Here is a sample config. Traffic matching 192.168.1.250:443 will be SSL offloaded and then will be loadbalanced using rservers in Serverfarm "APP1-SFARM" if the request includes "/index"or "/docs"
ssl-proxy service APP1-SSL-PROXY
class-map match-all APP1-443-VIP
2 match virtual-address 192.168.1.250 tcp eq https
class-map type http loadbalance match-any APP1-URLMAP
2 match http url /index/.*
3 match http url /docs/.*
policy-map type loadbalance first-match APP1-Policy
policy-map multi-match VIPS-VLAN79
loadbalance vip inservice
loadbalance vip icmp-reply active
loadbalance policy APP1-Policy
ssl-proxy server APP1-SSL-PROXY
As you can see traffic will be SSL offloaded and then will be loadbalanced using rservers in Serverfarm "APP1-SFARM" if the request includes "/index" and you can use another L7 class-map to block the URL /admin and direct the requests to a dummy / redirect server farm respnds 404
VMware Trunk Port Group is supported from ACI version 2.1
VMM integration must be configured properly
ASA device package must be uploaded to APIC
ASAv version must be compatible with ACI and device package version
In the Previous articles of ACI Automation, we are using Postman/Newman as the Rest API tool to automate the ACI Configuration.
In this article I’m going to discuss on usin...
One of the first steps in building your ACI Fabric is to go through Fabric Discovery. While Fabric Discovery is usually a straightforward process, there are various issues that may prevent you from discovering an ACI switch. This article wil...