Device(config)# ip wccp web-cache Device(config)# ip wccp check acl outbound Device(config)# interface gigabitethernet 0/1/0 Device(config-if)# ip access-group 10 out Device(config-if)# exit Device(config)# ip wccp web-cache redirect-list redirect-out Device(config)# access-list 10 deny 10.0.0.0 0.255.255.255 Device(config)# access-list 10 permit any If the outbound ACL check is disabled, the HTTP packets from network 10.0.0.0 would be redirected to a web cache. Users with that network address could retrieve web pages even though the network administrator wanted to prevent it. Example:
Verifying WCCP Settings The following example shows how to verify your configuration changes by using the more system:running-config command in privileged EXEC mode. The following example shows that both the web cache service and dynamic service 99 are enabled on the device: Device# more system:running-config Building configuration... Current configuration: ! version 12.0 service timestamps debug uptime service timestamps log uptime no service password-encryption service udp-small-servers service tcp-small-servers ! hostname router4 ! enable secret 5 $1$nSVy$faliJsVQXVPW.KuCxZNTh1 enable password password1 !
ip subnet-zero ip wccp web-cache ip wccp 99 ip domain-name cisco.com ip name-server 10.1.1.1 ip name-server 10.1.1.2 ip name-server 10.1.1.3 ! ! ! interface GigabitEthernet0/1/1 ip address 10.3.1.2 255.255.255.0 no ip directed-broadcast ip wccp web-cache redirect in ip wccp 99 redirect in no ip route-cache no ip mroute-cache ! interface GigabitEthernet0/1/0 ip address 10.4.1.1 255.255.255.0 no ip directed-broadcast ip wccp 99 redirect in no ip route-cache no ip mroute-cache Configuring WCCP Example: Verifying WCCP Settings Configuring WCCP 19