[squid-users] WCCP / no return traffic on gre interface

From: Chad Harrelson <coinflasher@dont-contact.us>
Date: Wed, 9 May 2007 08:48:05 -0400

Hello list,
  I am still battling WCCP... My ultimate goal is to get WCCPv2
functioning properly on a RHEL5 box (squid-2.6.STABLE6-3.el5)
2.6.18-8.el5xen -- connected to a Cisco 7600 (with SUP 720) ISO
12.2(18). Since I am having no luck with WCCPv2 I have been using v1.
 I have gotten as far as seeing http traffic leaving my gre interface
but I do not see that same traffic on eth0 (my external interface) and
of course the packets do not reach the destination. Here are my
relavant configs:

modprobe ip_gre
iptunnel add gre1 mode gre remote 150.125.125.186 local
150.125.125.185 dev eth0
ifconfig gre1 150.125.125.187 netmask 255.255.255.248 up (I have
tried many variations on IP addresses here. Having a real routable IP
is the only I can avoid seeing ICMP proto 47 unreachable errors on
eth0)

# ifconfig
eth0 Link encap:Ethernet HWaddr 00:0F:1F:67:A8:8E
          inet addr:150.125.125.185 Bcast:150.125.125.191 Mask:
255.255.255.248
          inet6 addr: fe80::20f:1fff:fe67:a88e/64 Scope:Link
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:148502 errors:0 dropped:0 overruns:0 frame:0
           TX packets:228391 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:15913590 (15.1 MiB) TX bytes:49401319 (47.1 MiB)

gre1 Link encap:UNSPEC HWaddr 96-7D-7D-B9-D9-BF-18-0D-00-00
-00-00-00-00-00-00
          inet addr: 150.125.125.187 P-t-P: 150.125.125.187
Mask:255.255.255.248
          UP POINTOPOINT RUNNING NOARP MTU:1476 Metric:1
          RX packets:39 errors:0 dropped:0 overruns:0 frame:0
          TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0
          RX bytes:1872 (1.8 KiB) TX bytes:0 ( 0.0 b)

# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
 150.125.125.184 0.0.0.0 255.255.255.248 U 0 0 0 eth0
 150.125.125.184 0.0.0.0 255.255.255.248 U 0 0 0 gre1
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
0.0.0.0 150.125.125.186 0.0.0.0 UG 0 0 0 eth0

relevant squid.conf:
    wccp_router 150.125.125.186
    http_port 80 transparent

The tunnel comes up and registers properly with the router. However,
when I try to surf I see packets redirected on the router to squid, I
see gre traffic on eth0 and I see outbound http request on gre1 but I
never see any return traffic on eth0 or gre1.

Any help would be greatly appreciated.

Thank you,

-- Chad Harrelson
Received on Wed May 09 2007 - 06:48:09 MDT

This archive was generated by hypermail pre-2.1.9 : Fri Jun 01 2007 - 12:00:04 MDT