Example: Wccpv2—Ipv6—Running A Reverse Proxy Service - Cisco ASR 1000 Series Configuration Manual

Example: WCCPv2—IPv6—Running a Reverse Proxy Service
Example: WCCPv2—IPv6—Running a Reverse Proxy Service
The following example assumes that you are configuring a service group using Cisco cache engines, which
use dynamic service 99 to run a reverse proxy service:
Device# configure terminal
Device(config)# ipv6 wccp 99
Device(config)# interface GigabitEthernet 0/1/0
Device(config-if)# ipv6 wccp 99 redirect out
Example: WCCPv2—IPv6—Registering a Router to a Multicast Address
Device# configure terminal
Device(config)# ipv6 wccp web-cache group-address 224.1.1.100
Device(config)# interface gigabitethernet 0/1/0
Device(config-if)# ipv6 wccp web cache group-listen
The following example shows a device configured to run a reverse proxy service, using the multicast address
of 224.1.1.1. Redirection applies to packets outgoing via Gigabit Ethernet interface 0/1/0:
Device# configure terminal
Device(config)# ipv6 wccp 99 group-address 224.1.1.1
Device(config)# interface gigabitethernet 0/1/0
Device(config-if)# ipv6 wccp 99 redirect out
Example: WCCPv2—IPv6—Using Access Lists for a WCCPv2 IPv6 Service
Group
To achieve better security, you can use a standard access list to notify the device which IP addresses are valid
addresses for a content engine attempting to register with the current device. The following example shows
a standard access list configuration session where the access list number is 10 for some sample hosts:
Device(config)# access-list 10 permit host 10.1.1.1
Device(config)# access-list 10 permit host 10.1.1.2
Device(config)# access-list 10 permit host 10.1.1.3
Device(config)# ipv6 wccp web-cache group-list 10
To disable caching for certain clients, servers, or client/server pairs, you can use WCCP access lists. The
following example shows that any requests coming from 10.1.1.1 to 10.3.1.1 will bypass the cache, and that
all other requests will be serviced normally:
Device(config)# ipv6 wccp web-cache redirect-list 120
Device(config)# access-list 120 deny tcp host 10.1.1.1 any
Device(config)# access-list 120 deny tcp any host 10.3.1.1
Device(config)# access-list 120 permit ip any any
The following example configures a device to redirect web-related packets received via Gigabit Ethernet
interface 0/1/0, destined to any host except 209.165.200.224:
Device(config)# access-list 100 deny ip any host 209.165.200.224
Device(config)# access-list 100 permit ip any any
Device(config)# ipv6 wccp web-cache redirect-list 100
Device(config)# interface gigabitethernet 0/1/0
Device(config-if)# ipv6 wccp web-cache redirect in
IP Application Services Configuration Guide, Cisco IOS XE Release 3S (Cisco ASR 1000)
112
WCCPv2—IPv6 Support