Example: Wccpv2—Ipv6—Configuring Outbound Acl Check - Cisco ASR 1000 Series Configuration Manual

WCCPv2—IPv6 Support
Example: WCCPv2—IPv6—Configuring Outbound ACL Check
The following configuration example shows that the access list prevents traffic from network 10.0.0.0 leaving
Gigabit Ethernet interface 0/1/0. Because the outbound ACL check is enabled, WCCP does not redirect that
traffic. WCCP checks packets against the ACL before they are redirected.
Device(config)# ipv6 wccp web-cache
Device(config)# ipv6 wccp check acl outbound
Device(config)# interface gigabitethernet 0/1/0
Device(config-if)# ip access-group 10 out
Device(config-if)# exit
Device(config)# ipv6 wccp web-cache redirect-list redirect-out
Device(config)# access-list 10 deny 10.0.0.0 0.255.255.255
Device(config)# access-list 10 permit any
If the outbound ACL check is disabled, the HTTP packets from network 10.0.0.0 would be redirected to a
web cache. Users with that network address could retrieve web pages even though the network administrator
wanted to prevent it.
Example: WCCPv2—IPv6—Verifying WCCP Settings
The following example shows how to verify your configuration changes by using the more
system:running-config command in privileged EXEC mode. The following example shows that both the
web cache service and dynamic service 99 are enabled on the device:
Device# more system:running-config
Building configuration...
Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
service udp-small-servers
service tcp-small-servers
!
hostname router4
!
enable secret 5 $1$nSVy$faliJsVQXVPW.KuCxZNTh1
enable password password1
!
ip subnet-zero
ipv6 wccp web-cache
ipv6 wccp 99
ip domain-name cisco.com
ip name-server 10.1.1.1
ip name-server 10.1.1.2
ip name-server 10.1.1.3
!
!
!
interface GigabitEthernet0/1/1
ip address 10.3.1.2 255.255.255.0
no ip directed-broadcast
ipv6 wccp web-cache redirect in
ipv6 wccp 99 redirect in
no ip route-cache
no ip mroute-cache
!
interface GigabitEthernet0/1/0
ip address 10.4.1.1 255.255.255.0
no ip directed-broadcast
Example: WCCPv2—IPv6—Configuring Outbound ACL Check
IP Application Services Configuration Guide, Cisco IOS XE Release 3S (Cisco ASR 1000)
113