Skip to main content
nsubramanian
Staff
Staff
December 16, 2019

Technical Tip: Configure multiple outgoing IP for explicit web proxy

  • December 16, 2019
  • 0 replies
  • 1509 views
Description
This article describes how to enable multiple outgoing IP for explicit web proxy.

Solution
To enable multiple outgoing IP for explicit web proxy,  configure the secondary IP in the external interface for outgoing traffic.

1) Configure multiple secondary IP:
# config system interface
    edit "port1"
        set vdom "root"
        set ip 10.1.1.73 255.255.252.0
        set allowaccess ping https ssh http telnet
        set type physical
        set snmp-index 1
        set secondary-IP enable
        config secondaryip
            edit 1
                set ip 10.1.0.214 255.255.252.0
            next
            edit 2
                set ip 10.1.0.215 255.255.252.0
            next
        end
    next
end
2) Enable multiple outgoing IP address in explicit web proxy setting:
# config web-proxy explicit
    set status enable
    set http-incoming-port 8080
    set outgoing-ip 10.1.0.214 10.1.0.215
end
3) Run sniffer command to verify if both IP are being used for outgoing traffic:
# diag sniffer packet port1 ‘host 10.1.0.214’ 4 0 l
# diag sniffer packet port1 ‘host 10.1.0.215’ 4 0 l

To stop sniffer: Ctrl + C.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT