[squid-users] cisco wccp configuration question

From: Chad Whitten <[email protected]>
Date: Sat, 24 Aug 2002 11:32:29 -0500

here is layout
squid proxy on lan 0 running in transparent mode
cisco 3640 connecting lan 0 and lan 1
lan 0 users browse web using ip of fa1/0 on cisco as default gw and requests
hit the squid proxy via wccp
lan 1 users browse using ip of e0/0 as gateway and and requests get sent to
squid via wccp
now i have a remote site connected via serial 0/0 (t1) but when they try to
browse web they dont get to the squid proxy - they get nowhere
here is cisco config

Current configuration:
!
! Last configuration change at 10:20:06 CST Sat Aug 24 2002
! NVRAM config last updated at 10:20:07 CST Sat Aug 24 2002
!
version 11.2
no service password-encryption
no service udp-small-servers
no service tcp-small-servers
!
hostname 3640
!
enable secret 5 x
!
ip subnet-zero
ip wccp enable
clock timezone CST -6
!
interface Ethernet0/0
 description lan-1-connection
 ip address 192.168.2.1 255.255.255.0
 ip access-group 110 in
 no ip redirects
 no ip directed-broadcast
 no ip mroute-cache
 traffic-shape group 111 128000 7936 7936 1000
 no cdp enable
!
interface Serial0/0
 description remote-lan-off-t1
 ip address 172.16.1.1 255.255.255.252
 ip access-group 110 in
 no ip redirects
 no ip directed-broadcast
 encapsulation ppp
 no ip mroute-cache
 no fair-queue
 traffic-shape group 111 128000 7936 7936 1000
 no cdp enable
!
interface FastEthernet1/0
 description lan-0-connection
 ip address 192.168.1.15 255.255.255.0
 ip access-group 110 in
 no ip directed-broadcast
 ip web-cache redirect
 ip route-cache same-interface
 no ip mroute-cache
 traffic-shape group 111 64000 8000 8000 1000
 no cdp enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.1
ip route 192.168.3.0 255.255.255.0 172.16.1.2
access-list 50 permit xxxxxxxxxxxxx
access-list 50 permit xxxxxxxxxxxxx
access-list 110 permit ip host xxxxxxxxxxxxx any
access-list 110 permit ip host xxxxxxxxxxxxx any
access-list 110 deny udp any any eq snmp
access-list 110 deny udp any any eq snmptrap
access-list 110 permit ip any any
access-list 111 permit tcp any eq 1214 any
access-list 111 permit tcp any any eq 1214
access-list 111 permit tcp any eq 6699 any
access-list 111 permit tcp any any eq 6699
snmp-server community xxxxx RO
!
line con 0
line aux 0
line vty 0 4
 access-class 50 in
 exec-timeout 0 0
 password 7 x
 login
!
ntp clock-period 17179649
ntp server 192.168.1.5
end

192.168.1.1 is core router where internet connections terminate
squid proxy is 192.168.1.6

now at the remote site, they are running a firewall and another squid proxy
that is also transparent (users use squid as gateway and then gateway uses
openbsd firewall to get to their router which connects to t1)

it seems like this should just work, but the remote t1 users cant browse and
can ftp/smtp/pop etc so I was just wondering if there is something i need to
add to there serial interface config to get this working.

-- 
Chad Whitten
neXband Communications
cwhitten@nexband.com
Received on Sat Aug 24 2002 - 10:32:38 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:09:50 MST