Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Cisco Support Community site will be in read only mode on Dec14, 2017 from 12:01am PST to 11:30am for standard maintenance. Sorry for the inconvenience.

Silver

ACE: Strange problem with service-policy

In looking into my earlier problem with SSL termination I set up a simple test context to try to reproduce it. I now have a situation where either HTTP or HTTPS access works - but never both. Which protocol works depends on how many times I remove the service policy and re-apply it. Removing and readding causes the working protocol to flipflop between HTTP and HTTPS.

The numbers from a "sh cfgmgr internal table vip" don't entirely match.

sh cfgmgr internal table vip

VIP-Id VIP-Addr Ctx-Id Flags

---------------------------------------------------------------------------

32 128.243.160.92 2 DATA_VALID,

L3Rule_list :-->: 96: 97

Load Value: 0 Load Time stamp: Thu Jan 1 00:00:00 1970

sh cfgmgr internal table class-map

Class-Map-Id Class-Map-Name Ctx-Id Flags

---------------------------------------------------------------------------

97 #class_default_l3 2 DATA_VALID,

44 #class_default_slb 2 DATA_VALID,

98 L4VIPCLASS 2 DATA_VALID,

99 L4VIPCLASS-SSL 2 DATA_VALID,

42 REMOTE-ACCESS 2 DATA_VALID,

sh cfgmgr internal table class-map policy-map

Policy-Map-Id Policy-Map-Name Ctx-Id Flags

---------------------------------------------------------------------------

80 L4POLICY 2 DATA_VALID,

98 LB-POLICY 2 DATA_VALID,

99 LB-POLICY-SSL 2 DATA_VALID,

39 REMOTE-MGMT-ALLOW-POLICY 2 DATA_VALID,

Am I missing something critical here?

TIA

Cathy

1 REPLY
Silver

Re: ACE: Strange problem with service-policy

Config is here.

146
Views
0
Helpful
1
Replies
CreatePlease to create content