Squid Proxy Server with Cisco Router

[Hamidsattarrana]

Dear All!

I need some guide to configure squid proxy server with cisco router.

I have 1 Cisco router installed in our network CIsco 3845. IP is 192.168.10.1

Squid Proxy Server is in our LAN Network IP is 192.168.10.100

I want to configure it. I want all traffic from Network 192.168.10.0/24 go through Proxy Server 192.168.10.100 then go to Internet.

What configurations I have to do on Router?

Kindly Guide.

Thanks.

[marce1000]

 - Squid supports WCCM  , below is an example of how to set it up on  a CISCO router :

         https://www.cisco.com/c/en/us/support/docs/security/web-security-appliance/118242-configure-wsa-00.html

 M.

[Hamidsattarrana]

Hi!
I have configured an ACL to match dns, http & https traffic. Then I am doing PBR next-hop to Transparent Squid Proxy Server (192.168.2.1).
ACL is:
Ip access-list extended web
permit ip any any eq www
permit ip any any eq 443
permit ip any any eq domain
exit
route-map web
match ip add web
set ip next-hop 192.168.2.1
exit
Web traffic is routing to proxy server.

But the strange thing is that proxy server is blocking only http and there is no access logs for https?

I don't know much about wccp or wccp2. My IOS supports Wccp features. But don't know exactly how to implement it.
And does wccp redirect "https" Secure http?

Need suggestion?

[balaji.bandi]

here is the good guide for Squid proxy config along with router config

https://wiki.squid-cache.org/Features/Wccp2

[Hamidsattarrana]

Does it work with https? Secure Http

[balaji.bandi]

depends on your requirement, and WCCP redirection.

[Seb Rupik]

As a side note, some squid installation packages are not compiled with the correct flags to permit SSL decryption and caching. Confirm this with the command:

squid -v

...you are looking for '--with-openssl' and '--enable-ssl-crtd'

I wrote a blog post about it recently:

https://cs7networks.co.uk/2020/02/17/squid-ssl-decryption-with-freebsd/

cheers,

Seb.