[squid-users] Squid Transparent WEB Captatif : Cisco ASA WCCP

[Maxime Lambert]

Hi everyone !! 

My issue is that i didn't received any data in access.log. I work on Ubuntu Server 16.04 with Squid 5.3.20 compiled with : 
./configure --prefix=/usr --localstatedir=/var --libexecdir=${prefix}/lib/squid --datadir=${prefix}/share/squid --sysconfdir=/etc/squid --with-default-user=proxy --with-logdir=/var/log/squid --with-pidfile=/var/run/squid.pid --with-openssl --enable-icmp --enable-linux-netfilter --enable-wccpv2 --enable-gnuregex --enable-xmalloc-statistics --enable-async-io --enable-delay-pools --enable-useragent-log --enable-kill-parent-hack --enable-htpc --enable-forw-via-db --enable-cache-digests --enable-dl-malloc --enable-time-hack --enable-ssl --enable-ssl-crtd 

This is my conf : 

Internet 
| 
| 10.12.3.200 
Cisco-ASA ----------------------- Squid Server 
| 10.12.1.1 
| 
/------------------------/ 
| 
| 10.12.2.18 
Client 

If my Squid server is UP my client can't go on web, else if my Squid server is DOWN he can surf on it. 

I've allow localnet 10.12.1.0/24. 
And i've tunnel GRE, and my Cisco saw it. 

squid.conf : 
... 
http_port 80 intercept <== Should I write intercept or transparent ? 
http_port 3128 
wccp_version 2 <== Should I write 2 or 4 ? 
wccp2_router 10.12.1.1 
wccp2_forwarding_method 1 <== Should I write gre or 1 ? 
wccp2_return_method 1 <== Should I write gre or 1 ? 
wccp2_service standard 0 password=XXXX 

I've also : ip tunnel add wccp0 mode gre remote 10.12.1.1 local 10.12.12.200 dev ens32 

I received packet WCCP "Are you here - I see you..." 

But i can't access on web with my client if Squid server is UP and my access.log file stay empty... Could you help me ? 


Best regards, 

Maxime Lambert 



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squid-cache.org/pipermail/squid-users/attachments/20160715/fab7e63f/attachment.html>