Troubleshooting guide

1-29
Cisco Wide Area Application Services Configuration Guide
OL-26579-01
Chapter 1 Configuring Traffic Interception
Configuring WCCP on WAEs
it after you submit this page. If you type in this field, the drop-down list of displayed ACLs is filtered to
show only entries beginning with entered text. This field is shown only on devices configured in
appnav-controller mode.
If you need to create or edit an ACL, click the Go to IP ACL link to take you to the IP ACL configuration
window (this is the Configure > Network > TCP/IP Settings > IP ACL page).
Step 6 Check Submit to save the settings.
Note In AppNav Controller interception ACLs, the tcp ... established extended ACL condition is not
supported and is ignored if encountered.
To configure an interception ACL from the CLI, you can use the ip access-list and interception
access-list global configuration commands. To configure an AppNav Controller interception ACL, use
the interception appnav-controller access-list global configuration command.
You can determine if a connection was passed through by an interception ACL by using the show
statistics connection EXEC command. Flows passed through by an interception ACL are identified with
a connection type of “PT Interception ACL.”
Additionally, the show statistics pass-through command “Interception ACL” counter reports the
number of active and completed pass through flows due to an interception ACL.
You can use the show ip access-list command to view the individual ACL rules that are being matched.
Configuring Egress Methods for WCCP Intercepted Connections
This section contains the following topics:
• Information About Egress Methods, page 1-29
• Configuring the Egress Method, page 1-31
• Configuring a GRE Tunnel Interface on a Router, page 1-31
Information About Egress Methods
The WAAS software supports the following egress methods for WCCP intercepted connections:
• IP forwarding
• WCCP GRE return (available only if the redirect method is WCCP GRE; called WCCP negotiated
return for devices earlier than version 5.0)
• Generic GRE (available only if the redirect method is WCCP GRE)
• Layer 2 (available only if the redirect method is WCCP L2)
Note For ANCs the egress method is not configurable. The egress method that is used depends on the redirect
method. The ANC uses generic GRE when the WCCP GRE redirect method is chosen, or Layer 2 when
the WCCP L2 redirect method is chosen.