Koozali.org: home of the SME Server

Access to external proxy server

Offline robin_wangaz

  • **
  • 26
  • +0/-0
Access to external proxy server
« on: March 23, 2005, 03:54:47 AM »
My client needs their SME box to join a VPN. This network has a proxy server for authentication and so on.
As a result, an adsl router has been installed on the network with a designated IP.

The SME box is SME6.0 set in server and gateway mode.
I have reconfigured the SME Box as stipulated by the VPN Host. This is as follows:

1. upstream network card IP address to: 10.112.176.2 with subnet mask 255.255.255.0 and gateway IP 10.112.176.1(router)

2. Change the upstream proxy IP address to 172.31.232.250:3128 for all protocols - http, https, ftp etc

3. Change the DNS forwarder IP addresses to 172.31.232.10 (primary) and 172.31.232.5 (secondary)

Let me explain further:
#1 - went without a hitch! I can ping both IPs internally(from client). But no internet access via the "Test Internet Access" on server console.

#2 - I have chosen to use external proxy via the server console and added the port number. Am not 100% sure about this. As you can see the IP is the last IP in the IP range of SME(.250). Changing the last IP in 'configure server' to .249 had no affect.

#3 - I am also confused about the 'DNS'forwarder part. I have set the SME box to this primary IP.I don't know how to allocate the secondary.

Questions:
Have I interpreted these instructions correctly??

Can anybody help or confirm whether my configuration is what it should or shouldn't be?

The help via the hosts helpline has been limited. The SME box is allocating IPs(to clients)correctly. I can ping the external devices, the SME box and the clients.
The problem Im having is that i cannot acces the VPN and therefore the internet via the external proxy.

Any help would be GREATLY appreciated!!

Thanks in Advance - Rob

Offline robin_wangaz

  • **
  • 26
  • +0/-0
Access to external proxy
« Reply #1 on: April 01, 2005, 04:44:33 AM »
FYI!!!
Ok for those interested:Everything OK
#1 - went without a hitch! I can ping both IPs internally(from client). But no internet access via the "Test Internet Access" on server console.
The port was blocked by external proxy

#2 - I have chosen to use external proxy via the server console and added the port number.
This IP had to be stipulated from client browsers as well as the above 172.31.232.250:3128
However, was unable to browse to the server-manager. This needed to be set in the client web browser in the "bypass" settings

#3 - SME sorted itself out with this one.

For those interested the external proxy is Squid. This is part of an educational portal/gateway service called SchoolZone initiated by TELECOM

Hope this helps someone