Hi. I am a network technician, working for a small company that is based in the middle of nowhere in a camp up North, and we provide internet to nearly 1000 clients. The managers of the camp have asked us to implement a system where users will be directed to a page that has some important, camp related information (safety policies, upcoming events, fire warnings, etc.). Using squid and the ext_session_acl helper, along with our Cisco router's WCCP, and some very helpful advice from Amos, I have created such a system, and have been testing it for the past few hours. While the test has been fairly short so far, and has not been under full load (at peak times), it seems to be working perfectly. The only thing stopping it from working at full capacity now is the fact that our network is divided into multiple subnets, and according to some forum posts I have read, the squid proxy server and the clients have to be on the same subnet when using WCCP and a GRE tunnel. I have tried to use ACLs on the Cisco router to direct clients from other subnets to the squid proxy, but as the posts suggested, those clients fail to connect. An image depicting the setup can be found here: http://dxgameunit.webs.com/subnet%20problem.png Does anyone know if it is even theoretically possibly to have the squid proxy and the clients in different subnets in this case? What would that require? Is that something that needs to be addressed through squid, the cisco router, or the iptables rules on the squid proxy's OS? Tal
