Configuration Considerations For Ssg Tcp Redirect; Configuring Port-Based Redirection For Unauthenticated Users; Limiting Redirection For Unauthenticated Users; Configuring Ssg Tcp Redirect - Cisco OL-4387-02 Configuration Manual

Chapter 10 SSG TCP Redirect
The following sections describe these tasks in more detail:
•
•
•
•

Configuration Considerations for SSG TCP Redirect

When you configure SSG TCP Redirect, consider the following:
•
•
•

Configuring Port-Based Redirection for Unauthenticated Users

To apply SSG TCP Redirect to unauthenticated users based on a TCP port, bind the unauthenticated user
redirect server group to a port using the redirect port command in SSG redirect configuration mode.
Example 10-1
redirection.
Example 10-1 Binding a Server Group to a Port
Router(config)# ssg tcp-redirect
Router(config-ssg-redirect)# server-group userRedirect1
Router(config-ssg-redirect-group)# server 10.0.1.4 8090
Router(config-ssg-redirect)# redirect unauthenticated-user to userRedirect1
Router(config-ssg-redirect)# redirect port 80 to userRedirect1

Limiting Redirection for Unauthenticated Users

To limit the number of TCP sessions from an unauthenticated user that are redirected to a particular
server group, use the max-sessions command in the SSG redirect group configuration mode:
server-group group-name
Example 10-2
of 15 sessions from user4 to the server group named new-users1.
Example 10-2 Limiting Redirected TCP Sessions
Router(config)# ssg tcp-redirect
Router(config-ssg-redirect)# server-group new-users1
Router(config-ssg-redirect-group)# server 10.0.1.4 8090
Router(config-ssg-redirect-group)# max-sessions user4 15
OL-4387-02
Configuration Considerations for SSG TCP Redirect, page 10-5
Configuring Port-Based Redirection for Unauthenticated Users, page 10-5
Limiting Redirection for Unauthenticated Users, page 10-5
Configuring SSG TCP Redirect, page 10-6
Where to redirect—Determine the server group to which you want to redirect.
When to redirect—Determine if you want to redirect for unauthenticated, unauthorized, or initial
packets.
What to redirect—Determine if you want to redirect by networks or ports, and then decide the
networks to include in a network list and the ports to include in a port list.
binds the server group named userRedirect1 to port 80 for unauthenticated user
max-sessions host number
limits the number of TCP sessions from user4. In this example, SSG redirects a maximum
Cisco 10000 Series Router Service Selection Gateway Configuration Guide
10-5