WAF - "How to" question

Answered Question
Nov 5th, 2008
User Badges:
  • Bronze, 100 points or more

I've read the firewall administrator's guide and I'm still not sure that I know how to get the WAF to answer for multiple ip addresses. For example, if I want the following to happen:


192.168.1.101:80 (WAF) -> 172.16.1.1 (Backend server)

192.168.1.102:443 (WAF) -> 172.16.1.2 (Backend server)


Are those 2 ip addresses configured from the console on the WAF? Does anyone have any insight about how to configure the WAF to redirect for multiple ip addresses?


Thank you,

Jim

Correct Answer by David Paschich about 8 years 5 months ago

You need to first configure the additional IP addresses using the console (SSH or video), then configure the policy to accept those IP addresses using the Manager. For more information on doing the console configuration, please see:


http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_waf/v60/administration/guide/axg_admin_initialconfig.html#wp1090496

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
Loading.
Correct Answer
David Paschich Mon, 11/17/2008 - 10:11
User Badges:

You need to first configure the additional IP addresses using the console (SSH or video), then configure the policy to accept those IP addresses using the Manager. For more information on doing the console configuration, please see:


http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_waf/v60/administration/guide/axg_admin_initialconfig.html#wp1090496

jim_berlow Mon, 11/17/2008 - 12:43
User Badges:
  • Bronze, 100 points or more

Thank you, this did the trick and was very straightforward. Only thing to add is that the order is important. I put in the rules through the manager first and when deploying it the Reactor process shutdown. Lesson learned - I'll always put in the ip address through the console first.


Thanks for your help!

Actions

This Discussion