login timeout 30 crypto chaingroup CHAINWILDCARD2009 cert gs_root.pem cert intermediate.pem crypto chaingroup JANET-Chain cert sureserverEDU.pem cert gtecybertrustglobalroot.pem access-list ACL1 line 10 extended permit ip any any access-list PERMIT-ALL line 10 extended permit ip any any access-list PERMIT-ALL line 20 extended permit icmp any any probe http Probe-App interval 30 passdetect interval 10 request method get url /App/checkStatusForLb expect status 200 200 probe tcp Probe-App-Chat port 2304 interval 30 passdetect interval 10 parameter-map type connection IDLE-99-Minutes set timeout inactivity 5940 parameter-map type ssl PARAMMAP_SSL cipher RSA_WITH_RC4_128_MD5 priority 2 cipher RSA_WITH_RC4_128_SHA priority 2 cipher RSA_WITH_DES_CBC_SHA priority 3 cipher RSA_WITH_3DES_EDE_CBC_SHA priority 3 cipher RSA_EXPORT_WITH_RC4_40_MD5 cipher RSA_EXPORT_WITH_DES40_CBC_SHA parameter-map type http persist persistence-rebalance rserver redirect HTTP-to-HTTPS webhost-redirection https://%h%p 301 inservice rserver host apptier-a ip address 192.168.44.9 inservice rserver host apptier-b ip address 192.168.44.14 inservice rserver host apptier-c ip address 192.168.44.15 inservice ssl-proxy service PSERVICE_SERVER key wildcard2009-1yr.key cert wildcard2009-1yr.pem chaingroup CHAINWILDCARD2009 ssl advanced-options PARAMMAP_SSL ssl-proxy service PSERVICE_SERVER-App key App.key cert cert_1604279361.pem chaingroup JANET-Chain ssl advanced-options PARAMMAP_SSL ssl-proxy service PSERVICE_SERVER-Appdev key Appdev.key cert cert_474251717.pem chaingroup JANET-Chain ssl advanced-options PARAMMAP_SSL serverfarm host FARM-App description App Serverfarm probe Probe-App rserver apptier-a 80 inservice rserver apptier-b 80 inservice rserver apptier-c 80 inservice serverfarm host FARM-App-Chat description App Chat and Whiteboard probe Probe-App-Chat rserver apptier-a 2304 inservice rserver apptier-b 2304 inservice rserver apptier-c 2304 inservice serverfarm redirect HTTP-to-HTTPS rserver HTTP-to-HTTPS inservice sticky ip-netmask 255.255.255.255 address source FARM-App-Sticky timeout 99 replicate sticky serverfarm FARM-App class-map match-any L4VIPCLASS-Chat 2 match virtual-address 192.168.15.55 tcp eq 2304 class-map match-any L4VIPCLASS-Web 3 match virtual-address 192.168.15.55 tcp eq https class-map match-any L4VIPCLASS-www 2 match virtual-address 192.168.15.55 tcp eq www class-map type management match-any REMOTE-ACCESS 2 match protocol ssh source-address 192.168.0.0 255.255.0.0 3 match protocol telnet source-address 192.168.0.0 255.255.0.0 4 match protocol icmp source-address 192.168.0.0 255.255.0.0 5 match protocol snmp source-address 192.168.0.0 255.255.0.0 policy-map type management first-match REMOTE-MGMT-ALLOW-POLICY class REMOTE-ACCESS permit policy-map type loadbalance first-match HTTP_REDIRECT class class-default serverfarm HTTP-to-HTTPS policy-map type loadbalance first-match LB-POLICY-Chat class class-default serverfarm FARM-App-Chat policy-map type loadbalance first-match LB-POLICY-Web class class-default sticky-serverfarm FARM-App-Sticky insert-http WL-Proxy-SSL header-value "true" insert-http X-Forward header-value "%is" policy-map type loadbalance first-match LB-POLICY-www class class-default sticky-serverfarm FARM-App-Sticky policy-map multi-match L4POLICY class L4VIPCLASS-Web loadbalance vip inservice loadbalance policy LB-POLICY-Web loadbalance vip icmp-reply active loadbalance vip advertise nat dynamic 1 vlan 376 appl-parameter http advanced-options persist ssl-proxy server PSERVICE_SERVER-Appdev connection advanced-options IDLE-99-Minutes class L4VIPCLASS-Chat loadbalance vip inservice loadbalance policy LB-POLICY-Chat loadbalance vip icmp-reply active loadbalance vip advertise nat dynamic 1 vlan 376 connection advanced-options IDLE-99-Minutes class L4VIPCLASS-www loadbalance vip inservice loadbalance policy LB-POLICY-www loadbalance vip icmp-reply active loadbalance vip advertise nat dynamic 1 vlan 376 appl-parameter http advanced-options persist connection advanced-options IDLE-99-Minutes service-policy input REMOTE-MGMT-ALLOW-POLICY service-policy input L4POLICY interface vlan 375 description ACE-App-Clientside ip address 192.168.15.54 255.255.255.240 alias 192.168.15.52 255.255.255.240 peer ip address 192.168.15.53 255.255.255.240 access-group input PERMIT-ALL access-group output PERMIT-ALL no shutdown interface vlan 376 description ACE-App-Serverside ip address 192.168.15.66 255.255.255.240 alias 192.168.15.65 255.255.255.240 peer ip address 192.168.15.67 255.255.255.240 access-group input PERMIT-ALL nat-pool 1 192.168.15.68 192.168.15.68 netmask 255.255.255.240 pat no shutdown ip route 0.0.0.0 0.0.0.0 192.168.15.49 ip route 192.168.44.9 255.255.255.255 192.168.15.69 ip route 192.168.44.14 255.255.255.255 192.168.15.69 ip route 192.168.44.15 255.255.255.255 192.168.15.69