Hi,

I'm having problems getting my cisco 806 to proxy to squid.

Here is the config:

access-list 120 deny   tcp any any neq www
access-list 120 deny   tcp host 192.168.23.26 any
access-list 120 permit tcp any any

route-map proxy-redirect permit 10
match ip address 120
set ip next-hop 192.168.23.26

interface Ethernet0
ip address 192.168.23.1 255.255.255.0
ip nat inside
no cdp enable
hold-queue 32 in
ip policy route-map proxy-redirect


So, I am running squid on my mac (192.168.23.26) I'm running a tcp
dump, but I can see no port 80 packets from the cisco, did I miss
something?

If I understand correctly with this config, anything on the
192.168.23.x network that sends port 80/443 packets will get redirected
to 192.168.23.26 which is listening on 80

Squid workes, I can proxy through it if I set up my browser to use it,
but it seems the cisco is not proxying the packets.


sb

[ Post a follow-up to this message ]

access-list 120 deny   tcp host 192.168.23.26 any

route-map proxy-redirect permit 10
> match ip address 120
> set ip next-hop 192.168.23.26

It's staring me in the face.. Your 806 is'nt stateful  so it cant return the
traffic.. and as its a route-map the line should read PERMIT..



<scubabri@gmail.com> wrote in message
news:1128129586.388446.9650@g44g2000cwa.googlegroups.com...
> Hi,
>
> I'm having problems getting my cisco 806 to proxy to squid.
>
> Here is the config:
>
> access-list 120 deny   tcp any any neq www
> access-list 120 deny   tcp host 192.168.23.26 any
> access-list 120 permit tcp any any
>
> route-map proxy-redirect permit 10
> match ip address 120
> set ip next-hop 192.168.23.26
>
> interface Ethernet0
> ip address 192.168.23.1 255.255.255.0
> ip nat inside
> no cdp enable
> hold-queue 32 in
> ip policy route-map proxy-redirect
>
>
> So, I am running squid on my mac (192.168.23.26) I'm running a tcp
> dump, but I can see no port 80 packets from the cisco, did I miss
> something?
>
> If I understand correctly with this config, anything on the
> 192.168.23.x network that sends port 80/443 packets will get redirected
> to 192.168.23.26 which is listening on 80
>
> Squid workes, I can proxy through it if I set up my browser to use it,
> but it seems the cisco is not proxying the packets.
>
>
> sb
>

[ Post a follow-up to this message ]