Cisco OL-15491-01 - Manual (Page 259)

A-259
Cisco Content Services Gateway - 2nd Generation Release 2.0 Installation and Configuration Guide
OL-15491-01
Appendix A CSG2 Command Reference
subscriber-ip http-header forwarded-for
subscriber-ip http-header forwarded-for
To specify that the CSG2 is to obtain the subscriber's IP address from the HTTP X-Forwarded-For
header, use the subscriber-ip http-header x-forwarded-for command in CSG2 content configuration
mode. To specify that the CSG2 is to obtain the subscriber's IP address from the IP header, use the no
form of this command.
subscriber-ip http-header x-forwarded-for [obscure]
no subscriber-ip http-header x-forwarded-for
Syntax Description
Defaults The CSG2 obtains the subscriber's IP address from the IP header.
If you enter the subscriber-ip http-header x-forwarded-for command without the obscure keyword,
the IP address in the X-Forwarded-For header is not obscured with blanks.
Command Modes CSG2 content configuration
Command History
Usage Guidelines If the CSG2 is configured to obtain the subscriber's IP address from the HTTP X-Forwarded-For header,
it also automatically recognizes the variant X-UP-Forwarded-For header.
Only content that is configured with parse protocol http can be configured with subscriber-ip
http-header x-forwarded-for.
Single-TP mode is required for HTTP X-Forwarded-For operation.
• Before configuring the CSG2 for X-Forwarded-For operation, configure the CSG2 for single-TP
mode by entering the ip csg mode single-tp command, then performing a write memory, then
restarting the CSG2.
• If the CSG2 is not operating in single-TP mode, and you attempt to enter the subscriber-ip
http-header x-forwarded-for command, the CSG2 rejects the command and issues a warning
message.
• If the CSG2 is operating in single-TP mode and you attempt to switch to multiple-TP mode, the
CSG2 checks the configuration for the subscriber-ip http-header x-forwarded-for command. If
the configuration does contain the command (that is, X-Forwarded-For operation is enabled), the
CSG2 does not switch to multiple-TP mode, and it issues a warning message.
obscure (Optional) Overwrite the IP address in the X-Forwarded-For
header with blanks.
Release Modification
12.4(11)MD This command was introduced.