Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Debugging CSS

I am still having problems getting multiple ports to load balance with one-armed bandit configuration. Actually http is loadbalancing fine - but https is not working at all. What debug can I run on the CSS to see if my browser initiated https requests are hitting the CSS? The show summ is showing no hits yet I know there is nothing blocking traffic to the CSS or to the server in question.

service oldwww:443

keepalive port 443

protocol tcp

ip address 26.19.98.11

port 443

keepalive type tcp

active

content www.demo:443

balance aca

advanced-balance ssl

vip address 26.19.98.45

protocol tcp

port 443

add service oldwww:443

active

group Servers2

vip address 26.19.98.45

add service oldwww:80

add service oldwww:443

active

Owner Content Rules State Services Service Hits

demo_master testssl2 Active ssltesta 2

www.demo:80 Active oldwww:80 151

www.demo:443 Active oldwww:443 0

1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: Debugging CSS

If you want to use 'advanced-balance ssl' you need to also configure the command 'application ssl' to tell the CSS to expect ssl traffic.

There is no debug command on the CSS.

If something does not work, capture a sniffer trace to see what is going on.

Gilles.

3 REPLIES
Cisco Employee

Re: Debugging CSS

If you want to use 'advanced-balance ssl' you need to also configure the command 'application ssl' to tell the CSS to expect ssl traffic.

There is no debug command on the CSS.

If something does not work, capture a sniffer trace to see what is going on.

Gilles.

New Member

Re: Debugging CSS

That helped somewhat. Thank-you. The service hits are now incrementing. So no doubt the traffic is getting there. But still no joy at the actual redirection from the ssl VIP to the ssl service.

www.demo:443 Active oldwww:443 6

New Member

Re: Debugging CSS

Got it! Woot!! Can I buy you a beer?

126
Views
0
Helpful
3
Replies