Re: Transparent Proxy Support on Cisco / Bay via Policy Based Routing

In article <01BCC693.E6E08FE0@ppp-206-170-4-206.wnck11.pacbell.net>,
John Scharber <jscharbe@pacbell.net> wrote:
>Does anyone know if there is a way to use the policy based routing
>features of the Cisco or Bay products to redirect FTP/HTTP traffic
>to a proxy server ?

I have never tried it, but I think on a Cisco you should be able to
do it with a route map like:

access-list 110 deny tcp host 1.2.3.4 any eq 80 (squid ip addr)
access-list 110 permit tcp any any eq 80

route-map redir permit 10
  match ip address 110
  set ip next-hop 1.2.3.4 (squid ip addr)
route-map redir permit 20

And then on your ethernet interface

interface ether 0
  ip policy route-map redir

I'm not quite sure if you can match on ports instead of just ip addresses..

Mike.

-- 
| Miquel van Smoorenburg |                                                    |
| miquels@cistron.nl     | Owners of digital watches, your days are numbered. |
|     PGP fingerprint: FE 66 52 4F CD 59 A5 36  7F 39 8B 20 F1 D6 74 02       |