Web traffic redirecting

hi
i use many rangs of ip in my network , and i need to config my router; if a client have a web request from this source address 192.168.20.0/24 to any ,should be redirect to a specific web page .
the web server is in my network and our client can ping it now.
thanks

how can i redirect it?

Similar Messages

Need Help on Configuring the Site to Site VPN from Cisco 2811 to Websense Cloud for web Traffic redirect

Hi All,
I need help on Configuring the Site to Site VPN from Cisco 2811 to Websense Cloud for web Traffic redirect
2811 having C2800NM-ADVIPSERVICESK9-M
2811 router connects to the Internet SW then connects to the Internet router.
Note- For Authentication am using the Device ID & Pre share key. I am worried as all user traffic goes with PAT and not firing up my tunnel for port 80 traffic. Can you please suggest what can be the issue ?
Below is router config for VPN & NAT
crypto keyring ISR_Keyring
pre-shared-key hostname vpn.websense.net key 2c22524d554556442d222d565f545246
crypto isakmp policy 1
encr 3des
authentication pre-share
group 2
crypto isakmp keepalive 10
crypto isakmp profile isa-profile
   keyring ISR_Keyring
   self-identity user-fqdn [email protected]
   match identity user vpn-proxy.websense.net
crypto ipsec transform-set ESP-NULL-SHA esp-null esp-sha-hmac
crypto map GUEST_WEB_FILTER 10 ipsec-isakmp
set peer vpn.websense.net dynamic
set transform-set ESP-NULL-SHA
set isakmp-profile isa-profile
match address 101
interface FastEthernet0/1
description connected to Internet
ip address 216.222.208.101 255.255.255.128
ip access-group HVAC_Public in
ip nat outside
ip virtual-reassembly
duplex full
speed 100
no cdp enable
crypto map GUEST_WEB_FILTER
access-list 101 permit tcp 192.168.8.0 0.0.3.255 any eq www
access-list 103 deny   ip 192.168.8.0 0.0.3.255 host 85.115.41.187 log
access-list 103 deny   ip 192.168.8.0 0.0.3.255 host 85.115.41.181 log
access-list 103 deny   ip 192.168.8.0 0.0.3.255 host 85.115.41.182 log
access-list 103 deny   ip 192.168.8.0 0.0.3.255 86.111.216.0 0.0.1.255
access-list 103 deny   ip 192.168.8.0 0.0.3.255 116.50.56.0 0.0.7.255
access-list 103 deny   ip 192.168.8.0 0.0.3.255 86.111.220.0 0.0.3.255
access-list 103 deny   ip 192.168.8.0 0.0.3.255 103.1.196.0 0.0.3.255
access-list 103 deny   ip 192.168.8.0 0.0.3.255 177.39.96.0 0.0.3.255
access-list 103 deny   ip 192.168.8.0 0.0.3.255 196.216.238.0 0.0.1.255
access-list 103 permit ip 192.168.8.0 0.0.3.255 any
ip nat pool mypool 216.222.208.101 216.222.208.101 netmask 255.255.255.128
ip nat inside source list 103 interface FastEthernet0/1 overload
ip nat inside source route-map nonat pool mypool overload

How does Websense expect your source IPs in the tunnel? 192.168.8.0 0.0.3.255 or PAT'ed 216.222.208.101 ?
Check
show crypto isakmp sa
show crypto ipsec sa
show crypto session
You'd better remove the preshared key from your post.

WLC - Web Traffic redirection without using Web Auth?

Hi there,
I am in need of solution to integrate it to WLC where the Guest Users can use the wireless access and then be redirected to the company's website once they open a browser.
This is where the guest users will no longer click any buttons (or accept any certificates). Once the browser is hit it will automatically go to the companys website.

You can use pfsense or monowall (there are others, but these are the top two open source splash screen portals) or a commercial offering as the gateway
pfsense is bsd based and has more features than monowall. The splash can be http or https and is fully customizable.

How to configure DNS server to redirect all web traffic to one external website?

I'd like to use the DNS service on my OS X Server as a way to force all all web traffic to one specific, external website. Not quite sure how to go about configuring it, though - any recommendations?
(BTW, this is, obviously, not our primary DNS server; I intend to silently update the preferred DNS server for users who fail to complete their timesheets in order to force the issue)

Web clients don't generate uniquely-identifiable DNS queries; there's no SRV request or related traffic that you could select on and spoof. So if you do implement this, everything querying the spoofing DNS server will get the spoofed host, or you'll have to spot specific queries that are likely web queries; Facebook, Google, Bing, etc.
If you still want to implement this, then I'd probably replace the DNS server with a runt DNS server (maybe hack dnsmasq or maraDNS, or create yourself a trivial DNS server) and have that always return the specified IP address. This avoids having to hack BIND to be universally authoritative, which is probably on par with hacking a simpler DNS server to always return a fixed IP address, and the latter is probably easier to undo.
A firewall can spot TCP port 80 and port 443 traffic, unlike a DNS server. Firewalling outbound port 80 traffic is more typical of these requests, and either trap that traffic to a specific web page based on the capabilities of the firewall, or the web proxy approach that Camelot suggests. There are folks that tie access into the web proxies into external authentication and related; that'd be able to do what you want. Web proxies are usually combined with firewall blocks, as most sites want only the web proxy to have external access, too. But this is also rather more pieces than a DNS redirect, too.

Redirecting web traffic

Is there an easy way to redirect "some" web traffic using combo of ACL, Route-maps, Nat etc.
I need some users to access a specific page but want the remainder of users to go to a different page.
Thanks

I fixed the Apache Server not starting up issue-It was an issue with the configuration.
Still need some advice on the redirect.
Thanks!
Tyler

PPPoE user redirect web traffic

Hi all
In our service provider we have implemented PPPoE service .For the moment before the user connects to us I add this username and password .But for one test user I want that when he login ,the web traffic to redirect in another ip x.x.x.x:8002 .In radius for this user I have added the av-pair :Cisco-AVPair=url-redirect=http://x.x.x.x:8002 but the redirect of trafic does not happen .My question is :How I can redirect the web traffic without implement the SSG service??

I think you can't without SSG.

Redirect web traffic on SRP527W router

Hello,
Is it possible to redirect all web traffic to a Symantec web filtering address on a particular listening port.
I had a look at the Srp527w Router and can't find where this could be done.
Thanks,
Sent from Cisco Technical Support iPad App

Can anyone recommend a Small business type router that does provide web proxy functionality on the device.
Trying to find something that can provide this without the need to go an ASA firewall or equivalent.
Thanks.
Sent from Cisco Technical Support iPad App

How to get polipo proxy to transparently handle web traffic?

hello there,
I've got a router PC at home. It runs privoxy so that any PC on my local network can browse the Internet in a reasonably secure way, with no ads and such.
Because we often visit the same websites, I thought that's be a good thing to set up a caching proxy. I tried Squid, but found it difficult to configure, slow to start, etc. so I finally chose polipo, which is much lighter and simpler.
On the web, many sources advise to have to following setup:
1) local -- privoxy -- polipo -- internet
I got such a setup, but I'd like to try the following instead:
2) local -- polipo -- privoxy -- internet
In my opinion it's more relevant because:
- my router is quite old, and I think it would be lighter on resources to serve already privoxied cached pages, rather than having privoxy process every cached page
- in terms of privacy, it's generally advised not to have a parent proxy on top of privoxy
Privoxy acts as an intercepting proxy, so setup 1) was quite easy to configure. Web traffic is redirected to privoxy, then privoxy forwards it to polipo.
Polipo does not act as an intercepting proxy, because its developer considers that "interception proxying is a fundamentally broken design [...], and will not be supported by Polipo". So far, the only possible workaround I found are :
- configure browsers to use polipo: not suitable, I want any local network computer to be able to transparently connect to the internet
- use yet another proxy to intercept traffic...
- or, from polipo docs :
If you want to use interception proxying in order to avoid manually configuring your clients, please use Netscape's proxy.pac auto-configuration (you don't need a separate web server, as a proxy.pac file can be served by Polipo's internal server).
It gives link pointing to http://wp.netscape.com/eng/mozilla/2.0/ … -live.html which is dead.
So, in short: is there a way to transparently route my web traffic through polipo?
Thanks for any guidance.

Not sure if your still looking for a solution, but I could think of a couple possible ways to redirect the traffic. One would be rinetd (Here). The other solution I thought would be iptables (FW_REDIRECT ??), but I have not tried that.
I might try experimenting with a few ways, but let me know if you have it working..

Service Insertion/Service Graphs & Policy based traffic redirection

Hi,
My question is to use policy based service insertion/service graphs between the EPGs communications to redirect traffic to ASA firewall & F5 slb.
Below are Cisco ACI components:
1- Spines & Leafs
2- APIC Controllers
3- Cisco ASA Firewall attached to the APIC via device package
4- F5 SLB attached to the APIC via device package
I have the below scenario for the communication between the EPGs e.g:
WEB-EPG (consumer)
APP EPG (provider) (consumer for DB)
DB (provider)
I want to use contract that includes filter on port 80 to permit and action for service insertion to provide SLB (F5) service between the WEB & APP communications.
I want to use contract that includes filter on port any* to permit and action for service insertion to provide firewall (ASA) service between the APP & DB communications.
Can I do policy based "traffic redirection" through service graphs in the contract's service insertion?
Is it supported in version 1.0(3i)?
I believe, NSH (Network services header) will add in the VXLAN header before reaching the dest VNID and redirect the traffic to the clusters of the services node i.e. SLB or FW, Then traffic will reach the destination address after striping all services.
Regards,
Anser

Hello Muhammad,
traffic redirection is not supported on 1.0(3i) , while NSH is still submitted to IETF as a draft from industry vendors , I think try to avoid waiting for it.
Regards
Mohammed ElSherbiny

Iip web-cache redirect command problem

Hello,
There is sample in : http://www.cisco.com/univercd/cc/td/doc/product/lan/c3550/12112cea/3550scg/swwccp.htm
Fast Ethernet interfaces 0/2 to 0/5 are connected to the clients and they are configure as :ip wccp web-cache redirect in .And Fast Ethernet interface 0/1 is connected to the cache engine and it does not configure as : ip wccp web-cache redirect out.
in : http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121cgcr/fun_c/fcprt3/fcd305.htm
The sample in this doc is configure as :ip wccp web-cache redirect out.
I want to know the different of :ip wccp web-cahe redirect out and ip wccp web-cache redirect in. And in which condition I shall use ip wccp web-cache redirect out and in which condition I shall use ip wccp web-cache redirect in ?

Sir,
The ip web-cache redirect in command is only a new addition in the late 12.1 and 12.2 train of IOS. Both commands do the same thing except the redirect in is on the interface where client sourced traffic enters the router and the redirect out is on the interface interface of the router. You do no use both at the same time.
My preference is for redirect in as the router does not need to route the packet because wccp picks the packet up on the incomming interface.
Cheers
Phil

How to generate web traffic report on SharePoint 2013?

Hello All,
I am working on Intranet in SharePoint 2013 On Premise.
There are functionalities like Poll, Survey, Event, Announcements etc.
Now there is a requirement to create web traffic report for all these functionality. How should I generate web traffic report for all these?
Thanks in Advance.

Hi Darsh,
Here is the out of box analytic reports you can view. Please refer to the following article.
SharePoint 2013 Analytics A Big Step Backward
New Analytics in SharePoint 2013
Please mark it answered, if your problem resolved or helpful.

Traffic Redirection tab not visible in PRSM single device mode

I am using a 5515-X in single device mode. Software is version 9.2.1.2-69.
I noticed a couple things that I am not sure are a problem or not. When I go to the configuration overview tab PRSM shows mode of the ASA CX as "unknown". Also the User Guide says I should see a "traffic redirection" tab under configuration policies/settings but I don't see that.
I guess I can configure traffic redirection with ASDM but just wondering if this is normal, or cosmetic bug or something else?
Thanks,
Diego

If you're running single device mode (on-box PRSM) you cannot manage the ASA configuration like you can with the off-box PRSM. Note this section of the user guide which states:
"Traffic Redirection—(ASA, Multiple Device mode only.) Configure traffic redirection from the ASA to its CX module."

Web page redirecting to another page

Hi,
I have an issue of web pages redirecting to a specific web page (bad content).
This issue occurred in safari first and then when i started using google chrome and firefox the same issue arrised.
When i google something and open it in a new tab it opens into the respective web page but then after all the contents are loaded it redirects into one specific website.
I cleared all the history and tried blocking that specific page using terminal (used step to step guide through wikihow) and even cleared the DNS by using this command "sudo dscacheutil -flushcache" but nothing works.
I am using Mac Book Pro Retina and OS Y.
Please be kind enough to help as soon as possible. Its urgent i am unable to search for anything using google. But it doesn't happen when i open Facebook , youtube or my mail.

This can happen if adware is installed without your knowledge.
1. Use free AdwareMedic to remove adware
    http://www.adwaremedic.com/index.php
   Install , open, and run it by clicking “Scan for Adware” button   to remove adware.
   Once done, quit AdwareMedic.
             or
   Remove the adware manually by following the “HowTo” from Apple.
   http://support.apple.com/en-us/HT203987
2. Safari > Preferences > Extensions
    Turn those off and relaunch Safari.
    Turn those on one by one and test.
3. Safari > Preferences > Search > Search Engine :
    Select your preferred   search engine.

Is there program for precise measuring of web traffic in/out my Mac?

Some ISPs have their proprietary web traffic/usage indicators but they are crude, of no use for precise measurements.
Widgets are of no hellp either.
Is there a program which can display the internet traffic in/out of a computer at any given moment and display it instantly ?
Ideally , able to display live (or by manual update) what the traffic is to/from websites visited , email in/out data flow and creating a log, so I can have a record what exactly the web usage is, for example, for last 1 hour/ 1day/1 week.
Is there such a program?
Thanks in advance

I've been using SurplusMeter waiting for AT&T U-verse to get their usage meter going (3 months of waiting) due to the caps they (supposedly) imposed on May 2, 2011. They still haven't gotten their meter working and it's not clear the caps are being imposed (250 GB/month). But I wanted to get a idea of how much I was using so I decided on SurplusMeter.
SurplusMeter has a number of nice features. But without any other measurement tool to cooralate it with I have no idea how accurate it is. One thing I do know howerver is that in the case of U-verse, where all traffic goes through a U-verse provided router (they call it the "resident gateway") I can only measue the traffic in and out of my computer, not in and out of the router (no, there no separate info in the router to give me this info or I wouldn't have needed SurplusMeter).
FWIW, there are other utilities that can give you some of this info or present it in different ways. Here's a few others I looked at before choosing SurplusMeter:
Net Monitor
ProteMac Meter
TraffiX
UsageTracker

Wireless web page redirect not woking

Hi all
wireless web page redirect not woking
software version : 4.2.207.0
one of the ssid on the controller has web authentication and the authentication page not showing once connected .
some clients ( like laptop) authentication page shows but when we press submit button nothing happen .
Please help

Hi
Tnx again , i beleive i have narrow down the problem , After physically removed the controller from the switch problem experencing only with mobile devices .In your previous reply you mentioned abt DNS . I did not understand the role of DNS in it. sorry for that . Once user connected SSID and browse anything , this will redirect to the virtual ip http://1.1.1.1/login.html?........ .we have not registered this virtual ip in the DNS server .
Please help

Web traffic redirecting

Similar Messages

Maybe you are looking for