Peace, I have a cisco network with a data vlan and a voice vlan. First of all, do i need a server with 2 network cards to run squid, then if it uses 2 network cards then do i install it on the lan side or after the wan side? if it's on the lan side then how to let both vlans pass through the proxy?

You've been here for five years now...please read the Question Guidelines link in my posting signature.

Unless you provide DETAILS, there's not a lot we can tell you. A "cisco network" is meaningless, since what network hardware you have has no bearing at all on the topic you're asking about. Separate VLAN's? Fine...but again, meaningless in this context.

It is highly RECOMMENDED that you have two NIC's for a squid server...since you're connecting to the Internet and to your internal network, you connected one to each side of things...internal and external. The squid documentation has much on how to get started...and that would be a good thing for you to read.
http://www.squid-cache.org/Doc/

Also, you DO NOT run 'both vlans' through squid. Squid is an HTTP proxy...PERIOD. It does not handle any other protocols, and won't do ANYTHING with VOIP traffic. It is for web browsing. What is your actual goal?? What are you trying to accomplish?

well if it only runs http, then how can i connect it to the network? i was thinking to put it between the trunk between the switch and the cisco router, but if it will not pass the voip traffic then that is useless. the only other place to put it in is after the router and connecting to the modem. The goal is obvious, to permit some and forbid others from certain sites or from the internet all together.

If you don't know what squid *DOES*, why are you wanting to install it?? Did you not read any of the documentation on it, or do ANY research???

Squid is an HTTP proxy...meaning, it CAN limit what websites are browsed, and who can browse them. Since you CANNOT browse websites over VOIP, why is that a problem???

1 members found this post helpful.

it is a problem if it passes only hhtp traffic and blocks the rest, or would it not matter if i assign it an ip from the voice vlan then voip would pass through. i did some research but couldn't find answers to what i was looking for so the next best thing is ask. i read about squid some 3 years ago and it appealed to me back then, so now we need a proxy and squid is free, that is why i want to use it.

Right...squid is an HTTP proxy. Which means, it works with HTTP....not sure why that's not clear. It doesn't 'block the rest'...because it doesn't CARE OR KNOW about it, period.

Again, why is your voice VLAN even coming in to this? If you want to regulate websites, then Squid is what you want. Anything else can run OUTSIDE that proxy.

Anything else has to run side by side with the proxy, if the proxy is to be inserted between the switch and the router, it will be interfering with everything, i'm even not sure it can be inserted there.

Sorry, but are you not understanding what you're being told????

AGAIN...Squid is AN HTTP PROXY...that's IT. Nothing more. If it doesn't KNOW about any other protocols/ports/traffic, then it will OBVIOUSLY NOT interfere with it, now will it??? NOTHING will be different, except your web traffic...that's all...that's it. You can route all other traffic through a different port/switch, or just allow IP forwarding, and the box will be invisible to everything else.

Well now you sound like you know what you are talking about, you convinced me. Glad you settled this out.

This is the same thing I've been saying since the FIRST REPLY...nothing has changed, except you finally understood the answer.

Hope someone else at your company can install things and get them working.