ANNOUNCEMENT - The community will be down for maintenace this Thursday August 13 from 12:00 AM PT to 02:00 AM PT. As a precaution save your work.
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
661
Views
0
Helpful
3
Replies
Highlighted
Beginner

ironport s170 interfaces config

hi all

when i config p2 via cli with this

advancedproxyconfig >

miscellaneous

is that mean i should connect  p2 to external

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
Cisco Employee

ironport s170 interfaces config

Hi Mohammed,

If I am understanding your question correctly, no, the P2 does not have to be external.  You can configure it any way you'd like and controlling it  using Static Routes.  However, as a best practice, I would recommend P2 to speak to internal clients and have P1 speak to the external.  I work for TAC and when you enable the remote access for cases, it will use the P1.  So if the P1 does not have any internet access, it will be difficult to enable it.

I do not see any correlation with advancedproxyconfig > miscellaneous in regards to the interfaces.  Can you clarify?

-Vance

View solution in original post

3 REPLIES 3
Highlighted
Cisco Employee

ironport s170 interfaces config

Hi Mohammed,

If I am understanding your question correctly, no, the P2 does not have to be external.  You can configure it any way you'd like and controlling it  using Static Routes.  However, as a best practice, I would recommend P2 to speak to internal clients and have P1 speak to the external.  I work for TAC and when you enable the remote access for cases, it will use the P1.  So if the P1 does not have any internet access, it will be difficult to enable it.

I do not see any correlation with advancedproxyconfig > miscellaneous in regards to the interfaces.  Can you clarify?

-Vance

View solution in original post

Highlighted
Beginner

ironport s170 interfaces config

thank u very much vance for your replay

i will try  p1 speak to internet   and p2 speak to internal

Highlighted
Beginner

ironport s170 interfaces config

firewalll

| 192.168.2.1

|

|P1 192.168.2.2

ironport

|P2 192.168.1.2

|

|

switch

hi all

can i config my network like above the ironport in explicit mod   i configure nat to forward web traffic to p1

and the default route on p2 to 192.168.2.1 and also configure client proxy setting to192.168.1.2

and can i replace the firewall with internet modem directly