Saturday, April 5, 2014

Fortigate as WCCP client - WCCP primary-hash by src-ip dst-ip src-port dst-port

The ‘primary-hash’ configuration must match on all of the WCCP client pool. 

At first, I changed it to VDOM2, WCCP server then drop VDOM2 from the pool and assign 100% load to VDOM1 which the change hasn’t been made.

Only after I changed both VDOMs that it starts to INITIALIZE WCCP Pool again (around 15 - 30 seconds), then both become available again.

Cisco-IOS#show ip wccp 70 detail
WCCP Client information:
        WCCP Client ID:          x.x.x.x
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Initial Hash Info:       00000000000000000000000000000000
                                 00000000000000000000000000000000
        Assigned Hash Info:      48922489224891244912449124491244
                                 91244912449224891244912449124491
        Hash Allotment:          77 (30.07%)
        Packets s/w Redirected:  4
        Connect Time:            00:00:45
        Bypassed Packets
          Process:               0
          CEF:                   0
          Errors:                0

        WCCP Client ID:          y.y.y.y
        Protocol Version:        2.0
        State:                   Usable
        Redirection:             GRE
        Packet Return:           GRE
        Assignment:              HASH
        Initial Hash Info:       00000000000000000000000000000000
                                 00000000000000000000000000000000
        Assigned Hash Info:      B76DDB76DDB76EDBB6EDBB6EDBB6EDBB
                                 6EDBB6EDBB6DDB76EDBB6EDBB6EDBB6E
        Hash Allotment:          179 (69.92%)
        Packets s/w Redirected:  164
        Connect Time:            00:00:41
        Bypassed Packets
          Process:               0
          CEF:                   0
          Errors:                0

Config on VDOM1

VUFG1 # config vdom

VUFG1 (vdom) # edit VUWF101
current vf=VUWF101:2

VUFG1 (VUWF101) # show system wccp
path=system, objname=wccp, tablename=(null), size=228
config system wccp
    edit "70"
        set cache-id x.x.x.x
        set router-list "z.z.z.z"
        set ports 80 443
        set primary-hash src-ip dst-ip src-port dst-port
        set protocol 6
        set assignment-weight 30
    next
end

Config on VDOM2

VUFG1 # config vdom

VUFG1 (vdom) # edit VUWF102
current vf=VUWF102:1

VUFG1 (VUWF102) # show system wccp
path=system, objname=wccp, tablename=(null), size=228
config system wccp
    edit "70"
        set cache-id y.y.y.y
        set router-list "z.z.z.z"
        set ports 80 443
        set primary-hash src-ip dst-ip src-port dst-port
        set protocol 6
        set assignment-weight 70
    next
end