10-30-2009 08:07 AM
We need to implement ACE configuration to re-direct any web traffic from one website to secure site.
Ex:http://www.test.com to be redirected to https://www.test.com.
Appreciate if you can point me in right direction.
Solved! Go to Solution.
10-30-2009 08:19 AM
Hi,
You need to create a class-map to match HTTP and then a redirect serverfarm to send a redirect request to the browser. The following is extracted from one of my contexts:
rserver redirect RED1
webhost-redirection https://%h 302
inservice
serverfarm redirect FARM-RED1
rserver RED1
inservice
class-map match-any REDIRECT-HTTP
2 match virtual-address 192.168.12.34 tcp eq www
policy-map type loadbalance first-match LB-POLICY-REDIRECT
class class-default
serverfarm FARM-RED1
policy-map multi-match L4POLICY
class REDIRECT-HTTP
loadbalance vip inservice
loadbalance policy LB-POLICY-REDIRECT
loadbalance vip icmp-reply active
loadbalance vip advertise
HTH
Cathy
10-30-2009 08:19 AM
Hi,
You need to create a class-map to match HTTP and then a redirect serverfarm to send a redirect request to the browser. The following is extracted from one of my contexts:
rserver redirect RED1
webhost-redirection https://%h 302
inservice
serverfarm redirect FARM-RED1
rserver RED1
inservice
class-map match-any REDIRECT-HTTP
2 match virtual-address 192.168.12.34 tcp eq www
policy-map type loadbalance first-match LB-POLICY-REDIRECT
class class-default
serverfarm FARM-RED1
policy-map multi-match L4POLICY
class REDIRECT-HTTP
loadbalance vip inservice
loadbalance policy LB-POLICY-REDIRECT
loadbalance vip icmp-reply active
loadbalance vip advertise
HTH
Cathy
10-30-2009 09:34 AM
Hi Cathy, appreciate your very quick response, would you mind pointing me to the correct documentation and any other tool where I can test this config, some form of plug-in for packet tracer or ACE virtual simulator etc...
Thanks.
Khader
10-30-2009 09:43 AM
Hi Khader,
The Server Load Balancing Configuration Guide contains the redirection information in the section "Configuring a Real Server Relocation String".
The only way to test this is to configure it into a context on a real ACE. Wireshark will enable you to see the 302 redirection.
Cathy
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: