[c-nsp] Transparent Proxy

a. rahman isnaini r.sutan risnaini at indo.net.id
Mon Jul 21 23:16:47 EDT 2008


Yap, use WCCP.


Your config below is not tranparent.
Once your proxy down, all 80 failed.

rgs
a. rahman isnaini rangkayo sutan

Arie Vayner (avayner) wrote:
> Hi,
> 
> Take a look at WCCP. It should be supported on most of the proxy servers
> out there:
> http://www.cisco.com/en/US/docs/ios/ipapp/configuration/guide/ipapp_wccp
> _ps6350_TSD_Products_Configuration_Guide_Chapter.html
> 
> Arie 
> 
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net
> [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Rhino Lists
> Sent: Monday, July 21, 2008 19:16 PM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] Transparent Proxy
> 
> I don't know what I am doing wrong trying to set this up, I want to
> filter all port 80 traffic through a proxy.
> 
> I have a 3662 configured the following way:
> 
> Int f0/0
>  Main Internet Feed
> 
> Int f/01
>  Network Users (That I want to force through a Proxy)  ip policy
> route-map our-proxy
> 
> access-list 111 deny   tcp any any neq www
> access-list 111 deny   tcp host 192.168.1.188 any
> access-list 111 permit tcp any any log
> route-map our-proxy permit 10
>  match ip address 111
>  set ip next-hop 192.168.1.188
> 
> 
> 
> 
> 
> 
> 
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
> 
> 
> 


More information about the cisco-nsp mailing list