My Home Router wan IP : A.B.C.D lan IP : 192.168.36.1My work server behind Firewall IP : 172.28.1.151Setup:1. Enable dropbear (sshd) on my home router, listen on port 22 dropbear -a -p 222. Create ssh-tunnel from work server, forward data from port 8223 of my home router to work server port 22, thus i can connect work server out from firewall. autossh -M 8899 -NR 8223:localhost:22 [email protected] -p22 -vvv3. Enable ssh SOCK5 proxy on my work server, because dropbear could not support SOCK5. Use port 10080 as SOCK5 proxy. ssh -N -f -D 172.28.1.151:10080 user@localhost4. Estableished ssh tunnel from my home router, and forward data from port 8920 to remote (my work server) 10080 port. ssh -f -NT -g -L 8920:172.28.1.151:10080 -W 49512 -K 60 [email protected] -p82235. Now my home router act a SOCK5 proxy server. SOCK5 ://192.168.36.1:8920Config SOCK5 proxy on IOS 1. Create one PAC (Proxy Auto Config) file on my home router. touch /var/www/sock5.pac2. Add config cat > /var/www/sock5.pacfunction FindProxyForURL(url, host){ if (isInNet(host, "192.168.36.0", "255.255.255.0")) return "DIRECT"; return "SOCKS 192.168.36.1:8920";}EOF3. Enable HTTP proxy on IOS, choose auto-config, fill http://192.168.36.1/sock5.pac in URL 09-13 15:10