Md5 Security - Cisco Catalyst 3550 series Software Configuration Manual

Understanding WCCP

MD5 Security

WCCPv2 provides an optional security component in each protocol message to enable the switch to use
MD5 authentication on messages between the switch and the cache engine. Messages that do not
authenticate (when authentication of the switch is enabled) are discarded by the switch. You enable the
security feature by using the ip wccp web-cache password password global configuration command.
The password string is combined with the MD5 value to create security for the connection between the
switch and the cache engine. You must configure the same password on each cache engine.
Packet Redirection
After WCCP is configured on the switch, the switch forwards all HTTP TCP port 80 packets received
from clients to the cache engines. However, these packets are not redirected:
•
•
•
Unsupported WCCPv2 Features
These WCCPv2 features are not supported in this software release:
•
•
•
•
•
•
Catalyst 3550 Multilayer Switch Software Configuration Guide
33-4
Packets originating from the cache engine and targeted to the web server.
Packets originating from the cache engine and targeted to the client.
Packets returned or rejected by the cache engine. These packets are sent to the web server.
WCCP service numbers, which are configured by using the ip wccp [service-number] global and
interface configuration commands. These commands are not supported.
This software release supports caching only for TCP port 80.
Packet redirection on an outbound interface, which is configured by using the ip wccp redirect out
interface configuration command. This command is not supported.
This software release supports packet redirection only on an inbound interface.
The connection of multiple Catalyst 3550 switches to multiple cache engines.
This software release supports the connection of only one switch to multiple cache engines.
WCCP multicasting. The ip wccp web-cache group-address and ip wccp web-cache group listen
global configuration commands are not supported.
WCCP access lists. The ip wccp web-cache redirect-list and ip wccp web-cache group-list global
configuration commands are not supported.
Statistics for WCCP-related counters. Statistics for counters are not provided; they appear as zeros
in the show ip wccp web-cache view privileged EXEC command output.
Chapter 33 Configuring Web Cache Services By Using WCCP
78-11194-09