1-3
Cisco Wide Area Application Services Configuration Guide
OL-26579-01
Chapter 1 Configuring Traffic Interception
Information About WCCP Interception
If a WAE device is behind a firewall that prevents traffic optimization, you can use the directed mode of
communicating between peer WAEs over the WAN. For details, see the “Configuring Directed Mode”
section on page 1-27.
Information About WCCP Interception
The WAAS software uses the WCCP standard, Version 2 for redirection. The main features of
WCCP Version 2 include support for the following:
• Up to 32 WAEs per WCCP service
• Up to 32 routers per WCCP service
• Authentication of protocol packets
• Redirection of non-HTTP traffic
• Packet return (including generic routing encapsulation [GRE], allowing a WAE to reject a redirected
packet and to return it to the router to be forwarded)
• Masking for improved load balancing
• Multiple forwarding methods
• Packet distribution method negotiation within a service group
• Command and status interaction between the WAE and a service group
Note WCCP works only with IPv4 networks.
WAAS software supports the WCCP TCP promiscuous mode service (services 61 and 62 by default,
though these service IDs are configurable). This WCCP service requires that WCCP Version 2 is running
on the router and the WAE.
The TCP promiscuous mode service is a WCCP service that intercepts all TCP traffic and redirects it to
the local WAE.
The WAAS software also supports service passwords, WAE failover, flow protection, and interception
ACLs.
Many Cisco routers and switches can be configured and enabled with WCCP Version 2 support for use
with WAAS devices.
Note Many legacy Cisco routers, including the 2500, 2600, and 3600 routers, have far less processing power
and memory than newer routing platforms such as the Integrated Services Router (ISR) models 2800 and
3800. As such, the use of WCCPv2 or PBR may cause a high level of CPU utilization on the router and
cause erratic behavior. WAAS can be configured to work with these routers, but not to the same levels
of performance or scalability as can be found with newer routing platforms. The Cisco ISR is the routing
platform of choice for the branch office.
If you are experiencing erratic behavior, such as the WAE being ejected from the service group, enable
fair-queuing, weighted fair-queuing, or rate-limiting on all physical interfaces on the router that connect
to users, servers, WAEs, and the WAN. Fair-queuing cannot be configured on subinterfaces, and should
be configured on both ingress and egress physical interfaces. If another form of queuing is already
configured on the LAN or WAN interfaces other than fair-queuing that provides similar fairness, it
should be sufficient.
Comments to this Manuals