Cisco Catalyst 4500 Series, Software Configuration Manual

Page: 1992 / 2086

81-8
Catalyst 4500 Series Switch, Cisco IOS Software Configuration Guide - Cisco IOS XE 3.9.xE and IOS 15.2(5)Ex
Chapter 81 Configuring WCCP Version 2 Services
Configuring WCCP
Using Access Lists for a WCCP Service Group
A Catalyst 4500 series switch can use an access list to restrict the content engines that can join a service
group.
To restrict a content engine, perform this task:
Setting a Password for a Switch and Cache Engine
MD5 password security requires that each content engine and Catalyst 4500 series switch that wants to
join a service group be configured with the service group password. The password can consist of up to
seven characters. Each content engine or Catalyst 4500 series switch in the service group authenticates
the security component in a received WCCP packet immediately after validating the WCCP message
header. Packets failing authentication are discarded.
To configure an MD5 password for use by the Catalyst 4500 series switch in WCCP communications,
perform this task:
Command Purpose
Step 1
Switch(config)# access-list access-list permit ip
host host-address [ destination-address |
destination-host | any ]
Creates an access list based on the unicast address of the
content engines.
Step 2
Switch(config)# ip wccp web-cache redirect-list
access-list
For IPv6
Switch(config)# ipv6 wccp [ vrf
vrf-name]{service-number} redirect-list
access-list
Indicates to the switch which content engines are allowed
or disallowed to form a service group.
Command Purpose
Switch(config)# ip wccp web-cache password password
Sets an MD5 password on the
Catalyst 4500 series switch.