Is it possible to redirect all web traffic to a Symantec web filtering address on a particular listening port. I had a look at the Srp527w Router and can't find where this could be done.
View 1 RepliesI have now the sa`s stablished between SRP527w and cisco 857, but If i ping from a host of Cisco side to a host of SRP side I get only rx traffic on the tunnel, the stats keep tx at 0 and ping is not answered.My tunnel is to send some voice call into IPSEC tunnel keeping DSCP bits, It comunicate SRP voice vlan with Cisco lan.
I have on SRP 2 vlans:
1 Vlan for data on ports 1,2 and 4
1 voice vlan on ports 1,2,3,4.
I connect a netbook to port 3 and I can connect to internet but I cant reach by ping the other side of the tunnel?Maybe traffic from voice vlan is being natted with data vlan ip address?I need all traffic must go into the tunnel without being natted, on cisco side I have a policy to avoid nat but don know if SRP have any problem about it too.All gateways are ok ?
I require a system that will support 3 VLANs, the VLANs are purely for containment of broadcast traffic and needs to support inter-VLAN communication between client devices. Would the following configuration work:
Port based VLAN on the SRP527W with each port connected to layer 2 switches serving each VLAN.
DHCP server on the SRP527W assigning IP addresses for each of the V LANS in different ranges. (eg 10.10.1.xx, 10.10.2.xx, 10.10.3.xx). Would there be any benefit upgrading the Router to a SRP547W?
We have offices in USA and Venezuela.In our USA office we have a RV042 router and in Venezuela we have a RV082 router.We have connected a VPN tunnel (gateway-to-gateway) between both offices.
The point is:How could we redirect the internet traffic from our Venezuela office (RV082) to the USA Office (RV042) to navigate using USA public IP's?
The reason for this is that we need to use online streaming services which are only available for IP's from USA and we can't use them from the Venezuelan IP's.
We can not use the PPTP option since the equipment which will use the streaming services (like hulu, crackle, etc.) in Venezuela is a Google TV device which doesn't allow the configuration of proxy navegation or PPTP VPN connections itself. That's the reason why we need to do that through the routers.
I'd like to create a site-to-site vpn between an SRP527 and an other vpn gateway. The problem is i don't see how to route all traffic from the local network (network defined by the lan ip interface of the SRP527) to the other vpn gateway? It seems to be only possible to define the destination network (accessible via the vpn) with ip/mask (but only for "small" network: for exemple i tried with 10.2.0.0 mask 255.255.0.0 and it's ok but i tried with 10.0.0.0 mask 255.0.0.0 -> it's not working. I obtain the message "invalid ip")
View 1 Replies View RelatedWe have W2K3 domain with Catalyst 4507 routers.Client (laptop, tablet etc) needs to redirect web traffic (port 80) to a proxy server that listens on port 8080.
Before you ask, this cannot be done using a PAC file distributed via Group Policy or the like because these devices are not controlled by us. These devices are client owned and could be non-Microsoft OS and/or non-IE browser. The theory is to have a WiFi network where clients can bring whatever they like - iPad, Android, Windows, whatever it may be but we do not control them and therefore cannot send a PAC file to it. In the case on Android it does not have a proxy setting even if we could force something.
I've looked at Policy Based Routing which appears to do half the job. I can route a web request that is on port 80 to a new location ie our proxy server. But the problem is that it arrives on the same port 80 when the proxy server only listens on port 8080.
i have the following scenario :
ISP1-------ASA 5510----------ISP2
|
|
|
LAN
i would like to use ISP2 for all http/https/ftp traffic.how could I force my ASA to set a different gateway for http/https/ftp traffic ?i have tried several solutions such as nat/pat rules, nothing seems to work.
We need to create Guest WLAN on WLC 5508 which will be used for internet access only. My questions are:
1. Is it possible to use our external web proxy server to authenticate users?
2. Can we also forward all traffic to the external web proxy to filter the websites that can be accessed (without configuring it on the browser)?
3. Can this be achieved using the L3 webauth?
Our topology:
WLC -- Switch -- ASA Firewall -- Internet -- External Web Proxy
We are using WLC as DHCP server for Guest WLAN with ASA Firewall as the gateway.
We want design a topology based on transparent proxies using WCCP. Our proxies can do spoofing of user ip addresses. So, the HTTP request will go out our network with the user ip address as source ip. The HTTP Response will arrive with destination address the user ip address. We want use WCCP to redirect inbound and outbound traffic because we have c3750 with L2 WCCP support. The outbound redirection, when the packet is going out our network is simple. But, the problem is the inbound redirection. How we redirect this packets to proxies by WCCP?. Is it possible?. This redirection is done by c3750 using TCAMs/hardware?. Our throughput could grow until 2-3Gbps and we are worried about the performance.
View 1 Replies View RelatedI have ASA5505 with bese-license. I like to install proxy sever in my network and i want redirect traffic to the proxy server.
Below i added configuration in my firewall.
ASA(config)#access-list wccp-servers permit ip host 192.168.6.10 any ASA(config)#access-list wccp-traffic permit ip 192.168.6.0 255.255.255.0 any ASA(config)#wccp web-cache group-list wccp-servers redirect-list wccp-traffic ASA(config)#wccp interface inside web-cache redirect in
furher configuration and if this configuration is enough, then how to check whther its working or not in my firewall.
i want to to ask about redirecting in MLS 7600 .assume the user a has an ip x.x.x.xand that user requested url...i want to to redirect his request to url...the users that have to pay the monthly bills , i want to give thim an ips and redirect all the http requests from this to a special local webpage .is is applicable to to it on router cisco 7600 ??or is it applicable on router 7206 npeg2 ? also i have siwtch 2960g.i dont want to do it by proxy server.
View 4 Replies View RelatedAt one of my field offices I want to redirect internet traffic down a separate DSL connection instead of having it ride the T1 back to the main office then going out. At this office I have a 2600 router, 3560 switch, with a Fortigate firewall in between DSL connection and LAN, Fa0/0 on router and firewall are both plugged in to switch. I have seen posts that mention PBR or static routes which is the reccomended method for dealing with this?
View 6 Replies View RelatedSo I have a proxy server in my home that all the computers use to access the internet (XP Pro). I edited the host file on the proxy to redirect traffic for various reasons (ad blocking, etc.) But I have noticed that it doesn't seem to affect the computers that use the proxy. For example one entry in the host file could be 127.0.0.1 abc123.com so that abc123.com would loopback to the localhost. For some reason this isn't working. Is there anyway to get this to work without changing the host file on each individual computer?
View 3 Replies View RelatedI am unable to redirect the HTTPS traffic on my cisco router with WCCP V2
View 2 Replies View RelatedOn a Catalyst 6509 switch I have configured wccp protocol in order to redirect the Http traffic to a Bluecoat SG8100. It was working fine until a new L3 interface implementation.Thereafter I was unable to redirect the http traffic due to an error reported from the Cat6509: [code] After some checks I supposed that the problem should be the UDP 2048 port connection between the Switch and the Bluecoat while the switch L3 port and the bluecoat are on the same Lan. A deep analysis found that the WCCP protocol seems to be as follow:
-Proxy address 10.64.28.240 to Switch Port 10.64.28.250 Here I Am
-Switch Port 10.64.28.250 to Proxy address 10.64.28.240 I See You
-Switch Port 10.66.0.251 to Proxy address 10.64.28.240 UDP 2048 packet (dropped by firewall)
It's strange to me that the first dialog is correctly handled by the correct Cat6509 interface while the UDP packets are flowing from another Vlan interface not configured with the WCCP and apparently not involved on the protocol.Last of all the WCCP is now disabled and unusable?
I want to redirect internal web traffic (browsing) to an external web server for Web, Virus and Spyware filtering. Those externals proxies are running in 8080 port. I have one ASA firewall and a Cisco 2600 router. I was thinking in doing PBR in the router but in the next hop I can only set one IP, not an IP and a port. So how can I redirect web traffic to an external proxy listening in 8080 port?
View 11 Replies View RelatedRight now, in my network there is no proxy server and all users go straight through the ASA to access internet. I would like to put a squid with dansguardian (for web filtering). Steps in getting all http and https traffic from ASA go via my squid?
View 18 Replies View RelatedI am using ASA5510 and i want to know if it is possible to redirect http traffic to an internal proxy software. I explain : PC from the LAN use a internal proxy in their IE browser but some other PC doesn't use it.They are directy connected to the Internet using the Public IP from the WAN interface ( via NAT). Can we redirected this HTTP Traffic from the WAN interface to the Proxy in the LAN ?
Http Traffic will be routed like that : PC -> WAN interface -> Proxy -> WAN interface -> Internet In fact,can we create a rule saying : All http traffic which doesn"t come from the IP Proxy must be redirected toward proxy.
I have got a Cisco router connected to a LAN and to the internet.I was wondering if I could nat https traffic from inside to internet to a local server (Proxy) on a given port for example tcp 8080.
int tunnel0
ip address 192.168.0.1 255.255.255.0
ip nat inside
int fa0/1
des internet connexion
ip address 41.x.x.x.x 255.255.255.248
ip nat outside
ip access-list extended Proxy_Redirect
permit tcp 192.168.0.0 0.0.0.255 any eq 443
In our USA office we have a RV042 router and in Venezuela we have a RV082 router. We have connected a VPN tunnel (gateway-to-gateway) between both offices.
The point is: How could we redirect the internet traffic from our Venezuela office (RV082) to the USA Office (RV042) to navigate using USA public IP's?
The reason for this is that we need to use online streaming services which are only available for IP's from USA and we can't use them from the Venezuelan IP's.
We can not use the PPTP option since the equipment which will use the streaming services (like hulu, crackle, etc.) in Venezuela is a Google TV device which doesn't allow the configuration of proxy navegation or PPTP VPN connections itself. That's the reason why we need to do that through the routers.
I am facing problem with ACE configuration. I want to redirect 443 traffic to my Proxy Server. But I am not able to do this. I want to redirect only subnet 192.168.80.0/24..Then only it is working but I dont have to have this policy to be applied on all the users only one subnet I want to have under HTTPS policy.
how can I apply the policy only on specific subnet so that port 443 traffic can be redirect and rest of all subnets can go direclty to Internet.
if the SRP527W supports QOS over a site to site VPN.
SITE A will have the main phone system and SITE B will have a couple of phones which hook into the SITE A phone system over the existing IPSEC VPN
Need to be able to set some type of QOS over the VPN connection.
I have a SRP527W router connected to a L2 managed switch (a TP-Link... I know, it is not a Cisco...). and a PC and a Printer connected to the switch. Now, I want to have the PC and the printer on 2 VLANs.
I've created 2 VLANs on the SRP (192.168.1.0/24 and 192.168.2.0/24) and I have assigned Lan port 1 to both. The SRP acts a DHCP server so I have the SRP setup as 192.168.1.1 and 192.168.2.1 providing IP addresses to the 2 VLANs.
I setup VLAN 1 and 2 on the switch, assigning port 2 to VLAN 1 and port 3 to VLAN 2 (port 1 is trunk and connects to the SRP).
When I fire up the PC and printer they get their respective VLANs correct addresses (PC: 192.168.1.30 and printer: 192.168.2.30) but I cannot for the love of Odin see the printer from the PC. The SRP has Inter VLAN routing enabled. By the way, the switch has address 192.168.1.2
I have a network which is based upon a 4507 Core/Dist switch, with 1G fibre to a bunch of radially connected 2960 Access switches. It all works fine and as expected for data and telephony.I have been tasked with setting up one of the VLANs to support multicast, so a bunch of video streams will be injected at the 4507, and will be delivered to client PCs connected to the 2960 switches.The 4507 is running with SVIs to some VLANs, but the VLAN that will have the Multicast on it is isolated, with no SVI.I could change this if required,I need to run IGMP snooping, and probably deploy CGMP to take advantage of the Cisco-proprietary functionaity.
View 4 Replies View RelatedI've got a new Cisco srp527w-u router which is working fine though it's syncing at a lower rate than my Billion (6mbps vs. 8.5 mbps for the billion on the same line). I had tweaked the billion way back to connect with a 4db SNR margin and almost certainly this is why it achieves the higher rate (by comparison the cisco is syncing with an snr margin of 12db). Is there some way that I can configure it to use a lower SNR margin? I realize this might reduce connection stability but I'd at least like to be able to give it a try if possible.
View 2 Replies View RelatedI recently bought a Cisco SRP527W and I'm trying to setup a second wireless network for guests.
I created a "guest" VLAN and I assigned the "guest" SSID which I have created.
I created a "guest" DHCP server and assigned it to the "guest" VLAN.
The "guest" SSID is set to broadcast and has WPA2 Personal (TKIP+AES) authentication. These are exactly the same settings I have for the "non-guest" WiFi.
However, I can't get my clients to connect to the network. The "guest" WiFi is visible and clients are prompted to enter the password but after that they end up with an APIPA address. When I move the "guest" SSID to VLAN1 (along with all the other networks) then it works absolutely fine.
I was just wondering if I'm simply missing something in the configuration ..
The device is running the latest firmware (1.01.24 (003) September 7, 2011)
DHCP server has DNS Proxy setting enabled and WAN Interface configured as "Default Route" (have basically replicated the same settings as VLAN1)
my client has just had the above router supplied by telstra and upon setup can no longer access filemaker server which was accessed prior on their netgear router. I have port forwarded to 5003 and 16000 as per the previous setup. Is there another setting somewhere that i am missing like perhaps static ip or something. I might add that networking is not my strong point.
View 7 Replies View RelatedI've just received a new SRP527W-U-E-K9 router to replace an old D-link router. However Apple IOS devices are not discoverable by iTunes on a Windows PC. The PC is connected to SRP527 by wired ethernet. All IOS devices are on the same SSID and the same VLAN as the wired ethernet devices.I have been reading on several other threads in this site about this exact same problem. The fault was that multicast broadcasts were not being forwarded between wired ethernet and WiFi on the same vlan. url...
The fault in thie above thread was resolved by a firmware update MR3 (v1.1.19) last year however it appears that the SRP527W-U has slightly different firmware to this version.The configuration of my SRP527 is the same as the original poster's config in the above thread. [code] The version information of my SRP is embedded below. As it is brand new, I assume that it is the most recent firmware, so I would have assumed that the bug which was resolved in the above thread above would be incorporated in this firmware version. [code] Is Cisco aware of this problem and is there any other firmware that I can load onto my model of SRP to resolve this?
I have a Cisco SRP527W at my remote office set up. I have configered a VPN connection to it. I installed Cisco VPN Client on my laptop.I can connect to the VPN but can not access the shared folders. I can ping the PC that has the shared folders. I take my PC and connect to the onsite LAN with WIFI, and I can now view the shared folders. I assume it must be somthing in the VPN set up that is blocking the shared folders from being seen. I also have disconnect all firewalls during testing at the remote end. I'am using windows 7 (64) on both PC's.
View 6 Replies View RelatedI've just purchased a SRP527w router and loaded the new firmware which includes the 5 client VPN server function.
The function works great with my iPhone as a client, but I've been unable to make a connection from my Windows 7 laptop, as the built in VPN configuration doesn't have anywhere to put the group name.
Is there a VPN client, or is there some way to get the Windows 7 native VPN configuration to work?
We have a SRP527W, we have created VLAN for DATA and VOICE remotly connected to an office by VPN.
VPN is working fine.
Now we want to register SIP lines integrated in SRP527W to a Cisco Call Manager located in our office.
The problem is that the source of SIP packets is WAN interface of the SRP527W, so packet wont pass in the VPN. Is possible to change the IP source of the SIP registration ? The most useful will be to set the IP source SIP on the voice VLAN.
I'm wanting to use the SRP527W (from Telstra) to route a block of assigned internet addresses (/29) over the WAN internet IP address. Is this possible on the 527W, or does it only do NAT routing?
View 6 Replies View RelatedI have a pair of SRP527W-U units, which each connect to a separate ISP by ADSL2+ . I am attempting to use each simultaneously as follows:
ISP-A via Cisco A for general traffic, and to run HTTP server X
ISP-B via Cisco B to run HTTP server Y
HTTP servers X and Y are on one machine, but binding to two separate IP addresses eg x.x.x.3 and x.x.x.4 . In a situation like this, I would normally configure Cisco A and Cisco B with x.x.x.1 and x.x.x.2 respectively. CiscoA would run DMZ to x.x.x.3 and Cisco B DMZ to x.x.x.4. The server would use x.x.x.1 as the default route. Then I would set Cisco A to have a policy route catching source address x.x.x.4 and sending it to next-hop/gateway x.x.x.2.
BUT, the policy route feature requires traffic be sent out the WAN port or a tunnel (no next hop, only WAN side VLANs, tunnels or interfaces). configuring a GRE tunnel connecting the two routers is fruitless, and the tunnels refuse to be created on the LAN side (tunneling is only possible out the WAN).
Attempting to simultaneously use the 4th LAN/WAN port in WAN mode also fails, as the WAN port is only available when the ADSL port is not. Under Win2000 and Linux it was possible to configure two separate network cards and use seperate sub nets, each with a default route. This feature no longer works with more recent versions of Windows.
How I might get this working, without buying a 887? I am open to buying a 547.