Cisco Systems OL-15491-01 appendix Subscriber-ip http-header forwarded-for, Obscure, 250

Appendix A CSG2 Command Reference

subscriber-ip http-header forwarded-for

subscriber-ip http-header forwarded-for

To specify that the CSG2 is to obtain the subscriber's IP address from the HTTP X-Forwarded-For header, use the subscriber-iphttp-headerx-forwarded-forcommand in CSG2 content configuration mode. To specify that the CSG2 is to obtain the subscriber's IP address from the IP header, use the no form of this command.

subscriber-ip http-header x-forwarded-for [obscure]

no subscriber-ip http-header x-forwarded-for

Syntax Description	obscure	(Optional) Overwrite the IP address in the X-Forwarded-For
		header with blanks.

Defaults

Command Modes

The CSG2 obtains the subscriber's IP address from the IP header.

If you enter the subscriber-iphttp-headerx-forwarded-forcommand without the obscure keyword, the IP address in the X-Forwarded-For header is not obscured with blanks.

CSG2 content configuration

Command History	Release	Modification
	12.4(11)MD	This command was introduced.

Usage Guidelines If the CSG2 is configured to obtain the subscriber's IP address from the HTTP X-Forwarded-For header, it also automatically recognizes the variant X-UP-Forwarded-For header.

Only content that is configured with parse protocol http can be configured with subscriber-ip

http-header x-forwarded-for.

Single-TP mode is required for HTTP X-Forwarded-For operation.

•Before configuring the CSG2 for X-Forwarded-For operation, configure the CSG2 for single-TP mode by entering the ip csg mode single-tpcommand, then performing a write memory, then restarting the CSG2.

•If the CSG2 is not operating in single-TP mode, and you attempt to enter the subscriber-iphttp-headerx-forwarded-forcommand, the CSG2 rejects the command and issues a warning message.

•If the CSG2 is operating in single-TP mode and you attempt to switch to multiple-TP mode, the CSG2 checks the configuration for the subscriber-iphttp-headerx-forwarded-forcommand. If the configuration does contain the command (that is, X-Forwarded-For operation is enabled), the CSG2 does not switch to multiple-TP mode, and it issues a warning message.

	Cisco Content Services Gateway - 2nd Generation Release 2.0 Installation and Configuration Guide
A-250	OL-15491-01