I have the following config and still can get no http connection.
A packet capture on the outside Internface shows no attmep to connect on port 443.
I can connect on 80 and 443 directly to the NAT address on the firewall, but the CSS makes the HTTP connection, then (on the same server) does not connect to the https port.
got any ideas?
!************************** CIRCUIT **************************
circuit VLAN1
ip address 2.1.1.75 255.255.255.0
!************************** SERVICE **************************
service MCI-backupredirect
type redirect
port 80
keepalive type none
ip address 2.1.1.73
active
service MCI-dr
ip address 2.1.1.77
protocol tcp
keepalive type http
port 80
active
service MCI-dr-443
ip address 2.1.1.77
protocol tcp
port 443
active
service MCI-hq
ip address 2.1.1.76
protocol tcp
keepalive type http
port 80
active
service MCI-hq-443
ip address 2.1.1.76
protocol tcp
port 443
active
!*************************** OWNER ***************************
owner MCI
content MCI-http-rule
add service MCI-hq
primarySorryServer MCI-dr
balance aca
secondarySorryServer MCI-backupredirect
vip address 2.1.1.70
protocol tcp
port 80
url "/*"
active
owner MCI-443
content MCI-https-rule
add service MCI-hq-443
primarySorryServer MCI-dr-443
secondarySorryServer MCI-backupredirect
vip address 2.1.1.70
protocol tcp
port 443
url "/*"
active
!*************************** GROUP ***************************
group MCI-MCW-http-group
add destination service MCI-hq
add destination service MCI-dr
vip address 2.1.1.70
add destination service MCI-hq-443
add destination service MCI-dr-443
active
