Re: [squid-users] squid 2.5 and Satellite

I have the cisco set up to send all http, ftp to 200.50.68.7.

I can ping 64.110.11.2.

I can also ping dialup client who are online.

[root@cacbdscachesrvr /]# ifconfig
eth0 Link encap:Ethernet HWaddr 00:04:AC:2E:E9:A8
          inet addr:200.50.68.7 Bcast:200.50.68.255 Mask:255.255.255.0
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:399074 errors:0 dropped:0 overruns:0 frame:0
          TX packets:424646 errors:0 dropped:0 overruns:0 carrier:0
          collisions:3528 txqueuelen:100
          Interrupt:11 Base address:0x7c60

lo Link encap:Local Loopback
          inet addr:127.0.0.1 Mask:255.0.0.0
          UP LOOPBACK RUNNING MTU:3924 Metric:1
          RX packets:9445 errors:0 dropped:0 overruns:0 frame:0
          TX packets:9445 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:0

[root@cacbdscachesrvr /]# route
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use
Iface
64.110.11.0 * 255.255.255.0 U 0 0 0 eth0
200.50.68.0 * 255.255.255.0 U 0 0 0 eth0
127.0.0.0 * 255.0.0.0 U 0 0 0 lo
default cisco2600.cacbd 0.0.0.0 UG 0 0 0 eth0

interface FastEthernet0/0
 description Cariaccess Communication Ltd FastEthernet interface
 ip address 196.1.167.201 255.255.255.248 secondary
 ip address 209.198.221.161 255.255.255.240 secondary
 ip address 64.110.11.1 255.255.255.0 secondary
 ip address 200.50.68.1 255.255.255.0
 ip route-cache same-interface
 ip route-cache policy
 ip policy route-map cache
 duplex auto
 speed 100
 fair-queue
 no cdp enable
!
access-list 110 deny tcp any any neq www
access-list 110 deny tcp host 200.50.68.7 any
access-list 110 permit tcp any any
access-list 110 deny tcp any any
access-list 120 deny tcp any any neq ftp
access-list 120 deny tcp host 200.50.68.7 any
access-list 120 permit tcp any any
access-list 120 deny tcp any any

route-map cache permit 110
 match ip address 110
 set ip next-hop 200.50.68.7
!
route-map cache permit 120
 match ip address 120
 set ip next-hop 200.50.68.7
!

Thank you very much.

Best regards,

Edward Millington
(Network Administrator & Senior Technical Support Technician)
Cariaccess Communications Ltd.
Bridgetown
Barbados
1-246-430-7435
Fax : 1-246-431-0170
edward@cariaccess.com
www.cariaccess.com
----- Original Message -----
From: "Henrik Nordstrom" <hno@hem.passagen.se>
To: "Edward" <edward@cariaccess.com>
Cc: "squid" <squid-users@squid-cache.org>
Sent: Wednesday, May 02, 2001 3:09 AM
Subject: Re: [squid-users] squid 2.5 and Satellite

> From my understanding the two are separate from each other and there is
> not need to use both unless you want to set both TOS and the source IP.
>
> Are you sure routing is properly set up in your network to allow packets
> to find their way back to the proxy server?
>
> What is the output of "netstat -n" when a dialup client has tried to
> make a request?
>
> --
> Henrik Nordstrom
> Squid Hacker
>
> Edward wrote:
> >
> > Hi Henrik!
> >
> > Do I have to use :
> >
> > # TAG: acl_map2_tos
> >
> > # acl normal_service_net src 10.0.0.0/255.255.255.0
> >
> > # acl good_service_net src 10.0.1.0/255.255.255.0
> >
> > # acl_map2_tos allow normal_service_net 0x00
> >
> > # acl_map2_tos allow good_service_net 0x20
> >
> > WITH
> >
> > # acl normal_service_net src 10.0.0.0/255.255.255.0
> >
> > # acl good_service_net src 10.0.1.0/255.255.255.0
> >
> > # acl_map2_outgoing allow normal_service_net 10.0.0.1
> >
> > # acl_map2_outgoing allow good_service_net 10.0.0.2
> >
> >
> > I have assign 64.110.11.2 to the nic card along w/ 200.50.68.7
> >
> > I still cannot get the sat users to browse.
> >
> > Please take a look at the squid-conf file I attach.
> >
> >
> > Thank you very much.
> >
> > Best regards,
> >
> > Edward Millington
> > (Network Administrator & Senior Technical Support Technician)
> > Cariaccess Communications Ltd.
> > Wildey
> > St. Michael
> > Barbados
> > 1-246-430-7435
> > Fax : 1-246-431-0170
> > www.cariaccess.com
> >
> > Name: Look At.txt
> > Part 1.2 Type: Plain Text (text/plain)
> > Encoding: 7bit
>
>
Received on Wed May 02 2001 - 14:13:06 MDT