Cisco Cisco Web Security Appliance S160 User Guide
3-7
Cisco IronPort AsyncOS 7.5 for Web User Guide
Chapter 3 Deployment
Connecting the Appliance to a WCCP Router
Use the following syntax for enabling WCCP on the router:
Enter one of the following values for the service_group variable:
•
web-cache. Enter “web-cache” when the appliance WCCP service uses the standard service.
•
Service ID number. Enter a number from 0 to 255 when the appliance WCCP service uses a
dynamic service ID. The number should match the service ID number used in the appliance.
dynamic service ID. The number should match the service ID number used in the appliance.
You can also configure a WCCP router to perform other tasks, such as the following:
•
Configure the router from exclude redirecting traffic received on a particular interface.
•
If the network uses multiple Web Security appliances, you can configure the router to determine
which traffic should be directed to which appliance by using an access list. You might want to
redirect only some of the network traffic to the appliance if you are evaluating the Web Security
appliance.
which traffic should be directed to which appliance by using an access list. You might want to
redirect only some of the network traffic to the appliance if you are evaluating the Web Security
appliance.
ip wccp version 2
ip wccp service_group
interface interface_type_number
ip wccp service_group redirect direction
ip wccp service_group password password
Table 3-1
WCCP Router Configuration Syntax for Enabling the Router
WCCP Configuration
Description
ip wccp version 2
Defines the version of WCCP to use on the router. You must specify
version 2 to work with the Web Security appliance.
version 2 to work with the Web Security appliance.
This command is required.
ip wccp service_group
password password
Specifies a service group to enable on the router. It also enables the
WCCP service on the router.
WCCP service on the router.
This command is required.
interface
interface_type_number
Specifies an interface to configure and enters interface configuration
mode. Enter the interface number for the interface_type_number
variable.
mode. Enter the interface number for the interface_type_number
variable.
This command is required.
ip wccp service_group
redirect direction
Enables WCCP redirection on the specified interface.
Enter one of the following values for the direction variable:
•
in. Use
in
when you want the router to redirect packets as they enter
the router.
•
out. Use
out
when you want the router to redirect packets right
before they leave the router.
This command is required.
ip wccp service_group
password password
Sets a password on the router for the specified service group.
This command is only required when the WCCP service defined on the
appliance has password security enabled.
appliance has password security enabled.