Solved

problem in squid between L3-switch and router

Posted on 2016-09-26
4
47 Views
Last Modified: 2016-10-17
I need to config a squid server  between L3-switch and router without change configuration .  L3--->squid--->router
I installed a transparent squid  between the switch and the router in bridge mode, the switch has several vlans that speaks with a route.
All vlans can reach the router so bridging seems ok, but  i cant't see any log in squid's access.log  
my config as follows:
/usr/sbin/brctl addbr br0
/usr/sbin/brctl addif br0 eth0
/usr/sbin/brctl addif br0 eth1
/sbin/ifconfig eth0 0.0.0.0 promisc
/sbin/ifconfig eth1 0.0.0.0 promisc
/sbin/ifconfig br0 192.168.100.5 255.255.255.0 up
route add default gw 192.168.100.1 dev br0
ebtables -t broute -A BROUTING -p IPv4 --ip-protocol 6  --ip-destination-port 80 -j redirect  --redirect-target ACCEPT --log --log-level=info --log-prefix="EBTAB" --log-ip
/sbin/iptables -t nat -A PREROUTING  -i br0 -p tcp --dport 80  -j REDIRECT --to-port 3128

after i did this,no log come and no packets in iptables's nat table
sorry for my bad english
Anyone have a suggestion on how to manage the transparent proxy mode inside the vlans?
0
Comment
Question by:young liu
  • 3
4 Comments
 
LVL 62

Expert Comment

by:gheist
ID: 41818324
I look at your config - are you suer you need a bridge or you mean bonding/ifenslave?
1
 

Author Comment

by:young liu
ID: 41819008
@gheist
 thank you for your reply.
I really need to do this. my network traffic is so confused with a lot of vlan,acl  and qos policy,use a squid box  by NAT mode  will change the static route and network structure.so  I have to use a bridge  mode. i think this will not change the network structure
do you have any good suggestions
0
 
LVL 62

Accepted Solution

by:
gheist earned 500 total points (awarded by participants)
ID: 41819193
To clear some confusion - bridge is L2, router is L3...
If you read on ebtables manual, you see that only FORWARD table will apply on the bridge.
Probably it is not a good idea to mix ebtables and iptables, either is a full framework on its own. (me never used ebtables)
NAT cannot work without IP address (see respective RFC)
0
 
LVL 62

Expert Comment

by:gheist
ID: 41846309
Hope it helped.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
ISP Change 14 63
TL-R470T+ and Cisco ASA 2 21
Hit router interface limit 7 37
Connectivity issues after power outage 5 33
The purpose of this article is to demonstrate how we can use conditional statements using Python.
In the world of WAN, QoS is a pretty important topic for most, if not all, networks. Some WAN technologies have QoS mechanisms built in, but others, such as some L2 WAN's, don't have QoS control in the provider cloud.
Connecting to an Amazon Linux EC2 Instance from Windows Using PuTTY.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question