Device(config)# interface gigabitethernet 0/1/0 Device(config-if)# ip wccp 99 redirect out Example: Registering a Device to a Multicast Address Device# configure terminal Device(config)# ip wccp web-cache group-address 224.1.1.100 Device(config)# interface gigabitethernet 0/1/0 Device(config-if)# ip wccp web-cache group-listen The following example shows a device configured to run a reverse proxy service, using the multicast address of 224.1.1.1. Redirection applies to packets going out through the Gigabit Ethernet interface 0/1/0:
Device# configure terminal Device(config)# ip wccp 99 group-address 224.1.1.1 Device(config)# interface gigabitethernet 0/1/0 Device(config-if)# ip wccp 99 redirect out Example: Using Access Lists To achieve better security, you can use a standard access list to notify the device which IP addresses are valid addresses for a content engine attempting to register with the current device. The following example shows a standard access list configuration session where the access list number is 10 for some sample hosts:
Device(config)# access-list 10 permit host 10.1.1.1 Device(config)# access-list 10 permit host 10.1.1.2 Device(config)# access-list 10 permit host 10.1.1.3 Device(config)# ip wccp web-cache group-list 10 To disable caching for certain clients, servers, or client/server pairs, you can use WCCP access lists. The following example shows that any requests coming from 10.1.1.1 to 10.3.1.1 will bypass the cache, and that all other requests will be serviced normally:
Device(config)# ip wccp web-cache redirect-list 120 Device(config)# access-list 120 deny tcp host 10.1.1.1 any Device(config)# access-list 120 deny tcp any host 10.3.1.1 Device(config)# access-list 120 permit ip any any The following example configures a device to redirect web-related packets received via Gigabit Ethernet interface 0/1/0, destined to any host except 209.165.200.224: Device(config)# access-list 100 deny ip any host 209.165.200.224 Device(config)# access-list 100 permit ip any any Device(config)# ip wccp web-cache redirect-list 100 Device(config)# interface gigabitethernet 0/1/0 Device(config-if)# ip wccp web-cache redirect in Example:
WCCP Outbound ACL Check Configuration The following configuration example shows that the access list prevents traffic from network 10.0.0.0 leaving Gigabit Ethernet interface 0/1/0. Because the outbound ACL check is enabled, WCCP does not redirect that traffic. WCCP checks packets against the ACL before they are redirected. Configuring WCCP Example: Registering a Device to a Multicast Address Configuring WCCP 18