Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    6.2.3
    7.6.0
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.2.0
    7.0.16
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    7.0.6
    7.0.5
    7.0.4
    7.0.3
    7.0.2
    7.0.1
    7.0.0
    6.4.15
    6.4.14
    6.4.13
    6.4.12
    6.4.11
    6.4.10
    6.4.9
    6.4.8
    6.4.7
    6.4.6
    6.4.5
    6.4.4
    6.4.3
    6.4.2
    6.4.1
    6.4.0
    6.2.16
    6.2.15
    6.2.14
    6.2.13
    6.2.12
    6.2.11
    6.2.10
    6.2.9
    6.2.8
    6.2.7
    6.2.6
    6.2.5
    6.2.4
    6.2.3
    6.2.2
    6.2.1
    6.0.0
    5.6.0
    5.4.0
    5.2.0
    5.0.0

    system wccp

    Configure WCCP.

      config system wccp
      Description: Configure WCCP.
      edit <service-id>
          set router-id {ipv4-address}
          set cache-id {ipv4-address}
          set group-address {ipv4-address-multicast}
          set server-list {user}
          set router-list {user}
          set ports-defined [source|destination]
          set server-type [forward|proxy]
          set ports {user}
          set authentication [enable|disable]
          set password {password}
          set forward-method [GRE|L2|...]
          set cache-engine-method [GRE|L2]
          set service-type [auto|standard|...]
          set primary-hash {option1}, {option2}, ...
          set priority {integer}
          set protocol {integer}
          set assignment-weight {integer}
          set assignment-bucket-format [wccp-v2|cisco-implementation]
          set return-method [GRE|L2|...]
          set assignment-method [HASH|MASK|...]
          set assignment-srcaddr-mask {ipv4-netmask-any}
          set assignment-dstaddr-mask {ipv4-netmask-any}
      next
  end

    config system wccp

    Parameter Name Description Type Size
    router-id IP address known to all cache engines. If all cache engines connect to the same FortiGate interface, use the default 0.0.0.0. ipv4-address Not Specified
    cache-id IP address known to all routers. If the addresses are the same, use the default 0.0.0.0. ipv4-address Not Specified
    group-address IP multicast address used by the cache routers. For the FortiGate to ignore multicast WCCP traffic, use the default 0.0.0.0. ipv4-address-multicast Not Specified
    server-list IP addresses and netmasks for up to four cache servers. user Not Specified
    router-list IP addresses of one or more WCCP routers. user Not Specified
    ports-defined Match method.
    source: Source port match.
    destination: Destination port match.
    		 option -
    server-type Cache server type.
    forward: Forward server.
    proxy: Proxy server.
    		 option -
    ports Service ports. user Not Specified
    authentication Enable/disable MD5 authentication.
    enable: Enable MD5 authentication.
    disable: Disable MD5 authentication.
    		 option -
    password Password for MD5 authentication. password Not Specified
    forward-method Method used to forward traffic to the cache servers.
    GRE: GRE encapsulation.
    L2: L2 rewrite.
    any: GRE or L2.
    		 option -
    cache-engine-method Method used to forward traffic to the routers or to return to the cache engine.
    GRE: GRE encapsulation.
    L2: L2 rewrite.
    		 option -
    service-type WCCP service type used by the cache server for logical interception and redirection of traffic.
    auto: auto
    standard: Standard service.
    dynamic: Dynamic service.
    		 option -
    primary-hash Hash method.
    src-ip: Source IP hash.
    dst-ip: Destination IP hash.
    src-port: Source port hash.
    dst-port: Destination port hash.
    		 option -
    priority Service priority. integer Minimum value: 0 Maximum value: 255
    protocol Service protocol. integer Minimum value: 0 Maximum value: 255
    assignment-weight Assignment of hash weight/ratio for the WCCP cache engine. integer Minimum value: 0 Maximum value: 255
    assignment-bucket-format Assignment bucket format for the WCCP cache engine.
    wccp-v2: WCCP-v2 bucket format.
    cisco-implementation: Cisco bucket format.
    		 option -
    return-method Method used to decline a redirected packet and return it to the FortiGate.
    GRE: GRE encapsulation.
    L2: L2 rewrite.
    any: GRE or L2.
    		 option -
    assignment-method Hash key assignment preference.
    HASH: HASH assignment method.
    MASK: MASK assignment method.
    any: HASH or MASK.
    		 option -
    assignment-srcaddr-mask Assignment source address mask. ipv4-netmask-any Not Specified
    assignment-dstaddr-mask Assignment destination address mask. ipv4-netmask-any Not Specified
    Previous
    Next

    system wccp

    Configure WCCP.

      config system wccp
      Description: Configure WCCP.
      edit <service-id>
          set router-id {ipv4-address}
          set cache-id {ipv4-address}
          set group-address {ipv4-address-multicast}
          set server-list {user}
          set router-list {user}
          set ports-defined [source|destination]
          set server-type [forward|proxy]
          set ports {user}
          set authentication [enable|disable]
          set password {password}
          set forward-method [GRE|L2|...]
          set cache-engine-method [GRE|L2]
          set service-type [auto|standard|...]
          set primary-hash {option1}, {option2}, ...
          set priority {integer}
          set protocol {integer}
          set assignment-weight {integer}
          set assignment-bucket-format [wccp-v2|cisco-implementation]
          set return-method [GRE|L2|...]
          set assignment-method [HASH|MASK|...]
          set assignment-srcaddr-mask {ipv4-netmask-any}
          set assignment-dstaddr-mask {ipv4-netmask-any}
      next
  end

    config system wccp

    Parameter Name Description Type Size
    router-id IP address known to all cache engines. If all cache engines connect to the same FortiGate interface, use the default 0.0.0.0. ipv4-address Not Specified
    cache-id IP address known to all routers. If the addresses are the same, use the default 0.0.0.0. ipv4-address Not Specified
    group-address IP multicast address used by the cache routers. For the FortiGate to ignore multicast WCCP traffic, use the default 0.0.0.0. ipv4-address-multicast Not Specified
    server-list IP addresses and netmasks for up to four cache servers. user Not Specified
    router-list IP addresses of one or more WCCP routers. user Not Specified
    ports-defined Match method.
    source: Source port match.
    destination: Destination port match.
    		 option -
    server-type Cache server type.
    forward: Forward server.
    proxy: Proxy server.
    		 option -
    ports Service ports. user Not Specified
    authentication Enable/disable MD5 authentication.
    enable: Enable MD5 authentication.
    disable: Disable MD5 authentication.
    		 option -
    password Password for MD5 authentication. password Not Specified
    forward-method Method used to forward traffic to the cache servers.
    GRE: GRE encapsulation.
    L2: L2 rewrite.
    any: GRE or L2.
    		 option -
    cache-engine-method Method used to forward traffic to the routers or to return to the cache engine.
    GRE: GRE encapsulation.
    L2: L2 rewrite.
    		 option -
    service-type WCCP service type used by the cache server for logical interception and redirection of traffic.
    auto: auto
    standard: Standard service.
    dynamic: Dynamic service.
    		 option -
    primary-hash Hash method.
    src-ip: Source IP hash.
    dst-ip: Destination IP hash.
    src-port: Source port hash.
    dst-port: Destination port hash.
    		 option -
    priority Service priority. integer Minimum value: 0 Maximum value: 255
    protocol Service protocol. integer Minimum value: 0 Maximum value: 255
    assignment-weight Assignment of hash weight/ratio for the WCCP cache engine. integer Minimum value: 0 Maximum value: 255
    assignment-bucket-format Assignment bucket format for the WCCP cache engine.
    wccp-v2: WCCP-v2 bucket format.
    cisco-implementation: Cisco bucket format.
    		 option -
    return-method Method used to decline a redirected packet and return it to the FortiGate.
    GRE: GRE encapsulation.
    L2: L2 rewrite.
    any: GRE or L2.
    		 option -
    assignment-method Hash key assignment preference.
    HASH: HASH assignment method.
    MASK: MASK assignment method.
    any: HASH or MASK.
    		 option -
    assignment-srcaddr-mask Assignment source address mask. ipv4-netmask-any Not Specified
    assignment-dstaddr-mask Assignment destination address mask. ipv4-netmask-any Not Specified
    Previous
    Next