliance must adjust its WCCP protocol packets to be compatible. By default, the appliance is IOS-compatible.
b
In the Router IP Address field, enter the IP address of the WCCP router, 10.110.31.1.
7
Click Apply.
•
The data entry area disappears, and the table displays the new WCCP Service Group for UDP.
•
State changes from INIT to ACTIVE, DESIGNATED.
•
This means that the WCCP protocol is working properly with the router, and that this appliance is Primary and Active.
State
Definition
INIT
WCCP Service Group initialization
ACTIVE
Active WCCP Service group
BACKUP
Backup WCCP Service group
- Designated
[Used as a modifier for ACTIVE or BACKUP].
Appliance with the lowest IP address in a WCCP group that notifies Routers how to redirect traffic.
8
Click Save Changes.
Please send comments or suggestions regarding user documentation to techpubs@silver-peak.com.