Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

how to force https using ACE module?

hi,

i have one requirment from the customer to force https for web site sections that require authentication

all web site sections that require authentication end with login.aspx

for example:

www.cisco.com/staff/login/login.aspx

www.cisco.com/empl/login/login.aspx

how to force redirection from http to https for any url end with login.aspx

i don't want any user to authenticate using http.

thanks in advance for your help

best regards,

2 REPLIES
New Member

Re: how to force https using ACE module?

Something like:

rserver redirect HTTP-to-HTTPS
  webhost-redirection https://%h%p 301
  inservice

serverfarm redirect HTTP-to-HTTPS
  rserver HTTP-to-HTTPS
    inservice

class-map type http loadbalance match-any L7CLASS-REDIRECT-HTTP-to-HTTPS
   match http url .*/login.aspx

policy-map type loadbalance first-match L7POLICY-REDIRECT-HTTP-to-HTTPS
  class L7CLASS-REDIRECT-HTTP-to-HTTPS
    serverfarm HTTP-to-HTTPS

policy-map multi-match L3IngressPolicy

  class L4VIP-SOME-VIP-CLASS
    loadbalance vip inservice
    loadbalance policy L7POLICY-REDIRECT-HTTP-to-HTTPS
    loadbalance vip icmp-reply
    loadbalance vip advertise active

and then of course having a proper HTTPS policy corresponding with the redirect...

That's how we've got things running anyways...

New Member

Re: how to force https using ACE module?

Oh yeah.. and of course

show service detail

Looking for current connections and dropped connections - being your best friend for troubleshooting

Also note, that the capture feature of ACE can be useful too

523
Views
0
Helpful
2
Replies
CreatePlease to create content