Enabling The Wccp Outbound Acl Check - Cisco ASR 1000 Series Configuration Manual

Configuring WCCP
Command or Action
Example:
Device(config)# access-list 1 deny
172.16.7.34 0.0.0.0
Step 7 Repeat some combination of Steps 3 through 6
until you have specified the sources on which you
want to base your access list.
Step 8 ip wccp [vrf vrf-name] web-cache group-list
access-list
Example:
Device(config) ip wccp web-cache
group-list 1
Step 9 ip wccp [vrf vrf-name] web-cache redirect-list
access-list
Example:
Device(config)# ip wccp web-cache
redirect-list 1

Enabling the WCCP Outbound ACL Check

When all redirection is performed in the hardware, the mode of redirection will change when outbound
Note
ACL checking is enabled. The first packet is switched in software to allow the extra ACL check to be
performed before a shortcut is installed.
Purpose
• If the source-wildcard is omitted, a wildcard mask of 0.0.0.0 is
assumed, meaning match on all bits of the source address.
• Optionally use the abbreviation any as a substitute for the source
source-wildcard to specify the source and source wildcard of
0.0.0.0 255.255.255.255.
• In this example, host 172.16.7.34 is denied passing the access
list.
Remember that all sources not specifically permitted are denied by
an implicit deny statement at the end of the access list.
Indicates to the device from which IP addresses of content engines
to accept packets.
(Optional) Disables caching for certain clients.
IP Application Services Configuration Guide, Cisco IOS XE Release 3S (Cisco ASR 1000)
Enabling the WCCP Outbound ACL Check
71