Configuring WCCP Using Access Lists for a WCCP Service Group Command or Action Purpose • Standard IP access lists are numbered 1 to 99 or 1300 to 1999. • If the source-wildcard is omitted, a wildcard mask of 0.0.0.0 is assumed, which means a match on all bits of the source address. • The keyword any can be used as a substitute for source source-wildcard to specify the source and source wildcard of 0.0.0.0 255.255.255.255. • In this example, host 172.16.5.22 is allowed to pass the access list. Step 5 access-list access-list-number remark remark Example: Device(config)# access-list 1 remark Give access to user1 (Optional) Adds a user-friendly comment about an access list entry.
A remark of up to 100 characters can precede or follow an access list entry. Step 6 access-list access-list-number deny {source [source-wildcard] | any} | [log] Example: Device(config)# access-list 1 deny 172.16.7.34 0.0.0.0 Denies the specified source based on a source address and wildcard mask. • If the source-wildcard is omitted, a wildcard mask of 0.0.0.0 is assumed, which means a match on all bits of the source address. • The keyword any can be used as a substitute for the source source-wildcard to specify the source and source wildcard of 0.0.0.0 255.255.255.255. • In this example, host 172.16.7.34 cannot pass the access list.
Step 7 Repeat combinations of Step 3 through Step 6 until you have specified the sources on which you want to base your access list. Remember that all the sources that are not specifically permitted are denied by an implicit deny statement at the end of the access list. Step 8 ip wccp [vrf vrf-name] web-cache group-list access-list Example: Device(config) ip wccp web-cache group-list 1 Indicates to the device about which IP addresses of content engines should be accepted from. Step 9 ip wccp [vrf vrf-name] web-cache redirect-list access-list (Optional) Disables caching for certain clients. Configuring WCCP 14