Dear Squid team, I’m currently working on deploying Squid as a transparent proxy using WCCPv2 with a Cisco ASA firewall.
The ASA selects a router ID x.x.x.x automatically and uses GRE encapsulation. However, in my Squid configuration, I’m using wccp2_forwarding_method gre. I’ve confirmed that: - UDP traffic on port 2048 between Squid and the ASA is working correctly. - Squid receives WCCP messages (`HERE_I_AM`, `I_SEE_YOU`) but logs errors like: `ERROR: Ignoring WCCPv2 message: check failed: duplicate security definition` - ASA logs show that Squid is visible but marked as “NOT Usable” and gets 0% hash allocation. - I’m running Squid version 5.9 on Linux Ubuntu. Questions: 1. Is there a known issue when using `wccp2_forwarding_method gre` with devices that support GRE? 2. Could Squid gracefully fallback or detect ASA’s redirect mode automatically? 3. Is there a specific Squid version better suited for WCCPv2 with GRE only? Any insights, suggestions, or recommended configuration would be greatly appreciated. Thank you for your support and great work on Squid. Best regards, Assoham AWOUTOU MACHAERO -- ****************************************************************************** The information contained herein may be company confidential and proprietary. The information is intended only for the use of the named individual or entity. If you are not the intended recipient, the employee or agent responsible for delivering it to the intended recipient, you are hereby notified that any use, dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the sender (and delete it from your systems) immediately. The information herein is not warranted to be free of virus or any other defect that may affect the recipient's computer system and it is your responsibility to carry out appropriate virus checks of this email and attachments (if any). ******************************************************************************
_______________________________________________ squid-users mailing list squid-users@lists.squid-cache.org https://lists.squid-cache.org/listinfo/squid-users