[c-nsp] URL redirects with IOS

a. Rahman Isnaini r. Sutan risnaini at indo.net.id
Tue Apr 4 22:16:52 EDT 2006


Use Route-Map with acl match the specific traffic (source & destination).
Set next hop to your firewall. (make sure your firewall always on).


Salam,
a. Rahman Isnaini r. Sutan



----- Original Message ----- 
From: "Michael K. Smith" <mksmith at adhost.com>
To: "Michael Smith" <mksmith at adhost.com>; "Mike" <networkslave2 at gmail.com>; 
<cisco-nsp at puck.nether.net>
Sent: Wednesday, April 05, 2006 2:02 AM
Subject: Re: [c-nsp] URL redirects with IOS


>
>
>
> On 4/4/06 11:51 AM, "Michael K. Smith" <mksmith at adhost.com> wrote:
>
>>
>>
>>
>> On 4/4/06 11:43 AM, "Mike" <networkslave2 at gmail.com> wrote:
>>
>>> Hello All,
>>>
>>> Does anyone know a good/solid way to redirect sub domains or full 
>>> domains
>>> with Cisco IOS? Other solutions that dont require purchasing CSS welcome 
>>> as
>>> too.
>>>
>>> Example: we would like to force all traffic destined for video.yahoo.com 
>>> to
>>> a specific firewall.
>>>
>>> Thanks,
>>> Mike
>>
>> Hello:
>>
>> You could use source routing to direct traffic destined the the Yahoo
>> address to the interface of your choosing.  If the IP changes or is in a
>> round-robin configuration you may have to write something to query DNS 
>> and
>> then modify your routing tables on the fly using Expect or something
>> similar.
>>
>> Mike
>>
>
> I apologize for replying to my own post.  That should read source-based
> policy routing, not source routing.  In fact, it should just read policy
> routing since the interesting traffic is the destination.  Someone was 
> kind
> enough to point that out.
>
> Thanks,
>
> Mike
>
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 



More information about the cisco-nsp mailing list