Cisco Systems OL-4387-02 Network Router User Manual


 
10-7
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
OL-4387-02
Chapter 10 SSG TCP Redirect
Configuration Examples for SSG TCP Redirect
This section provides the following example configurations:
Configuration Example for Server Groups, page 10-7
Configuration Example for Network Lists, page 10-7
Configuration Example for Port Lists, page 10-8
For more configuration examples, refer to the SSG TCP Redirect for Services, Release 12.2(4)B feature
module.
Configuration Example for Server Groups
Example 10-3 shows how to configure a server group for user, service, and initial captivation redirection.
The server with IP address 10.0.1.4 is the captive portal for all three types of redirection. Port 8090 is
used for user redirection; port 8094 is used for service redirection; and port 8091 is used for initial
captivation.
Example 10-3 Defining a Captive Portal Server Group
Router(config)# ssg enable
Router(config)# ssg tcp-redirect
Router(config-ssg-redirect)# server-group userRedirect
Router(config-ssg-redirect-group)# server 10.0.1.4 8090
Router(config-ssg-redirect-group)# server-group serviceRedirect1
Router(config-ssg-redirect-group)# server 10.0.1.4 8094
Router(config-ssg-redirect-group)# server-group initialCaptivate
Router(config-ssg-redirect-group)# server 10.0.1.4 8091
Configuration Example for Network Lists
Example 10-4 defines three network lists. The list named serviceNetwork1 includes network 10.1.1.0;
the list named serviceNetwork2 includes network 10.2.2.0; and the list named serviceNetwork3 includes
network 10.3.3.0.
Example 10-4 Defining Network Lists
Router(config)# ssg tcp-redirect
Router(config-ssg-redirect)# network-list serviceNetwork1
Router(config-ssg-redirect-network)# network 10.1.1.0 255.255.255.0
Router(config-ssg-redirect-network)# network-list serviceNetwork2
Router(config-ssg-redirect-network)# network 10.2.2.0 255.255.255.0
Router(config-ssg-redirect-network)# network-list serviceNetwork3
Router(config-ssg-redirect-network)# network 10.3.3.0 255.255.255.0