Is there a way to generate authentication certificates for access to a proxy server instead of or in addition to ncsa auth? I understand there is an IP address auth check in squid but is this for local network (192.168.x.x) only? My current setup is that users login through ncsa auth and all their IPs are external IPs rather than on an internal network, this is for geo IP location.