1. I would like to use proxy ip address located in Injection vlan, Is it possible?, Generally, the proxy ip was in Hijacking vlan, But I don't , I want to use injection vlan ip address to proxy ip.
2. anonymous try to connect to our guard. so we denied that connection on msfc hijacking vlan by acl, currently our Guard configured to Public ip address announced by bgp.Finally, We make a private ip address to setup our Guard. Is it no problem by using private ip adddress?
Please Let me know if there is anything I can do for you by following tag story.
The proxy ip address is used to establish connection with the zone in strong mode, so it is up to you to make sure that the address is routable from the zone back to the guard. Usually we recommend to configure it on subnet of the injection vlan.