Cisco Application :: CSS 11500 - Keepalive Http And Port At Same Time

Apr 29, 2012

I need to configure a keepalive that check an url in a server   (http in port 9500 not in port 80) and check the port 443 in the same server. If any of them not response . the service should go down.

View 1 Replies


ADVERTISEMENT

Cisco Application :: CSS 11503 HTTP Keepalive Fails Even Though Server Responds

Nov 29, 2011

I recently "inherited" a CSS 11503 - I've only used ACEs before - and I want to get HTTP keepalives working.To start, I created a test service:
 
lb-1# show run service sunbird-http-7025-test
!************************** SERVICE **************************
service sunbird-http-7025-test
  port 7025
  ip address 141.211.229.168

[code].....

View 2 Replies View Related

Cisco Application Networking :: CSS 11500 Responds For Any Port

Dec 21, 2011

We have multiple CSS 11500 clusters.  We have found that on all of them, if you try to open a session on any port to an IP address on the backend of the CSS, the CSS will complete the SYN-ACK-ACK session with the client.  This happens regardless of whether there is something on that IP address or not.
 
Coming from any IP, if I try to telnet to ANY IP on the 10.2.2.0 subnet (whether or not there is an actual server on that IP) on any port (whether or not that port is open or not), the CSS will complete the initial connection.  I have verified this using telnet to numerous ports and viewing the transaction in a packet capture.
 
Is there any way to shut this off?  This is causing some licensing issues for our security folks that use a vulnerability scanner licensed on number of IP addresses.

View 4 Replies View Related

Cisco Application :: CSS-11500 - Use SSL Cert In Proxy List For Same VIP But On Different Port?

Aug 16, 2012

Am I able to use an SSL cert in the proxy list for the same VIP but on a different port?  

View 1 Replies View Related

Cisco Application Networking :: CSS 11501 Reboots When Making Change To Global Keepalive?

May 17, 2010

I've got an issue with a CSS 11501 where, if *any* change is made to a global keepalive (active), the device reboots. The code is 08.10.2.05. I'm unable to search the TAC archive or I would've gone there first.

View 2 Replies View Related

Cisco Application :: Cannot Access CSS 11500 Via Web Interface

Sep 26, 2011

I can access our CSSS 11500 through telnet and a serial connection.  When I try the web interface, I get:
 
CVDM Startup Error CVDM has not been granted the necessary privileges to startup successfully,  or another unknown error occurred during startup. Please close all involved  browser windows and try again by granting all requested privileges.

View 2 Replies View Related

Cisco Application :: Services With Different IP Address Subnets Over CSS 11500 Series

May 11, 2011

I have two CSS 11500 series.In just a few months i will have ready a DRS (Disaster Recovery Site), where i will have 2 more servers to add to the environment.

View 3 Replies View Related

Cisco Application :: CSS 11500 - Why Website Inaccessible Through Load Balancer

Nov 30, 2011

We have a CSS 11503 with the following partial config [code] it is clear that the server at 10.10.10.222 is active.  What we cannot understand is why web site is inaccessible thru load balancer using http://10.10.10.1.

View 2 Replies View Related

Cisco Application :: CSS 11500 - Accessing Virtual IP From Server Vlan

Jan 5, 2011

I have a question regarding CSS loadbalancer. Let's say there are 2 vlans in CSS:

1. Vlan 10: 10.1.1.0/24 as external interface, interface where most of the clients are coming from.

2. Vlan 20: 10.1.2.0/24 for real server vlan.
 
Virtual IP 10.1.1.10 is created in CSS on behalf of two real servers (10.1.2.11 & .12) in Vlan 20. Client from Vlan 10 can http access to 10.1.1.10 successfully.
 
In Vlan 20 there's also few clients which need to access servers via virtual IP. Vlan 20 Client PC (10.1.2.101) can ping 10.1.1.10, but can't access 10.1.1.10 http service.
 
Is there any way for CSS to forward service request coming from Server vlan to be send back to the same segment?

View 9 Replies View Related

Cisco Application :: Does CSS 11500 Support Stickiness Based On Source IP

Oct 29, 2012

i don't know why cu need this feature, he want stickiness based on source ip and source port.  Does CSS 11500 support stickiness based on source IP and source port?or is there any other method to support stickness based on source ip and sourceport?

View 12 Replies View Related

Cisco Application :: 11500 / Redirect SSL From Base Site To Different Page On Same SSL Site

Aug 24, 2011

I'm attempting to redirect SSL from the base site to a different page on the same SSL site.  I want to redirect https://10.4.16.54/* to[URL] .  If I enter[URL], site loads, but if I enter simply https://10.4.16.54, it times out.  The ssl_sharepoint service is my ssl_proxy_list. 

  content Sharepoint_https
    flow-timeout-multiplier 10
    sticky-inact-timeout 35
    vip address 10.4.16.54
    application ssl

[code]....

View 5 Replies View Related

Cisco Application :: 11503 CSS HTTP Redirects

Jul 19, 2011

I have a number of web sites that are currently being load balanced by CSS 11503s runninng 8x code.  I was recently requested to configure HTTP -->  HTTPS redirects on the CSS for every site.  In the past, I have only configured the redirects for sites that had a requirement.  Now it appears that the server teams want all content encrypted.

1)  What impact will this have on the CPU?
2)  What impact will this have on Memory utilization?
3)  Is there a maximum nubmer on redirects?
4)  Are there other things I should be concerned about?

View 3 Replies View Related

Cisco Application :: HTTP 404 Errors In CSS11500?

Sep 11, 2012

I'm seeing the following error on one of our real server. Is there a way to find out who is spamming?
 
10.x.x.x(VIP) - - "POST /slmruntime/service HTTP/1.0" 404 1214

View 1 Replies View Related

Cisco Application :: ACE30 Match Http Url Except Specific One

Feb 4, 2013

is it possible to construct the L7 HTTP class-map expression to match all URLs except one? I have 1 correct url, for example: /correcturl.* and want to redirect requests to all other possible URLs to this one, without the need to list them all in "possitive match" statements.

View 6 Replies View Related

Cisco Application :: Insert Http Header Ace 4710

Jan 9, 2013

I have an ACE version A5.2 configured in one-armed leg (doing source nat). I have a requirement to add(or copy) the "referer" header value from the original request to the request send by ACE.
 
I cannot figure out how to copy this value. It is easy to add the source ip address  by adding: " insert-http x-forwarded-for header-value "%is".
 
So how I am going to copy the Refere header?
 
#Referer
#Address (URI) of the resource from which the URI in the request was obtained

View 2 Replies View Related

Cisco Application :: CSS Or ACE 4710 Redirect HTTPS To Http

Feb 27, 2012

For a CSS with a SSL module (performing SSL termination) - is it possible to impliment a redirect on https URL to send to equivalent http URL.If my understanding is correct, the CSS will do SSL termination and then use an http content rule on the resultant http stream as it is recursively handled by the CSS ? This would mean that the SSL module has no way of seeing/acting on layer 5 and above data (i.e. picking up on a specific URL) and can not itself issue a redirect - i.e. you could not associate a redirect statement or service with the following ssl content rule ? [code]The CSS would instead rely on a http content rule to impliment a redirect - i.e. you would have to associate a redirect statement or service to the following http content rule instead?
 
But if the CSS is already handling traffic for existing url...  traffic that is going to cause a loop when a client goes direct to. url...I realise the requirment is uncommon / a bit convoluted, its one of those don't ask type scenarios - aimed at achieving a specific requirement.Would the ACE 4710 be able to handle such a scenario any differently ?

View 7 Replies View Related

Cisco Application :: ACE 4710 - Redirect HTTP To HTTPS?

Jun 21, 2012

I am trying to make a redirect from http to https. the goal is whenever a user writes in http://10.80.199.71 it should be redirected to https://10.80.199.71 I am just haveing some trouble making it work.

View 4 Replies View Related

Cisco Application :: ACE 4700 Redirect HTTP To HTTPS?

Feb 6, 2013

How to configure a redirection on the ACE from HTTP to HTTPS using specific URL example [URL] to [URL], the SSL certificates were installed on the servers.

View 7 Replies View Related

Cisco Application :: IOS HTTP Authorization Vulnerability When Traversing ACE 4710

Oct 10, 2012

We had a PCI security audit of an existing VIP on our ACE 4710. The VIP is set up as HTTPS terminating on the ACE with a http redirect for all 80 traffic.  The audit reported this VIP was vunerabled to the Cisco "IOS HTTP Authorization Vulnerability".  Which basicly states, http Management is on this IOS device.  It does not make any sense, as the VIP is pointed to a pair IIS servers?

[URL]

View 2 Replies View Related

Cisco Application :: 4710 - HTTP-Cookie Sticky Not Working

Feb 1, 2012

I have a requirement to load balance OWA 2010 inbound connectivity to 2 CAS servers using a ACE 4710 with sticky sessions enabled.
 
The CAS servers are currently responding on 80 or 443 at this moment in time. Eventually I want to off load the SSL to the ACE 4710, its currently running on the CAS servers. I need to enable sticky sessions to keep the session to the same CAS server for each internet based connection. I also have a proxy enabled for inbound connectivity so I cannot use source IP.
 
Here is my configuration but it doesn’t seem to be working, i am currently testing with port 80 connections not SSL.
 
serverfarm host INHOUSE-EXCHANGE-OWA-vFARM
predictor response app-req-to-resp samples 4
probe 443
probe HTTP-PROBE
rserver INHOUSE-TEST-CAS01-SVR
   inservice(code)

View 12 Replies View Related

Cisco Application Networking :: CSS 115003 Configuring HTTP Compression (not Work)

Jan 18, 2012

I need configure HTTP Compression by hardware on CSS 11503. I make config like this [URL]
 
My config:
 
service s1
ip address 10.1.66.11 (web server)
keepalive type none

[Code].....

View 4 Replies View Related

Cisco Application Networking :: GSS-4492-k9 Does GSS HTTP-HEAD Supports Https

Jun 26, 2011

I am configuring a GSS to check an Web server that responds to https requests.I put 443 as the port but I don´t see replies from the server and the Answer Status is always offline.Other servers using http on port 80 are showing OK.The appliance is a GSS-4492-k9 Version 3.1(0).

View 2 Replies View Related

Cisco Application :: ACE 4710 Cannot Confirm HTTP Cookie Sticky Connections

Jan 8, 2013

We are using a ACE 4710 with A3(2.6) software release.I had to change our sticky load balancing method for HTTPS to cookie based.However while connections appear to work if I look at the show sticky database table I can not see or confirm sticky entries for the cookie based connections.Here or config snippets to show the config
 
sticky http-cookie ghh-www scook-ghh
cookie insert browser-expire
serverfarm ghh-www-443
class-map match-all ghh-www-443_CLASS
2 match virtual-address 172.16.1.21 tcp eq https

[code].....

View 22 Replies View Related

Cisco Application :: 4710 Maximum 10 Http Header Map Is Allowed Per Policy

Nov 9, 2011

We are migrating from ACE 20 module to an ACE 4710 appliance. [code] When pasting in the config on the ACE 4710 running A4(2.1) code, I get the subject error message when trying to enter in the highlighted sticky-serverfarm command above.  Again, this config works on the older hardware and older code.

View 1 Replies View Related

Cisco Application :: Can ACE (4710) Behave As Reverse Proxy For HTTP And SSL Traffic

Jul 12, 2011

Can the ACE appliance behave as a reverse proxy for http and ssl traffic? I would assume it can given how it does SLB but SLB is not a requirement at this time.

View 2 Replies View Related

Cisco Application :: ACE4710s / HTTP Redirection To Individual Servers In Farm?

Jun 19, 2012

I am wondering if there is a method to redirect particular URLs to individual real servers in a server farm.Scenario:   We have an url which is setup on our ACE4710s (A3 2.4) to load balancer to a particular server farm as per standard setup i.e.Customers access [URL] on an external VIP, this is then load balanced to a server farm "SF_WEBSITE" consisting of 2 real servers "Server_A" and "Server_B". Nothing difficult in this set up.  However, I have eeen asked if it is possible to redirect certain urls to individual servers within the server farm "SF_WEBSITE": e.g.
 
Action 1 - Customers access [URL] is redirected to "Server_A" only

Action 2 - Customers access [URL] is redirected to "Server_B" only

Default Action - Customer access [URL] anything else is redirected to server farm "SF_WEBSITE" and is load balanced between "Server_A" and "Server_B"
 
The Standard Class Maps and Policy would be something like:
 
policy-map type loadbalance first-match SLB_WEBSITE
class class-default
  serverfarm SF_WEBSITE
 
Where I thought I would need something like:
 
class-map type http loadbalance match-all CMAP_AREA1
description CMAP used to capture specific URL for area 1
2 match http url /area1 
class-map type http loadbalance match-all CMAP_AREA2
description CMAP used to capture specific URL for area 2
2 match http url /area2

[code]...
 
I think the above method is ok for 1 instance, but if it test successfully, my company would want to to roll this out across dozens of server farm configurations each consisting of numerous real servers, which will make the administration and implementation time overheads massive, not to mention complicating and lengthening the configuration.

View 7 Replies View Related

Cisco Application Networking :: 4710 Appliance / HTTP To HTTPS Redirection URL

Sep 25, 2011

i have a 4710 appliance (one armed) and i am load balancing with two webservers. In the URL, there are links that need to be redirected to https:

[URL]
 
i am using the

rserver redirect REDIRECT-TO-HTTPS[URL] 
 
The https is working but i have a problem. when i access the Main link "first" it is redirected to https to the Main link.But if i access one of the Sublinks directly(without having to click on the main link first) the page is redirected to https but to the Main Link. i have to click the Sublink again in order to get the page.How can i redirect to https and stay on the same page? What might be the general link in the webserver-redirection?

View 4 Replies View Related

Cisco Application Networking :: ACE 4710 - How To Configure HTTP Rewrite Request / Response

Sep 18, 2011

We want to mask part of the path prefix to hide development content: For example: the site(s) are: [URL]However we don't want anything with acme showing...so we would want the loadbalanced url to be: [URL] ...for requests and responses. I think this would be an http re-write request/response scenario?Is this possible to configure this on the ACE Device? We've got the load balance configuration down...not sure how to do this re-write type scenario?

View 2 Replies View Related

Cisco Application :: ACE 4710 Giving Mangled Http Requests In Apache Access

Oct 21, 2012

After replacing a Cisco CSS/SSL  Accelorator and PIX firewall with an ACE 4710 to do load balancing and  SSL encryption behind an ASA firewall we started seeing mangled HTTP  requests in the Apache access logs for the servers in the server farm. This is occurring for several different URLs and not just the one above and for multiple web browsers.The ACE load balances to servers running Tomcat 7 with Apache HTTP server v. 2.2.14. A recent ACE software upgrade to A5(2.1) has not fixed the problem.

View 1 Replies View Related

Cisco Switching/Routing :: Shutdown Specific Port On 3750x And Monitor Port At Same Time?

Oct 23, 2011

is it possible to shutdown a  specific port on my 3750x and monitor this port at the same time .for example , im dealing with a mac authenticated network using port security , i want to shut down all the ports that are not used at the moment , however , if some one gets connected to the one of the shutdown ports  i want to know the mac address of the user or atleast to know that i have someone who is just plugged in to the one of the shutdowned ports .

View 4 Replies View Related

Port Setting For HTTP 80 / HTTPS 443 And FTP 21?

Sep 12, 2011

how do I install Firefox if I cannot connect to the internet? Can I "save" it to a disc or flash drive from another computer.

View 7 Replies View Related

Cisco Application :: ACE30-MOD-K9 Gateway Find Retry Time

Feb 16, 2013

ACE version is A5_2_1.the transfer was carried out by the following procedures.1) C6509 vlan set2) client and serverfarm vlan svclc vlan-group not included.3) ACE configuration.  - FT vlan 999  - Client vlan 20  - Serverfarm vlan 154) ACE services enable

Problem occurs, I know why I do not know.

Was configured as follows.

======>> MSFC Configure (C6509#1 and C6509#2)
svclc autostatesvclc multiple-vlan-interfacessvclc module 4 vlan-group 150svclc vlan-group 20  999
C6509#1interface Vlan20   ip address 172.16.20.2 255.255.255.0   no shutdown
ip route 192.168.15.0 255.255.255.0 172.16.20.100
[Code]....

View 1 Replies View Related

D-Link DIR-615 :: HTTP Listening On Port 65535

Aug 4, 2011

I am just setting up a LAN using DIR-655 and I noticed this line in the logs: notice   Aug 4 03:25:55   HTTP listening on port 65535

Is the router listening to that port?

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved