[squid-users] Squid + RHEL4 + ip_gre issue

2006-08-02 Thread Arnold Wang
I have struggled several days to try to set up the transparent proxy between IOS and Squid using WCCP. Since I'm running Squid, 2.5.STABLE13, on RHEL 4 with kernel 2.6.9-34.0.2.ELsmp #1, which according to my reading the ip_gre module should contain WCCP v1/2 support, I decide to use GRE tunnel mod

Re: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-02 Thread Henrik Nordstrom
ons 2006-08-02 klockan 16:27 -0700 skrev Arnold Wang: > Is my reading on the trace correct? If so, does is really mean the > ip_gre module comes with RHEL 4 doesn't support WCCP? Is there a > way/command to verify whether the ip_gre module in my system supports > WCCP? Have you created the wccp g

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-02 Thread Arnold Wang
nopmtudisc Thanks for the reply. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Wednesday, August 02, 2006 6:32 PM To: Arnold Wang Cc: squid-users@squid-cache.org Subject: Re: [squid-users] Squid + RHEL4 + ip_gre issue ons 2006-08-02 klockan 16:27 -0700 skrev

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-02 Thread Henrik Nordstrom
ons 2006-08-02 klockan 22:22 -0700 skrev Arnold Wang: > The configuration in the RHEL box: > [EMAIL PROTECTED] ~]# ip tunnel show > gre0: gre/ip remote any local any ttl inherit nopmtudisc > wccp0: gre/ip remote 10.17.2.65 local 10.17.2.146 dev eth0 ttl > inherit > sit0: ipv6/ip remote a

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-03 Thread Arnold Wang
[EMAIL PROTECTED] tmp]# ip addr show dev wccp0 4: [EMAIL PROTECTED]: mtu 1476 qdisc noqueue link/gre 10.17.2.146 peer 10.17.2.65 inet 192.168.1.6/31 scope global wccp0 Thanks again for your kind helps. On Thu, 2006-08-03 at 08:44 +0200, Henrik Nordstrom wrote: > ons 2006-08-02 klockan 22

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-03 Thread Henrik Nordstrom
Looks fine. And "cat /proc/sys/net/ipv4/conf/wccp0/rp_filter"? (should be 0) Regards Henrik tor 2006-08-03 klockan 10:34 -0700 skrev Arnold Wang: > [EMAIL PROTECTED] tmp]# ip addr show dev wccp0 > 4: [EMAIL PROTECTED]: mtu 1476 qdisc noqueue > link/gre 10.17.2.146 peer 10.17.2.65 > ine

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-03 Thread Arnold Wang
Yes, I did change those system settings mentioned in FAQ, including enabling routing, etc. [EMAIL PROTECTED] awang] $cat /proc/sys/net/ipv4/conf/wccp0/rp_filter 0 On Thu, 2006-08-03 at 20:06 +0200, Henrik Nordstrom wrote: > Looks fine. > > And "cat /proc/sys/net/ipv4/conf/wccp0/rp_filter"? >

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-03 Thread Henrik Nordstrom
If you run tcpdump -n -i wccp0, do you see any traffic? Regards Henrik tor 2006-08-03 klockan 12:03 -0700 skrev Arnold Wang: > Yes, I did change those system settings mentioned in FAQ, including > enabling routing, etc. > > [EMAIL PROTECTED] awang] > $cat /proc/sys/net/ipv4/conf/wccp0/rp_filter

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-03 Thread Arnold Wang
Yes. I included in my original post. I include my read on it as well. - begin of the trace -- 1 0.00192.168.1.6 192.168.1.7 WCCP 1.0 Here I am -> Squid tries to register with the router. 2 0.000960192.168.1.7 192.168.1.6

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-03 Thread Henrik Nordstrom
tor 2006-08-03 klockan 13:33 -0700 skrev Arnold Wang: > Yes. I included in my original post. That traffic was on eth0, not on wccp0. > > If you run tcpdump -n -i wccp0, do you see any traffic? Regards Henrik signature.asc Description: Detta är en digitalt signerad meddelandedel

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-03 Thread Arnold Wang
I'm sorry I forgot it's from the eth0 packet. I do see traffics on wccp0 as well. [EMAIL PROTECTED] local]# tethereal -i wccp0 tethereal: WARNING: arptype 778 not supported by libpcap - falling back to cooked socket. Capturing on wccp0 0.00 192.168.1.6 -> 192.168.1.7 WCCP 1.0 Here I am

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-03 Thread Henrik Nordstrom
tor 2006-08-03 klockan 14:40 -0700 skrev Arnold Wang: > I'm sorry I forgot it's from the eth0 packet. I do see traffics on wccp0 > as well. > > [EMAIL PROTECTED] local]# tethereal -i wccp0 > tethereal: WARNING: arptype 778 not supported by libpcap - falling back > to cooked socket. > Capturing on

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-03 Thread Arnold Wang
squid-cache.org Subject: RE: [squid-users] Squid + RHEL4 + ip_gre issue tor 2006-08-03 klockan 14:40 -0700 skrev Arnold Wang: > I'm sorry I forgot it's from the eth0 packet. I do see traffics on wccp0 > as well. > > [EMAIL PROTECTED] local]# tethereal -i wccp0 > tetherea

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-04 Thread Henrik Nordstrom
On Thu, 2006-08-03 at 17:25 -0700, Arnold Wang wrote: > 1. Can you explain to me your concern on the WCCP chat you saw on wccp0 > interface? I thought they're belong there. The WCCP control traffic should go over the IP network, not encapsulated in GRE. The rest looks fine (assuming IP addresses

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-04 Thread Arnold Wang
Thanks for the response. See my comments below. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Friday, August 04, 2006 4:57 AM To: Arnold Wang Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid + RHEL4 + ip_gre issue On Thu, 2006-08-03 at 17:25

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-04 Thread Henrik Nordstrom
fre 2006-08-04 klockan 09:29 -0700 skrev Arnold Wang: > This reminds me the odd thing I ignored earlier which is I > have to define the dummy IP of the router GRE interface as the > wccp_router in the Squid for it to register with router properly. What GRE interface on the router? Have you create

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-04 Thread Arnold Wang
ook hard enough. Thanks again for your helps. They're very helpful. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Friday, August 04, 2006 9:57 AM To: Arnold Wang Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid + RHEL4 + ip_gre issue fre 2006

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-04 Thread Henrik Nordstrom
fre 2006-08-04 klockan 10:32 -0700 skrev Arnold Wang: > I did install the kernel-devel package from Redhat and tried to look for > the ip_gre.c file and didn't find it. I guess I didn't look hard enough. > Thanks again for your helps. They're very helpful. The kernel source is in the source rpm (

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-04 Thread Arnold Wang
I thought RedHat changed their kernel source distribution package. BTW, just to confirm, I don't need any GRE configuration on the router side at all, is this correct? Do I have to specify the wccp_ip incoming/outgoing address for Squid? It seems I having trouble to have Squid registering with the

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-04 Thread Arnold Wang
That is the problem. mismatched IP addresses between the router and Squid. There're multiple IPs in the router and it picks 204.146.97.x as its WCCP IP and it seems no way to modify it, I have a case opened now with Cisco to confirm. The Squid has 10.17.2.x IP. I just added another interface in the

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-04 Thread Henrik Nordstrom
fre 2006-08-04 klockan 11:12 -0700 skrev Arnold Wang: > I thought RedHat changed their kernel source distribution package. They don't distribute the kernel source as a binary rpm any longer. Only as a source rpm just like how it's done for all other rpms. > BTW, just to confirm, I don't need any

RE: [squid-users] Squid + RHEL4 + ip_gre issue

2006-08-04 Thread Arnold Wang
e in Linux to achieve that as well. -Original Message- From: Henrik Nordstrom [mailto:[EMAIL PROTECTED] Sent: Friday, August 04, 2006 2:36 PM To: Arnold Wang Cc: squid-users@squid-cache.org Subject: RE: [squid-users] Squid + RHEL4 + ip_gre issue fre 2006-08-04 klockan 11:12 -0700 skrev A