RE: Transparent proxying woes (IOS 11.1(12) on a 4500)

From: Chris Tilbury <Chris.Tilbury@dont-contact.us>
Date: Mon, 12 Jun 2000 17:49:26 +0100

| -----Original Message-----
| From: Ahsan Khan [mailto:ahsank@one.net.pk]
| Sent: Monday, June 12, 2000 5:48 PM
| To: Chris Tilbury; squid-users@ircache.net
| Subject: Re: Transparent proxying woes (IOS 11.1(12) on a 4500)
|
|
| Please Let me know the Access list ??? What are commands there is it eq or
| neq.?

The full details are

access-list 120 deny tcp any any neq www
access-list 120 deny tcp host 137.205.8.1 any
access-list 120 permit tcp any any

(137.205.8.1 is our web cache) along with the policy stuff (posted earlier,
repeated here)

route-map proxy-redirect permit 10
 match ip address 120
 set ip next-hop 137.205.8.1

I take this to mean that any TCP traffic from anywhere to anywhere that
doesn't == port 80 doesn't match; that any TCP traffic from our cache
doesn't match; finally, anything else left here _does_ match.

Chris

--
Chris Tilbury, IT Services, University of Warwick, Coventry, UK
PHONE: 024 7652 3365 / FAX: 024 7652 2367 / MAIL:
Chris.Tilbury@warwick.ac.uk
Received on Mon Jun 12 2000 - 10:53:13 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 16:54:00 MST