<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body text="#464646" bgcolor="#FFFFFF">
<p><font face="Tahoma">Hi Eliezer</font></p>
<p><font face="Tahoma">if you want to do transparent mode without
having to put squid squidboix in front of your fortinet.<br>
</font></p>
<p><font face="Tahoma">If you want to do transparent mode while your
fortinet aggregates several VLANs, the WCCP mode is necessary</font></p>
<p><font face="Tahoma">So you can control everything through your
fortigate <br>
</font></p>
<p><font face="Tahoma">By the way, fortinet offers their proxy based
on WCCP to ensure a consistent integration with fortigate<br>
</font></p>
<p>My configuration is very simple to replicate :</p>
<p><span style="mso-fareast-font-family:"Times New Roman"">We
have added a service ID 80 on fortigate but failed caused by the
squid bug<br>
<br>
config system wccp <br>
edit "80" <br>
set router-id 10.10.50.1 <br>
set group-address 0.0.0.0 <br>
set server-list 10.10.50.2 255.255.255.255 <br>
set server-type forward <br>
set authentication disable <br>
set forward-method GRE <br>
set return-method GRE <br>
set assignment-method HASH <br>
next <br>
end <br>
<br>
Squid wccp configuration <br>
<br>
wccp2_router 10.10.50.1 <br>
wccp_version 3 <br>
# tested v4 do the same behavior <br>
wccp2_rebuild_wait on <br>
wccp2_forwarding_method gre <br>
wccp2_return_method gre <br>
wccp2_assignment_method hash <br>
wccp2_service dynamic 80 <br>
wccp2_service_info 80 protocol=tcp protocol=tcp
flags=src_ip_hash priority=240 ports=80,443 <br>
wccp2_address 0.0.0.0 <br>
wccp2_weight 10000 </span></p>
<p><br>
</p>
<div class="moz-cite-prefix">Le 24/06/2022 à 13:17,
<a class="moz-txt-link-abbreviated" href="mailto:ngtech1ltd@gmail.com">ngtech1ltd@gmail.com</a> a écrit :<br>
</div>
<blockquote type="cite"
cite="mid:001301d887bb$f7e14780$e7a3d680$@gmail.com">
<p class="MsoNormal"><span
style="mso-ascii-font-family:Calibri;mso-fareast-font-family:Calibri;mso-hansi-font-family:Calibri;mso-bidi-font-family:Arial;color:windowtext;mso-ansi-language:EN-US;mso-fareast-language:EN-US"
lang="EN-US">I am not sure and can spin up my Forti but from
what I remember there are PBR functions in the Forti.<o:p></o:p></span></p>
<p class="MsoNormal"><span
style="mso-ascii-font-family:Calibri;mso-fareast-font-family:Calibri;mso-hansi-font-family:Calibri;mso-bidi-font-family:Arial;color:windowtext;mso-ansi-language:EN-US;mso-fareast-language:EN-US"
lang="EN-US">Why would a WCCP be required? To pass only ports
80 and 443 instead of all traffic?</span></p>
</blockquote>
<div class="moz-signature">-- <br>
<div style="background-color: #ffffff;border: 1px solid
#e7eaec;padding: 1px;margin-bottom: 20px;box-sizing:
border-box;font-family: 'open sans', 'Helvetica Neue',
Helvetica, Arial, sans-serif;font-size: 13px;color:
#676a6c;width:270px">
<div style="box-sizing: border-box;color: rgb(103, 106,
108);font-size: 13px;line-height: 18.5667px"> </div>
</div>
</div>
</body>
</html>