Dan, I believe in fact that _you_are_the_man_. This solved my problem. I
believe the problem lies in the bug report that Lincoln dug up - something
about fast switching screwing with WCCP packets. Everything seemed to be
pointing to the same place - a bug in the IOS. So I tried what you suggested:
enable
config t
ip cep #turns on cep globally -- some systems require the command "ip cep
global"
interface Ethernet0/0
no ip route-cache cef
#I don't know exactly what this does, because there is a "ip cef" command
under interface as well. Anyone bold enough to comment on what exactly
this does, and why it worked?
I ran the TCP dump with ip_wccp disabled, and no truncated packets came
through. So I re-enabled ip_wccp, kicked in my ipchains, and lo and
behold, it worked. I thank all of you for helping me with this problem. I
can't tell you how many times I thought about canning this project. Now I
just have to tune it, make it secure, and set it up so I never have to
touch it again.
I think these cep commands should be put into the documentation (FAQ) under
the WCCP configuration. Who do I contact to get such a thing done?
I also have a newbie question - where should I look to setup log file
rotation (for the access.log)? Is this something built into squid, or an
external daemon?
At 06:16 PM 12/13/00 -0600, Dan Williamson wrote:
>I seriously doubt this will help. But I will throw in my 2 cents anyways
>since I had a heck of a time getting WCCP to work in my system. I to got
>some help from the group, especially Lincoln.
>I am running 12.1.3 on my router. I fought with it for sometime, I then
>stumbled onto turning IP CEF on Globally. Then I turned it off on my client
>side interface.
>no ip route-cache cef
>I don't know why it worked, but I'm just glad that it did.
>
>Like I say, doubt it will help, but it did work for me.
>
>Regards,
>
>Dan
Nathan Lewis
Senior Network Administrator
nathan_lewis@uclid.com
----------------------------------------------------------------------
CONFIDENTIALITY NOTICE -- This email is ONLY for the person(s) named in
the message header. Unless otherwise indicated, it contains information
that is confidential, privileged or exempt from disclosure under applicable
law.
If you have received it in error, please notify the sender of the error and
delete the message. Thank you.
--------------------------------------------------------------------------
-- To unsubscribe, see http://www.squid-cache.org/mailing-lists.htmlReceived on Thu Dec 14 2000 - 17:32:36 MST
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:56:58 MST