[c-nsp] WCCP and SQUID fragmented packets

[Reuben Farrelly]

Using Linux 2.6 -mm releases (usually) and with Squid-2.6 (latest) and IOS
(latest 12.4).  Known to work...

In terms of IOS, I have had absolutely no luck getting late 12.3T/12.4 releases
to work with either WCCPv1 or WCCPv2 in the last year or so, APART from 12.4(10)
which is the latest 12.4 mainline release - the one that Adrian also had work.
Obviously some important WCCP fixes went in.  Before it was out, I'd opened up
two TAC cases and spent about 12 months with a 100% reproduceable test case and
simple IOS config but got nowhere with getting it fixed, so gave up trying.

Note that at this time, IP/FW inspection and WCCP on the same router is not
going to work due to the router incorrectly inspecting inbound WCCP redirected
traffic (see CSCse55959).  However you've not mentioned anything about IP
firewalling or inspect so I guess that won't be your problem.

The only previous release which was not broken in any way I could detect, was
12.3(7)Tx.  You may also find some joy in 12.4(9)T1.  I wouldn't even bother
trying any other 12.4 releases other than those two, although if any newer ones
come out soon they will likely be OK as well.

Have you looked through http://wiki.squid-cache.org/SquidFaq/InterceptionProxy ?

Reuben


On 2/10/2006 12:33 AM, Raymond Macharia wrote:
> If there is anyone out there who has had any success, what Operating system
> have they used.
> 
> thanks
> 
> Raymond
> 
> 
> On 10/1/06, Raymond Macharia <rmacharia at gmail.com> wrote:
>> currently using a cisco 3725 with IOS 12.4 (6) T3, have tried 12.3 (7) T
>> and not making any headway
>>
>> Raymond
>>
>>
>> On 10/1/06, Adrian Chadd <adrian at creative.net.au> wrote:
>>> On Sun, Oct 01, 2006, Raymond Macharia wrote:
>>>> Squid Version 2.6
>>>>
>>>> WCCP Version 2
>>>>
>>>> Operating system - Free BSD 5.4
>>> I've had absolutely zero luck getting FreeBSD-6 to actually
>>> de-encapsulate the GRE redirected packets. I'd appreciate
>>> some specifics about your FreeBSD gre and redirection setup.
>>>
>>> (I only have a 3550 and a 2951 at home to test with so I can't
>>> duplicate your specific setup but I'll at least be able to
>>> say "me too" or not to what you're seeing.)
>>>
>>>
>>> Adrian, (part-time squid developer)
>>>
>>>
>>
>> --
>> Raymond Macharia
> 
> 
> 
>