Cisco Cisco Web Security Appliance S360 Troubleshooting Guide

Contributed by Jason Alert and Siddharth Rajpathak, Cisco TAC
Engineers.
Jul 18, 2014

How do you configure a Web Cache Communication Protocol (WCCP) on a Cisco catalyst 3560 or 3750
switch?

Environment: Cisco Web Security Appliance (WSA) and Cisco Catalyst 3560 or 3750

WCCP is only supported on the Catalyst 3560/3750 running IP Services or Advanced IP Services feature sets,
on IOS 12.2(25) and later. The IP Base feature set does not support WCCP. WCCP is supported only on the
SDM templates that support PBR: access, routing, and dual IPv4/v6 routing.

In these examples, use the "routing" template.

Switch(config)#sdm prefer routing
Switch(config)#do wr mem
Switch(config)#reload

Note:  A reboot is required for the SDM template change to take effect.

Switch(config)#ip wccp web−cache
Switch(config)#interface <client_vlan_int>
Switch(config−if)#ip wccp web−cache redirect in
!
! and don't forget to save config
!
Switch(config−if)#do wr mem

Using a slightly more advanced configuration, a WCCP redirect−list can be used to exclude certain
destination networks from WCCP redirection.  In this example, exclude any traffic destined for RFC1918
addresses from redirection.