Fortinet black logo

CLI Reference

config system wccp

config system wccp

Configure WCCP.

config system wccp
    Description: Configure WCCP.
    edit <service-id>
        set cache-id {ipv4-address}
        set group-address {ipv4-address-multicast}
        set router-list {user}
        set ports-defined [source|destination]
        set ports {user}
        set authentication [enable|disable]
        set password {password}
        set cache-engine-method [GRE|L2]
        set service-type [auto|standard|...]
        set primary-hash [src-ip|dst-ip|...]
        set priority {integer}
        set protocol {integer}
        set assignment-weight {integer}
        set assignment-bucket-format [wccp-v2|cisco-implementation]
        set assignment-method [HASH|MASK|...]
        set assignment-srcaddr-mask {ipv4-netmask-any}
        set assignment-dstaddr-mask {ipv4-netmask-any}
    next
end

config system wccp

Parameter

Description

Type

Size

cache-id

IP address known to all routers. If the addresses are the same, use the default 0.0.0.0.

ipv4-address

Not Specified

group-address

IP multicast address used by the cache routers. For the FortiProxy to ignore multicast WCCP traffic, use the default 0.0.0.0.

ipv4-address-multicast

Not Specified

router-list

IP addresses of one or more WCCP routers.

user

Not Specified

ports-defined

Match method.

option

-

Option

Description

source

Source port match.

destination

Destination port match.

ports

Service ports.

user

Not Specified

authentication

Enable/disable MD5 authentication.

option

-

Option

Description

enable

Enable MD5 authentication.

disable

Disable MD5 authentication.

password

Password for MD5 authentication.

password

Not Specified

cache-engine-method

Method used to forward traffic to the routers or to return to the cache engine.

option

-

Option

Description

GRE

GRE encapsulation.

L2

L2 rewrite.

service-type

WCCP service type used by the cache server for logical interception and redirection of traffic.

option

-

Option

Description

auto

auto

standard

Standard service.

dynamic

Dynamic service.

primary-hash

Hash method.

option

-

Option

Description

src-ip

Source IP hash.

dst-ip

Destination IP hash.

src-port

Source port hash.

dst-port

Destination port hash.

priority

Service priority.

integer

Minimum value: 0 Maximum value: 255

protocol

Service protocol.

integer

Minimum value: 0 Maximum value: 255

assignment-weight

Assignment of hash weight/ratio for the WCCP cache engine.

integer

Minimum value: 0 Maximum value: 255

assignment-bucket-format

Assignment bucket format for the WCCP cache engine.

option

-

Option

Description

wccp-v2

WCCP-v2 bucket format.

cisco-implementation

Cisco bucket format.

assignment-method

Hash key assignment preference.

option

-

Option

Description

HASH

HASH assignment method.

MASK

MASK assignment method.

any

HASH or MASK.

assignment-srcaddr-mask

Assignment source address mask.

ipv4-netmask-any

Not Specified

assignment-dstaddr-mask

Assignment destination address mask.

ipv4-netmask-any

Not Specified

config system wccp

Configure WCCP.

config system wccp
    Description: Configure WCCP.
    edit <service-id>
        set cache-id {ipv4-address}
        set group-address {ipv4-address-multicast}
        set router-list {user}
        set ports-defined [source|destination]
        set ports {user}
        set authentication [enable|disable]
        set password {password}
        set cache-engine-method [GRE|L2]
        set service-type [auto|standard|...]
        set primary-hash [src-ip|dst-ip|...]
        set priority {integer}
        set protocol {integer}
        set assignment-weight {integer}
        set assignment-bucket-format [wccp-v2|cisco-implementation]
        set assignment-method [HASH|MASK|...]
        set assignment-srcaddr-mask {ipv4-netmask-any}
        set assignment-dstaddr-mask {ipv4-netmask-any}
    next
end

config system wccp

Parameter

Description

Type

Size

cache-id

IP address known to all routers. If the addresses are the same, use the default 0.0.0.0.

ipv4-address

Not Specified

group-address

IP multicast address used by the cache routers. For the FortiProxy to ignore multicast WCCP traffic, use the default 0.0.0.0.

ipv4-address-multicast

Not Specified

router-list

IP addresses of one or more WCCP routers.

user

Not Specified

ports-defined

Match method.

option

-

Option

Description

source

Source port match.

destination

Destination port match.

ports

Service ports.

user

Not Specified

authentication

Enable/disable MD5 authentication.

option

-

Option

Description

enable

Enable MD5 authentication.

disable

Disable MD5 authentication.

password

Password for MD5 authentication.

password

Not Specified

cache-engine-method

Method used to forward traffic to the routers or to return to the cache engine.

option

-

Option

Description

GRE

GRE encapsulation.

L2

L2 rewrite.

service-type

WCCP service type used by the cache server for logical interception and redirection of traffic.

option

-

Option

Description

auto

auto

standard

Standard service.

dynamic

Dynamic service.

primary-hash

Hash method.

option

-

Option

Description

src-ip

Source IP hash.

dst-ip

Destination IP hash.

src-port

Source port hash.

dst-port

Destination port hash.

priority

Service priority.

integer

Minimum value: 0 Maximum value: 255

protocol

Service protocol.

integer

Minimum value: 0 Maximum value: 255

assignment-weight

Assignment of hash weight/ratio for the WCCP cache engine.

integer

Minimum value: 0 Maximum value: 255

assignment-bucket-format

Assignment bucket format for the WCCP cache engine.

option

-

Option

Description

wccp-v2

WCCP-v2 bucket format.

cisco-implementation

Cisco bucket format.

assignment-method

Hash key assignment preference.

option

-

Option

Description

HASH

HASH assignment method.

MASK

MASK assignment method.

any

HASH or MASK.

assignment-srcaddr-mask

Assignment source address mask.

ipv4-netmask-any

Not Specified

assignment-dstaddr-mask

Assignment destination address mask.

ipv4-netmask-any

Not Specified