Skip navigation
Cisco Learning Home > Certifications > Routing & Switching (CCNP) > Discussions

_Communities

1115 Views 10 Replies Latest reply: May 15, 2012 10:20 AM by biggybiggy RSS

Currently Being Moderated

wccp redirect

May 14, 2012 10:47 AM

I have a Catalyst 3560 directly connected to the Websense and my users are in vlan1. the connection between my switch and the websense is in vlan3 and that's what it should be for wccp to work. So if I understand correctly, wccp L2 only works for local users; users who are assigned to the vlan configured on the switch that is directly connected to the Websense. How about if I have another users on a different vlan? HOw will they be redeitected to the Websense? Thx

  • Steven Williams 3,266 posts since
    Jan 26, 2009
    Currently Being Moderated
    1. May 14, 2012 11:05 AM (in response to biggybiggy)
    Re: wccp redirect

    Where are you applying your WCCP redirect command? There are two ways you can approach this, you can configure the redirect on the outbound interface/vlan that leads to the internet, which is not the preferred way to do this. The other way is to confgure the WCCP redirect on every inbound interface to the 3560. So if Vlan3 is the outbound interface to the Internet and Vlan1 and Vlan2 are internal Vlan's you would configure the WCCP redirect on both vlan1 and vlan2 SVI.

     

    you would use this command:

     

    ip wccp (Service#) redirect in

  • Steven Williams 3,266 posts since
    Jan 26, 2009
    Currently Being Moderated
    3. May 14, 2012 11:25 AM (in response to biggybiggy)
    Re: wccp redirect

    so your layer 3 routing is being done on the 3560?

  • Steven Williams 3,266 posts since
    Jan 26, 2009
    Currently Being Moderated
    5. May 14, 2012 11:36 AM (in response to biggybiggy)
    Re: wccp redirect

    Ok so same rule would apply if you have an SVI for any other vlan you are going to create. All the redirect commands will be configured at the layer 3 SVI on the 3560.

  • Steven Williams 3,266 posts since
    Jan 26, 2009
    Currently Being Moderated
    7. May 14, 2012 12:52 PM (in response to biggybiggy)
    Re: wccp redirect

    Depends on the network layout. what is the IP of your websense appliance? what vlan is your websense appliance on? Does all traffic from the 3560 become vlan 3 when it leaves the 3560 to the 1841?

  • Steven Williams 3,266 posts since
    Jan 26, 2009
    Currently Being Moderated
    9. May 15, 2012 9:29 AM (in response to biggybiggy)
    Re: wccp redirect

    I do not understand what you mean when you say redirects traffic locally?

     

    So like for me I have multiple Layer 3 links out to multiple locations via P-to-P fiber. All connections from all locations come back to my 6500 Core switch. I enable WCCP redirect on the inbound interfaces on the Core from those locations. Then the traffic comes into the core, is redirected for my WCCP function and then is either permitted or denied, if denied is then served a deny page from my web filter.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)