Loadbalancing ldaps on ACE module

afef.slim · ‎01-15-2008

Is it possible to configure loadbalancing of ldaps with end-to-end mode (encryption from end to end) on ACE module ?

And if yes, do i have to use a special script for health checking ?

irisrios · ‎01-22-2008

I have not come across Lodabalacing of LDAPs on ACE module. But it is planned to be suppored in future.

afef.slim · ‎01-22-2008

But what about ldaps termination (ldaps between clients and the ACE and in clear between ACE and servers)on the ACE box, is it supported ?

danger_mousie · ‎01-23-2008

Please correct me if this is wrong or bad design: I have ldaps running just by permitting the port in the ACLs and VIP class. Customer says it works fine.

I'm sure you're aware of the health probe scripts you can get from Cisco (attached). This script defaults to ldap port (386) if none is specified. So you can specify the port under the "probe scripted LDAP_PROBE" config to use ldaps (636). Perhaps you should use both scripted probes together so that if one port is unavailable the server will be taken out of service.