Solved: ACE - redirect url from http to https

khaderbasha · ‎10-30-2009

We need to implement ACE configuration to re-direct any web traffic from one website to secure site.

Ex:http://www.test.com to be redirected to https://www.test.com.

Appreciate if you can point me in right direction.

ciscocsoc · ‎10-30-2009

Hi,

You need to create a class-map to match HTTP and then a redirect serverfarm to send a redirect request to the browser. The following is extracted from one of my contexts:

rserver redirect RED1

webhost-redirection https://%h 302

inservice

serverfarm redirect FARM-RED1

rserver RED1

inservice

class-map match-any REDIRECT-HTTP

2 match virtual-address 192.168.12.34 tcp eq www

policy-map type loadbalance first-match LB-POLICY-REDIRECT

class class-default

serverfarm FARM-RED1

policy-map multi-match L4POLICY

class REDIRECT-HTTP

loadbalance vip inservice

loadbalance policy LB-POLICY-REDIRECT

loadbalance vip icmp-reply active

loadbalance vip advertise

HTH

Cathy

View solution in original post

ciscocsoc · ‎10-30-2009

Hi,

You need to create a class-map to match HTTP and then a redirect serverfarm to send a redirect request to the browser. The following is extracted from one of my contexts:

rserver redirect RED1

webhost-redirection https://%h 302

inservice

serverfarm redirect FARM-RED1

rserver RED1

inservice

class-map match-any REDIRECT-HTTP

2 match virtual-address 192.168.12.34 tcp eq www

policy-map type loadbalance first-match LB-POLICY-REDIRECT

class class-default

serverfarm FARM-RED1

policy-map multi-match L4POLICY

class REDIRECT-HTTP

loadbalance vip inservice

loadbalance policy LB-POLICY-REDIRECT

loadbalance vip icmp-reply active

loadbalance vip advertise

HTH

Cathy

khaderbasha · ‎10-30-2009

Hi Cathy, appreciate your very quick response, would you mind pointing me to the correct documentation and any other tool where I can test this config, some form of plug-in for packet tracer or ACE virtual simulator etc...

Thanks.

Khader

ciscocsoc · ‎10-30-2009

Hi Khader,

The Server Load Balancing Configuration Guide contains the redirection information in the section "Configuring a Real Server Relocation String".

The only way to test this is to configure it into a context on a real ACE. Wireshark will enable you to see the 302 redirection.

Cathy