Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

redirect and or sorry server with ssl

Will a service type of redirect work with a ssl rule? If the 2 primary services ws1_ssl and ws2_ssl go down would this redirect work for the ssl rule?

And would a sorry server work with the redirect service?

service ws1_ssl

ip address xx.xx.xx.xx

keepalive type script ap-kal-ssl "xx.xx.xx.xx"

active

service ws2_ssl

ip address xx.xx.xx.xx

keepalive type script ap-kal-ssl "xx.xx.xx.xx"

active

service redirect

type redirect

ip address 1.1.1.2

domain xx.xx.xx.xx

keepalive type none

active

content ssl

vip address x.x.x.x

application ssl

advanced-balance ssl

add service ws1_ssl

add service ws2_ssl

add service redirect

vip-ping-response local-remote

url "/*"

protocol tcp

port 443

active

1 REPLY
Cisco Employee

Re: redirect and or sorry server with ssl

won't work because this is SSL [encrypted] traffic.

The CSS can't encrypt the redirect and forward it to the client.

You could use a sorryserver and have a 3rd server receive the traffic, decrypt it, and send an encrypted redirect or message.

Gilles.

270
Views
0
Helpful
1
Replies
CreatePlease login to create content