cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
501
Views
5
Helpful
3
Replies

Use cookie sticky for http/s and source for all other ports

jason.williams
Level 1
Level 1

I'm trying to configure OWA and Exchnage behind the ACE.  Both are on the same servers/serverfarm.

I want to configure stickyness to use cookies when connecting to OWA (http and https), but use souce IP for all other ports.

I could probably use 2 different VIPs, one for OWA and one for Exchange, but I was trying to avoid that.

I know I can set up a VIP class map to match to ports 80 and 443, but how do I create one for "everything else"?

Thanks.

Jason

3 Replies 3

Kanwaljeet Singh
Cisco Employee
Cisco Employee

Hi Jason,

You can create a third class map for all other ports.

(config-cmap)# 2 match virtual-address 1.1.1.1 tcp any

You can use this class in policy map multi match at the end.

Let me know if you have any questions.

Regards,

Kanwal

So I'm clear, my multi-match policy takes the first match, correct?

Here is what I have:

sticky ip-netmask 255.255.255.255 address source EXCHANGE2010

timeout 60

replicate sticky

serverfarm EXCHANGE2010_FARM_LB

sticky http-cookie MS-OWA2010 OWA2010_COOKIE_STICKY

  cookie insert

  timeout 60

  replicate sticky

  serverfarm EXCHANGE2010_FARM_LB

class-map match-all VIP_OWA2010

  3 match virtual-address 1.1.1.1 eq www

  4 match virtual-address 1.1.1.1 eq https

class-map match-all VIP_EXCHANGE2010

  3 match virtual-address 1.1.1.1 any

policy-map type loadbalance first-match PM_OWA2010

class class-default

  sticky-serverfarm OWA2010_COOKIE_STICKY

policy-map type loadbalance first-match PM_EXCHANGE2010

class class-default

  sticky-serverfarm EXCHANGE2010

policy-map multi-match CLIENTSIDE_VIPS

class VIP_OWA2010

  loadbalance vip inservice

  loadbalance policy PM_OWA2010

  loadbalance vip icmp-reply active

class VIP_EXCHANGE2010

  loadbalance vip inservice

  loadbalance policy PM_EXCHANGE2010

  loadbalance vip icmp-reply active

Hi Jason,

Yes it looks alright!

Regards,

Kanwal