Citrix NetScaler EE, Руководство по установке и настройке

Страница: 681 / 1026

© 1999-2017 Citrix Systems, Inc. All rights reserved. p.681 https://docs.citrix.com
Configuring the Router
Sep 12, 2014
WCCP configuration on the router is simple, because most WCCP parameters are set by the appliances.
Unlike legacy SD-WAN WCCP support, WCCP clustering uses two service groups for TCP traffic. One service group is used on
the router's WAN interface, and the other is used on the router's LAN interfaces (except for the LAN interface used by the
SD-WAN appliances themselves, when deployed in L2-mode WCCP cluster).
As shown in the following figure, you need to configure two service groups because WCCP allows the mask to be applied to
either the source IP or the destination IP address, which is not quite what is required. To keep connections between two
endpoints together, regardless of which endpoint initiates the connection, the appliance applies the address mask to the
source IP address of incoming WAN traffic, and to the destination IP address of incoming LAN traffic. This requires two
service groups.
The WAN service group uses WCCP source-ip address masking, while the LAN service group uses dest-ip masking. In some
deployments, it may be necessary to reverse the assignments, using the “WAN” service group for your LAN interface and
vice versa. This might occur if the number of local IP addresses greatly exceeds the number of remote IP addresses.
Figure 1. SD-WAN WCCP Cluster
T o conf igure T o conf igure WCCP clust ering on t he rout er WCCP clust ering on t he rout er
This procedure assumes Cisco routers, but is similar on other routers. It uses the first of the two methods, discussed above,
of redirecting WCCP traffic with an
ip wccp redirect in
statement on both LAN and WAN ports.
1. Fill in the WCCP clustering Deployment Worksheet .
2. Log on to your router
3. In the global declarations section, declare each service group on the WCCP clustering worksheet, listed as WAN
WAN service service
group group and LAN LAN Service group Service group. For example,
ip wccp 61
and
ip wccp 62
.
Note: The
ip wccp
command allows, but does not require, a more elaborate syntax than this, and can specify an ACL
name or a password. Both service groups must have the same password, if one is used. The ACLs can be different.
4. Inside the interface declarations for each WAN interface that connects to remote SD-WAN appliances, add an
ip wccp
x redirect in
statement, where
x
is the WAN service group from the WCCP clustering worksheet.
5. Inside the interface declarations for each LAN interface (except the one connecting to the WCCP cluster, if you are
using L2 mode), add an ip wccp y redirect in statement, where y is the LAN service group from the WCCP clustering
worksheet.
6. Save your configuration.
Example Example. The following example uses service group 61 for the WAN service group and service group 62 for the LAN service
group. Three router interfaces are used. One is connected to the WAN, one is connected to the LAN, and one is connected
to the WCCP cluster.
!
! Example is for WCCP clustering using WCCP redirect in statements
! on LAN and WAN interfaces.
! This definition is appropriate for modern Cisco routers.
! Global declarations
ip wccp 61
ip wccp 62