Cisco Cisco Web Security Appliance S170 사용자 가이드

You can configure the Web Proxy to do IP spoofing. When enabled, requests originating from a client 
retain the client’s source address and appear to originate from the client instead of the Web Proxy.

When you enable IP spoofing, you must create two WCCP services. One WCCP service must redirect 
traffic based on the destination port, and another based on the source port for the return path. The service 
based on the destination port can be the standard web-cache service. However, you must still create at 
least one dynamic service.

The two WCCP services you define for IP spoofing must have the same values for the following settings:

Port numbers

Router IP addresses

Router security and password

Cisco suggests using a service ID number from 90 to 97 for the WCCP service used for the return path 
(based on the source port).

For more information about creating WCCP services, see 

You must create at least one WCCP service when you configure the transparent redirection device as a 
WCCP router. If IP spoofing is enabled on the appliance, you must create two WCCP services. For more 
information about IP spoofing, see 

.

To add or edit a WCCP service:

Navigate to the Network > Transparent Redirection page.

Verify the transparent redirection device is a WCCP v2 router. If it is not, click Edit Device to change it.

To add a WCCP service, click Add Service. Or, to edit a WCCP service, click the name of the WCCP 
service in the Service Profile Name column.

The Add WCCP v2 Service page or Edit WCCP v2 Service page appears.