Documentation | Support

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Additional Proxy Configuration > Content Gateway IP spoofing > Configuring IP spoofing
Configuring IP spoofing
*
To configure the proxy to use the IP address of the client for IP spoofing, see Configure basic IP spoofing.
*
To configure the proxy to use a specified IP address for IP spoofing, see Configure range-based IP spoofing.
*
For a list of features and restrictions for IP spoofing support, see Content Gateway IP spoofing.
Configure basic IP spoofing
In the Content Gateway manager:
1.
Go to the Configure > Networking > ARM > General tab.
2.
Under IP Spoofing, select Enabled.
3.
Click Apply.
4.
Go to the Configure > My Proxy > Basic > General tab and click Restart.
5.
Configure your network to ensure web traffic will be redirected back to the proxy.
Contact your network equipment vendor or Technical Support for any needed assistance.
 
* 
Warning 
The ARM is a critical component of Content Gateway that should never be disabled. If it is disabled while IP spoofing is enabled, client requests receive a "Cannot display Web page" error and an error message is recorded in the /var/log/messages directory.
For information about configuring WCCP routers, see Configuring WCCP v2 routers.
Configure range-based IP spoofing
 
* 
Important 
Range-based IP spoofing is not supported for IPv6.
When the proxy is configured to use range-based IP spoofing:
*
Client IP address ranges and their corresponding spoofed IP address are specified in a table.
*
The table is traversed top-down. The first match is applied.
*
Requests from clients that do not match an IP address in the table are spoofed with their own IP address (basic IP spoofing).
*
To create an entry that causes a set of IP addresses to appear to be coming from the proxy (as in ordinary forward proxy request handling), specify the desired client IP address range and then use the Spoofed IP Address field to specify the proxy's Internet-facing IP address.
*
Create the smallest list that meets your needs. The list is traversed for every connection request. A very large list could contribute to latency. Use the Content Gateway manager performance charts (Monitor > Performance) to monitor proxy performance.
To create the range-based IP spoofing table:
1.
Go to the Configure > Networking > ARM > General page.
2.
Under IP Spoofing, select Enabled. Basic IP spoofing must be enabled to enable range-based IP spoofing.
3.
Under Range Based IP Spoofing, select Enabled.
4.
In the Client IP Addresses field, enter a comma separated list of individual IP addresses and/or IP address ranges.
*
In a range, the first IP address is separated from last with a hyphen. For example: 10.100.100.0-10.100.100.254
*
CIDR notation is allowed. Do not use spaces.
*
The Client IP Address list supports a maximum of:
*
64 IPv4 addresses
*
32 IPv4 address ranges
5.
In the Specified IP Address field, enter a single IP address.
6.
Click Apply to add the entry to the table.
 
* 
Warning 
If any of the formatting is invalid, all of the data in that row is cleared.
7.
To add a new row to the table, click Add Row.
8.
To put new entries into effect, click Apply and then restart Content Gateway.
9.
Configure your network to ensure web traffic will be redirected back to the proxy.
Contact your network equipment vendor or Technical Support for any needed assistance.
To remove an entry from the IP spoofing table:
1.
Clear all the values in the row to be removed.
2.
Click Apply.
3.
To put the changes into effect, restart Content Gateway.

Go to the table of contents Go to the previous page Go to the next page View or print as PDF
Additional Proxy Configuration > Content Gateway IP spoofing > Configuring IP spoofing
Copyright 2023 Forcepoint. All rights reserved.