I need to be able to route the traffic coming from both remote sites, across the PtP and VPN connections, through the web filter. Browser proxy settings will not be used. It needs to be done at the 1841 router. I'm not looking for a complete solution, just point me in the right direction.
I am assuming your traffic is going to go back out the same port the VPN comes in on ?
Use WCCP if your web filter supports it. This makes it somewhat simpler to configure because most the configuration is done on the web proxy and it pushes rules to the router.
Use policy based routing on both input interfaces and match any traffic that would go to the internet and set the next hop to be the web proxy. The only hard part is to get the access list to match only traffic that you want the web proxy to handle and let the rest go directly to the internet or to your internal network. All depends on how big your internal network is and the number of protocols you are going to proxy.
Actually option 2 provided by tdaris looks like it is going to work. Had busy day yesterday so I haven't fully tested it yet. It appears I'm going to have to have something on the inside of the filter to use as the next hop though. It appears that the traffic is just bouncing off the filters interface and going right back out rather than passing through and being filtered. I did a traceroute so I know it's going to the filter. I've got something I'm going to try today that may resolve this issue.
[toc:faq]The ProblemOn traditional switches whenever we have a trunk
interface we use the VLAN tag to demultiplex the VLANs. The switch needs
to determine which MAC Address table to look in for a forwarding
decision. To do this we require the switch to do...
[toc:faq]Introduction:Netdr is a tool available on a RSP720, Sup720 or
Sup32 that allows one to capture packets on the RP or SP inband. The
netdr command can be used to capture both Tx and Rx packets in the
software switching path. This is not a substitut...
IntroductionOSPF, being a link-state protocol, allows for every router
in the network to know of every link and OSPF speaker in the entire
network. From this picture each router independently runs the Shortest
Path First (SPF) algorithm to determine the b...