Proxy Relay Deployment - 3Com SUPERSTACK 3 WEBCACHE 3000 User Manual

44 C 1: W
HAPTER EB
Proxy Relay
Deployment
C C D
ACHING ONCEPTS AND
WCCP V2 supports multiple WCCP-enabled Cisco routers operating with
multiple Webcaches in a service group. Any of the available routers in the
service group can redirect Web requests to any of the available
Webcaches, improving performance and redundancy within your
network.
For further information, see
Adding a New Webcache to a Service Group
There are two ways of adding a new Webcache to an existing WCCP
service group. In the Web interface of each Webcache, you can choose to
specify the IP address for each router or enter a single multicast IP
address.
Specifying a multicast IP address allows you to quickly add a new
Webcache to the service group without having to reconfigure every
router and Webcache in that group. The existing Webcaches and routers
will automatically configure the new Webcache into the WCCP V2
environment.
Improving the Security of Your Network
You can also enable password authentication between the routers and
the Webcaches. If enabled, the Webcache provides a password when it
identifies itself to the router. An incorrect password causes redirection of
traffic to the Webcache to be disabled. This password system prevents a
network device from receiving Web traffic for malicious purposes and
inproves the security of your network.
The following example describes how to deploy the Webcache with the
SuperStack 3 Firewall in a Proxy Relay configuration. The network layout
is shown in Figure 10
Web requests from client machines are intercepted by the Firewall,
rewritten as proxy requests and redirected to the Webcache. Cache hit
responses from the Webcache are again rewritten by the Firewall so they
appear to have come directly from the origin server.
For further information, see
SuperStack 3 Firewall"
EPLOYMENT
"Configuring WCCP V2"
below.
"Configuring Proxy Relay with the
on page 114.
on page 113.