<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
-----BEGIN PGP SIGNED MESSAGE----- <br>
Hash: SHA256 <br>
<br>
<br>
<br>
15.07.2016 21:52, Maxime Lambert пишет:<br>
<span style="white-space: pre;">> Hi everyone !!<br>
><br>
> My issue is that i didn't received any data in access.log. I
work on Ubuntu Server 16.04 with Squid 5.3.20 compiled with :<br>
> ./configure --prefix=/usr --localstatedir=/var
--libexecdir=${prefix}/lib/squid --datadir=${prefix}/share/squid
--sysconfdir=/etc/squid --with-default-user=proxy
--with-logdir=/var/log/squid --with-pidfile=/var/run/squid.pid
--with-openssl --enable-icmp *--enable-linux-netfilter
--enable-wccpv2* --enable-gnuregex --enable-xmalloc-statistics
--enable-async-io --enable-delay-pools --enable-useragent-log
--enable-kill-parent-hack --enable-htpc --enable-forw-via-db
--enable-cache-digests --enable-dl-malloc --enable-time-hack
--enable-ssl --enable-ssl-crtd<br>
><br>
> This is my conf :<br>
><br>
> Internet<br>
> |<br>
> |
10.12.3.200<br>
> Cisco-ASA ----------------------- Squid
Server</span><br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2">http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2</a><br>
<span style="white-space: pre;">> |
10.12.1.1<br>
> |<br>
> /------------------------/<br>
> |<br>
> | 10.12.2.18<br>
> Client<br>
><br>
> If my Squid server is UP my client can't go on web, else if
my Squid server is DOWN he can surf on it.<br>
><br>
> I've allow localnet 10.12.1.0/24.<br>
> And i've tunnel GRE, and my Cisco saw it.</span><br>
Why you are using GRE as assignment method when your clients and
proxy in the same L2 segment? Reasonable to use L2 method, which is
hardware accelerated.<br>
<span style="white-space: pre;">><br>
> squid.conf : <br>
> ...<br>
> http_port 80
intercept <== Should I
write intercept or transparent ?</span><br>
If your using Squid 3.5.20, this must be intercept, as documented in
manuals - did you read it?<br>
<span style="white-space: pre;">> http_port 3128 <br>
> wccp_version
2 <== Should I
write 2 or 4 ?</span><br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2">http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2</a><br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2">http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2</a><br>
<span style="white-space: pre;">> wccp2_router 10.12.1.1<br>
> wccp2_forwarding_method 1
<== Should I write gre or 1 ?</span><br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2">http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2</a><br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2">http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2</a><br>
<span style="white-space: pre;">> wccp2_return_method
1 <== Should I write gre or 1
?</span><br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2">http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2</a><br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2">http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2</a><br>
<span style="white-space: pre;">> wccp2_service standard
0 password=XXXX</span><br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2">http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2</a><br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2">http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2</a><br>
<span style="white-space: pre;">><br>
> I've also : ip tunnel add wccp0 mode gre remote 10.12.1.1
local 10.12.12.200 dev ens32<br>
><br>
> I received packet WCCP "Are you here - I see you..."<br>
><br>
> But i can't access on web with my client if Squid server is
UP and my access.log file stay empty... Could you help me ?</span><br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2">http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoAsaWccp2</a><br>
<a class="moz-txt-link-freetext" href="http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2">http://wiki.squid-cache.org/ConfigExamples/Intercept/CiscoIOSv15Wccp2</a><br>
<span style="white-space: pre;">><br>
><br>
> Best regards,<br>
><br>
> Maxime Lambert<br>
><br>
><br>
><br>
><br>
><br>
> _______________________________________________<br>
> squid-users mailing list<br>
> <a class="moz-txt-link-abbreviated" href="mailto:squid-users@lists.squid-cache.org">squid-users@lists.squid-cache.org</a><br>
> <a class="moz-txt-link-freetext" href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a></span><br>
<br>
-----BEGIN PGP SIGNATURE-----
<br>
Version: GnuPG v2
<br>
<br>
iQEcBAEBCAAGBQJXiSLyAAoJENNXIZxhPexGEFcIAMSKBWzRlc4mUQ6OZ2LHchLC
<br>
CC2b0q28Kg3U4dnOpM+wrHJaxAt363CTn2LTa7kHGUoKNmOGZqTZgH9KvcxYn2JB
<br>
8WYIg6oIdnsdHvWXkcfI99U6dvOCUOylc8u5cNtc6w0k6/p73IBHR9ZCHTTGfvhx
<br>
x6UxSrIDHUy448qsQkQwIy6BiO0S+Jt1bmAZ1j8toMB2ikPzNBW24utwWOVutEb3
<br>
XIvuebtyNAcYVu6+twCy3/DQKhjHzaaHCYZfPiXLsPtdnXbQD+SOVFNtjuQ0NWjA
<br>
9ebnv8FbZpuJL1o3H0F3xCuIJ8PePhbZAARjtP8fDfrIQMjFk01Ve9NvzhBZOcs=
<br>
=3Q2B
<br>
-----END PGP SIGNATURE-----
<br>
<br>
</body>
</html>