[c-nsp] Force all users on a 5300 to one web server

[Corneliu Tanasa]

Yes, you can use an ip directly connected to the web server.

After you'll finish with policy routing, just keep in mind that those
packets are not pointed to that machine, so you'll need to mangle them, to
force your web server to process them, otherwise, the TCP/IP stack on that
machine will treat them as packets that needs to be routed and will forward
them to the appropriate destination (probably the default gateway) without
sending them to the application (http server).


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Melvin C. etheridge
Sent: Sunday, February 27, 2005 7:48 PM
To: Oliver Boehmer (oboehmer); Cisco-Nsp
Subject: Re: [c-nsp] Force all users on a 5300 to one web server

No it is not directly connected.....

Could I add a ip that is directly connected to the web server and redirect 
to that ip???

Thanks,

Mel

----- Original Message ----- 
From: "Oliver Boehmer (oboehmer)" <oboehmer at cisco.com>
To: "Melvin C. etheridge" <mele at enia.net>; "Cisco-Nsp" 
<cisco-nsp at puck.nether.net>
Sent: Sunday, February 27, 2005 12:44 PM
Subject: RE: [c-nsp] Force all users on a 5300 to one web server



Melvin C. etheridge <mailto:mele at enia.net> wrote on Sunday, February 27,
2005 6:42 PM:

> With this config:
>
> access-list 110 deny   tcp host 12.31.84.2 any eq www
> access-list 110 permit tcp any any eq www
>
> route-map HTTP-Redirect permit 10
>  match ip address 110
>  set ip next-hop 12.31.84.2

Is 12.31.84.2 directly connected? If it isn't, you need to do this
someplace else.

> interface FastEthernet0
>  ip address 12.173.156.2 255.255.255.0
>  ip access-group 131 out
>  ip policy route-map HTTP-Redirect

not needed here, only at your Group-Async

oli

>
>
> ----- Original Message -----
> From: "Melvin C. Etheridge" <mele at enia.net>
> To: "Oliver Boehmer (oboehmer)" <oboehmer at cisco.com>; "Cisco-Nsp"
> <cisco-nsp at puck.nether.net>
> Sent: Sunday, February 27, 2005 10:28 AM
> Subject: Re: [c-nsp] Force all users on a 5300 to one web server
>
>
>> I've tried policy routing but it's not working.
>>
>> I can still view other pages.
>>
>> Mel
>>
>> ----- Original Message -----
>> From: "Oliver Boehmer (oboehmer)" <oboehmer at cisco.com>
>> To: "Melvin C. Etheridge" <mele at enia.net>; "Cisco-Nsp"
>> <cisco-nsp at puck.nether.net> Sent: Saturday, February 26, 2005 1:27 PM
>> Subject: RE: [c-nsp] Force all users on a 5300 to one web server
>>
>>
>> Melvin C. Etheridge <> wrote on Saturday, February 26, 2005 7:12 PM:
>>
>>> How can I force all port 80 traffic on a 5300 to goto one ip
>>> address???
>>
>> On the AS5300, you could investigate policy-routing or WCCP..
>>
>> oli
>>
>>
>> --
>> No virus found in this incoming message.
>> Checked by AVG Anti-Virus.
>> Version: 7.0.300 / Virus Database: 266.5.0 - Release Date: 2/25/2005
>>
>>
>> _______________________________________________
>> cisco-nsp mailing list  cisco-nsp at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-nsp
>> archive at http://puck.nether.net/pipermail/cisco-nsp/
>>
>>
>> --
>> No virus found in this incoming message.
>> Checked by AVG Anti-Virus.
>> Version: 7.0.300 / Virus Database: 266.5.0 - Release Date: 2/25/2005
>>
>>
>
>
>
>
> --
> No virus found in this outgoing message.
> Checked by AVG Anti-Virus.
> Version: 7.0.300 / Virus Database: 266.5.0 - Release Date: 2/25/2005


-- 
No virus found in this incoming message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 266.5.0 - Release Date: 2/25/2005





-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.300 / Virus Database: 266.5.0 - Release Date: 2/25/2005

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/