04-19-2012 04:56 AM - edited 03-04-2019 04:04 PM
Hello,
This is my first post and I hoped that someone could point me in the right direction.
Is there a method for translating all destination port 80 traffic from any hosts on a given subnet, to a different ip address and port? For example, a client attempts to make a connection to destination ip address 10.1.1.200 on port 80, is it possible to NAT this destination address to 10.4.5.50 on port 8080 instead? I know that something similar can be done for static NAT on a one-to-one basis, but is there a way of doing this for the whole subnet? The reason for this is to force some of our guest devices (such as iPads) to go through a transparent proxy without the guests having to configure their web browser to point at a proxy directly. As the web traffic from these devices would naturally try to connect to a destination port of 80, we want it to be the ip address and port of the transparent proxy instead, but done without the user having to change anything.
Hope that makes some sense, if anyone has a clue what I am trying to achieve, any comments would be appreciated.
Cheers
Solved! Go to Solution.
04-19-2012 05:31 AM
Hi ,
The easiest way is to use , PBR.
ip access-li ex ACL-WWW
permit tcp client-class/ip any eq http
permit tcp client-class/ip any eq https
route-map RM-WWW
match ip address ACL-WWW
set ip next-hop
interface CLIENT
ip policy route-map RM-WWW
Dan
04-19-2012 05:31 AM
Hi ,
The easiest way is to use , PBR.
ip access-li ex ACL-WWW
permit tcp client-class/ip any eq http
permit tcp client-class/ip any eq https
route-map RM-WWW
match ip address ACL-WWW
set ip next-hop
interface CLIENT
ip policy route-map RM-WWW
Dan
04-19-2012 06:45 AM
Hi Dan,
Thanks for the reply. I will look a little more into PBR and see where it leads. Also, thanks for the example you supplied.
Technologically speaking the day doesn't seem quite so bleak now.
Cheers
Lee
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide