Reflect Client IP in ADN Environment

FAQ ID:    FAQ2157
Version:    2.0
Status:    Published
Published date:    05/30/2012
Updated:    01/29/2014


(1)  What settings need to be configured on the  Core ProxySG and Edge ProxySG to reflect the client IP address?

Configuration on the  Edge/Branch Proxy (Enable Reflect Client IP)

Option 1: Globally enable the Reflect Client IP on the ProxySG

Select Configuration > Proxy Settings > General > Reflect Client IP

Option 2: Enable client IP reflection through policy, on the basis of source or destination IP address. For example :

     client.address=x.x.x.x reflect_ip(client)  


Configuration on the  Core ProxySG (Allow Reflect Client IP)

Select Configuration  > ADN  > Tunneling   > Network  > Reflect Client IP. Select Allow the requets and Reflect the Client IP.


(2) Is it possible for the Core ProxySG to send out the traffic to the Internet with the source IP address of the Edge ProxySG? (Given Reflect Client IP is not enabled on the Edge ProxySG)

The answer to this is NO. If the Core and the Edge ProxySGs are in an ADN deployment, then there is currently no way the Core ProxySG can send out the traffic to the Internet with the Edge proxy IP as the source IP address.


Rate this Page

Please take a moment to complete this form to help us better serve you.

Did this document help answer your question?
If you are finished providing feedback, please click the RATE CONTENT button. Otherwise, please add more detail in the following text box and then click RATE CONTENT.

Your response will be used to improve our document content.

Ask a Question