Cisco Application :: Configuring URL Redirect On ACE 30 Version A4 (1.0)?

Dec 18, 2011

I have a problem configuring URL redirect on ACE 30 (Version A4(1.0)).When a user enters IP address or a name of  a service [URL], the ACE module should redirect him to the page [URL]. Here is my non-working config:
 
access-list OUTSIDE line 8 extended permit tcp any any eq https access-list OUTSIDE line 16 extended permit tcp any any eq www access-list OUTSIDE line 24 extended permit icmp any any
probe http Test_HTTP_1  port 80  interval 60  passdetect interval 30  passdetect count 2  request method head url /index.html  expect status 200 200  open 1
rserver redirect URL_Redirect_01  webhost-redirection [URL] 302  inservicerserver host S1  ip address 10.0.0.2
inservicerserver host S2  ip address 10.0.0.3

[code]....
 
it works, ACE load balances to rservers. Of course, user must enter full url.With redirection configured, user recieves HTTP url redirect message with correct address [URL], but his browser does not display the page. Even directly entered full url does not display it while redirection is configured.Alternatively, does ACE30 already support url rewrite?

View 8 Replies


ADVERTISEMENT

Cisco Application :: CSS11501 Redirect Preserving URI

Oct 19, 2011

I have a application where I have to redirect a specific URL to another. The point is that the primary URL, have some information that I want to preserv after redirection, for example: url...
 
The default CSS11501 behavior is to redirect the primary URL to http://xyz.com. Just that.

View 1 Replies View Related

Cisco Application :: ACE 4710 With HTTPS Redirect

Sep 20, 2011

i have ACE 4710 appliance that terminate SSL and the connection to the servers is http.
 
The ACE (one Armed) is load balancing between two web servers and i am using stickness in order to take the connection on the same server based on cookie.I can access the website either by http or https., where on the web page there is a login credential to access using username and password.
 
When i access the website using https everything works fine and i can login to my account in https mode.When i access the website through http and login to my account the URL is redirected to https...normal because i am using action-list to rewrite the http into https. But when i exit the browser and access the website again using http it is not redirected to https(although i see that i am still login into my account i can see all the inforamtion in my account).
 
The customer wants the connection to be https even when i exit the browser and access the website again (within short time before the cookie exipres)

View 3 Replies View Related

Cisco Application :: CSS Or ACE 4710 Redirect HTTPS To Http

Feb 27, 2012

For a CSS with a SSL module (performing SSL termination) - is it possible to impliment a redirect on https URL to send to equivalent http URL.If my understanding is correct, the CSS will do SSL termination and then use an http content rule on the resultant http stream as it is recursively handled by the CSS ? This would mean that the SSL module has no way of seeing/acting on layer 5 and above data (i.e. picking up on a specific URL) and can not itself issue a redirect - i.e. you could not associate a redirect statement or service with the following ssl content rule ? [code]The CSS would instead rely on a http content rule to impliment a redirect - i.e. you would have to associate a redirect statement or service to the following http content rule instead?
 
But if the CSS is already handling traffic for existing url...  traffic that is going to cause a loop when a client goes direct to. url...I realise the requirment is uncommon / a bit convoluted, its one of those don't ask type scenarios - aimed at achieving a specific requirement.Would the ACE 4710 be able to handle such a scenario any differently ?

View 7 Replies View Related

Cisco Application :: ACE 4710 - Redirect HTTP To HTTPS?

Jun 21, 2012

I am trying to make a redirect from http to https. the goal is whenever a user writes in http://10.80.199.71 it should be redirected to https://10.80.199.71 I am just haveing some trouble making it work.

View 4 Replies View Related

Cisco Application :: ACE 4700 Redirect HTTP To HTTPS?

Feb 6, 2013

How to configure a redirection on the ACE from HTTP to HTTPS using specific URL example [URL] to [URL], the SSL certificates were installed on the servers.

View 7 Replies View Related

Port Redirect With Default Ports On Application?

Apr 26, 2012

I'm running several game and file servers via a dynamic IP, which I unfortunately cannot change to a static connection for several reasons. I've solved this by using No-IP, which is a Dynamic IP resolution service. This solved the first part of my problem - I can give people IP's for their websites, such as myfreemusic.sytes.net and so forth, but they all HAVE to append their ports to the url - i.e.

site1.sytes.net:90
site2.sytes.net:91

My main problem right now is the game servers - I'm hosting games that default host to 25565, and though I can change the ports the server hosts from, I must give those who want to connect the ports at the end of their urls, i.e.

server1.sytes.net:25566
server2.sytes.net:25567

I know DNS is essentially agnostic when it comes to ports, so no solution there. And I don't think the game (Minecraft vis-a-vis bukkit) supports SRV records, and even if they did, I'd have no idea how to configure them. How can I resolve static urls redirecting to a dynamic IP by pointing them to ports?

To simplify the question -

How can I make server1.sytes.net resolve to port 25566, and server2.sytes.net resolve to port 25567 when the default port is set to 25565?

View 1 Replies View Related

Cisco Application :: ACE 4710 / Redirect All Connections From Port 443 To 9443?

Sep 13, 2012

I must  redirect all connections from port 443 to 9443.
 
this is configered and running:            
 
serverfarm host FARM-002
  probe test-xml
  rserver svx-xmlfw-lb-01 9443
    backup-rserver svx-xmlfw-lb-02 9443
    inservice
  rserver svx-xmlfw-lb-02 9443

[code]....
     
I have in the moment following problem. All connections become redirectet to port 9443 but port 8080 shouldn`t be redirectet to port 9443. What can i change in my config to solve this problem?

View 6 Replies View Related

Cisco Application :: ASR1002 / ESP2 / Getting Error Log When Change Redirect ACL Entries

Aug 7, 2011

I've configured WCCP2 on my ASR1002/ESP2 and works fine. But got error log since I changed redirect ACL entries. Check on Cisco seems it a known bug?[URL] And seems any change on WCCP not take affected anymore. Even I removed all WCCP configure on my router, but my cache engine still got the redirected packet!?
 
Aug  8 22:41:00 CST: %FMFP-3-OBJ_DWNLD_TO_CPP_FAILED: F0: fman_fp_image:  Batch type 6 ID 0  download to CPP failed
Aug  8 22:41:30 CST: %FMFP-3-OBJ_DWNLD_TO_CPP_FAILED: F0: fman_fp_image:  Batch type 6 ID 0  download to CPP failed
Aug  8 22:42:00 CST: %FMFP-3-OBJ_DWNLD_TO_CPP_FAILED: F0: fman_fp_image:  Batch type 6 ID 0  download to CPP failed
Aug  8 22:42:30 CST: %FMFP-3-OBJ_DWNLD_TO_CPP_FAILED: F0: fman_fp_image:  Batch type 6 ID 0  download to CPP failed

[code]....

View 1 Replies View Related

Cisco Application :: Apply Policy Only On Specific Subnet / Port 443 Traffic Can Be Redirect And Rest

Feb 16, 2012

I am facing problem with ACE configuration. I want to redirect 443 traffic to my Proxy Server. But I am not able to do this. I want to redirect only subnet 192.168.80.0/24..Then only it is working but I dont have to have this policy to be applied on all the users only one subnet I want to have under HTTPS policy.
 
how can I apply the policy only on specific subnet so that port 443 traffic can be redirect and rest of all subnets can go direclty to Internet.

View 8 Replies View Related

Cisco Firewall :: Configuring UC-Proxy On ASA 5505 Version 8.0?

Jan 24, 2012

I'm trying to configure UC-Proxy using an ASA 5505 with software version 8.0.4.I was following the instructions in DOC-5704 and ASA 8.0 CLI.I don't have USB security tokens in UC solution, instead I'm using IP phones Cisco 7961 with MIC.I configure all the items as the documentation says but when I restart the phone outside the Firewall, the 7961 don't registrate with the Call Manager.Checking the troubleshooting I found that it's possible certificates problems but I don't know if I need to do something in phones.
 
I would like to know if there is any consideration when the UC proxy works just with MIC.The outside phone is a Cisco 7961 configured with static IP address and TFTP address of Call Manager (static NAT in ASA).

View 6 Replies View Related

Cisco Application :: 11500 / Redirect SSL From Base Site To Different Page On Same SSL Site

Aug 24, 2011

I'm attempting to redirect SSL from the base site to a different page on the same SSL site.  I want to redirect https://10.4.16.54/* to[URL] .  If I enter[URL], site loads, but if I enter simply https://10.4.16.54, it times out.  The ssl_sharepoint service is my ssl_proxy_list. 

  content Sharepoint_https
    flow-timeout-multiplier 10
    sticky-inact-timeout 35
    vip address 10.4.16.54
    application ssl

[code]....

View 5 Replies View Related

Cisco :: LMS Version 4.1 - Configuring Dashboards Based On Defined Roles?

May 14, 2012

I am trying to configure the dashboards for the pre-defined roles ie) Network Operator, Network Administrator, Helpdesk, etc but I cannot find the document to do this. I am running LMS version 4.1.

The goal is to create users and put them in one of these roles and then they would inherit these dashboards when they log on. Can this be done on LMS ? The doco that I am reading says that each user needs to configure their own dashboard or they can use the public dashboard as a starting point.

View 1 Replies View Related

Cisco Application :: Configuring IP SLA On 2900?

Jan 9, 2013

I am having two sites, at one site the ISP is terminated on 2900 Router and at one site ISP is terminated on 3500 L3 Switch. Now need to configure the IP SLA on this. In the current setup I am having two 2900 routers at one location and 3500 L3 switches which by point to point link.

View 1 Replies View Related

Cisco Application :: Configuring URL Filter In ACE4710

Jul 10, 2011

I have 2 ACE4710 in HA enviroment, they receive connection from Internet. What I need to configure is following:
The ACE have configured two URL, with the same port and VIP Address, for example:
 
URL-1: www.xxxxx.com
URL-2: www.xxxxx.com/Admin
VIP Address: 10.10.10.10
Port: 8443
 
All clients point to unique VIP and Port configured, I need to know if I can apply any filter or rule that allows me to distinguish when a customer goes to the URL1 or URL2.If any client try to access to URL-2, your traffic must be deny.In summary, from Internet I should be able to go only to URL-1.

View 3 Replies View Related

Cisco Application :: Traceroute Not Working On ACE Version A2 (3.3)?

May 17, 2011

My setup is :
 
Source--- Router 1 ( ip 1.1.1.1) --ACE---router---cloud---customer---router--destination( ip 99.99.99.99).
  Traceroute from client to destination shows the following:
 traceroute 99.99.99.99
traceroute to 99.99.99.99 (99.99.99.99), 30 hops max, 40 byte packets
1  1.1.1.1 (1.1.1.1)  1.10 ms  1.78 ms
2  99.99.99.99 (99.99.99.99)  1.01 ms  1.97 ms  2.511 ms
3  99.99.99.99 (99.99.99.99)  2.01 ms * 99.99.99.99 (99.99.99.99)  2.330 ms

[code]....
 
So on this, the destination is 99.99.99.99.The first hop is the default gateway, which is 1.1.1.1.After that, the next step is the Cisco ACE.After that there are several hops to the destination.Looks like for some reason the Cisco ACE is not recording his ip.( For any destination traceroute result is the saame.ICMP is allowed in the access list and also ther is ICMP inspect in my config. access-list ICMP line 10 extended permit icmp any
 
class-map type management match-any abc
  201 match protocol ssh source-address X.X.0.0 x.x.0.0
class-map match-all ICMP_allow
  2 match access-list ICMP 

[code]....
 
Version running on ACE is  Version A2(3.3)

View 1 Replies View Related

Cisco Application :: ACE Version A2(3.6) Supportability And Support By ANM 5.2?

May 17, 2012

ACE version A2(3.6) is no longer available on CCO. Replaced by A2(3.6a).

1. Is version A2(3.6) a problematic version? If so, suggestion is to implement A2(3.6a) or revert to version A2(3.5)?

2. If ACE version A2(3.6) is OK, on ANM version 5.2, will this support this ACE version? It is not listed in SDT for ANM 5.2, just need confirmation.

View 2 Replies View Related

Cisco Application :: ACE 4710 - Configuring NTLM Authentication

Jun 10, 2012

We are deploying a Microsoft Exchange 2010 server environment, which will have a ACE 4710 front end.  What we are finding is that if a server goes down, a client will need to re-authenticate to a new server.  The server team has informed me that if they use Microsoft SLB this does not happen.  They have also mentioned that we are getting basic authentication, rather than NTLM.  As a result I have read several posts/articles which mention forcing NTLM on the ACE, but none go into real detail.
 
A couple of official Cisco documents point to having the Exchange Server, and Client both set to use NTLM.  So on the server you do not need to select MAPI encryption.  I am told this is not an option here, because a multitude of clients are supported, from Outlook 2003, through to 2010.

View 1 Replies View Related

Cisco Application :: Configuring Oracle Hyperion On ACE30

Apr 14, 2013

I have a request to configure an ACE30 for Oracle Hyperion utilizing SSL termination at the SSL offloader(ACE30).  Any sample configuration or template of some sort that could guide me through what needs to be configured.  We have many applications on the ACE#) but this is the first time we are going to try SSL termination.

View 3 Replies View Related

Cisco Application :: ACE10 Version A2(3.6a) - Activate XML API Management?

Sep 18, 2012

We are using several contexts for each customer in our ACE module.One of the customer contexts needs to activate XML API to control their services.I've tried to activate it, but cannot get any http response, what can be missing?ACE10 version A2(3.6a)
  
class-map type management match-any HTTP-ALLOW_CLASS
  2 match protocol http source-address 10.110.0.0 255.255.254.0
  3 match protocol http source-address 10.60.208.80 255.255.255.248
class-map type management match-any HTTPS-ALLOW_CLASS
  2 match protocol https source-address 10.110.0.0 255.255.254.0
  3 match protocol https source-address 10.60.208.80 255.255.255.248

[code]....

View 3 Replies View Related

Cisco Application :: What Version Of Code Are Supported On ACE20

Mar 18, 2012

I see several code versions that seem to support on ACE30.Is A2.3.4 Or A2(3.5) that latest version for ACE20-MOD-9?Will the version 4 or 5 run on ACE20?I currently user A2(3).

View 3 Replies View Related

Cisco Application :: ACE 4700 Configuring SSL Termination Weblogic Server 10.3.6

Oct 23, 2012

Im trying to configure an ACE 4700 so that SSL termination is done on the ACE and HTTP reaches the weblogic server instance. I have a working setup of a Apache reverse proxy doing SSL offloading and using a weblogic module and that works fine Was reading [URL]. Any working config example for doing this with the ACE4700

View 2 Replies View Related

Cisco Application :: ACE 4710 - Configuring Backend Server Monitoring?

Apr 6, 2013

Currently running an ACE 4710, which is handling all of our inbound SSL connections and then forwarding requests thru to backend web servers. This all works fine.
 
My question is this..Right now we are not load balancing any of the backen web servers. But I now have a requirement that should a web server crash or become unavailable I need to redirect that backend connection to another web server.
 
Scenario is more like I have 2 web servers both serving same content, but I want one server to take all the connections unless it fails, at that point have all the connections forwarded to 2nd server.Is there a way to setup the load balancing where the 1st server gets all the connections until a failure happens ?

View 1 Replies View Related

Cisco Application :: ACE20 / Configuring Timeout For IP Address Stickiness

Jan 18, 2012

We are using an ACE20 module running version A2(3.2).I have a question regarding IP stickyness and the timeout parameter.I found this in the "Server load balancing configuration guide" (in a section entitled: "Configuring a Timeout for IP Address Stickiness"):
 
"The sticky timeout specifies the period of time that the ACE keeps (if possible) the IP address sticky information for a client connection in the sticky table after the latest client connection terminates. The ACE resets the sticky timer for a specific sticky-table entry each time that the module opens a new connection or receives a new HTTP GET on an existing connection that matches that entry."
 
The parts in bold seem to point to the fact that the timeout is an "inactivity timeout" as the counter is reset on every new connection.The next section in the documentation is entitled: "Enabling an IP Address Sticky Timeout to Override Active Connections" and says:
 
"By default, the ACE ages out a sticky table entry when the timeout for that entry expires and no active connections matching that entry exist. To specify that the ACE time out IP address sticky table entries even if active connections exist after the sticky timer expires, use the timeout activeconns command."
 
This seems to contradict the previous statement.So my question is: is the IP stickyness timeout an "inactivity timeout" or not?

View 1 Replies View Related

Cisco Application :: ANM 4.3 Demo Version / Unable To Install License

Sep 18, 2011

I am installing the Demo version of ANM 4.3 on a virtual machine.The install was successful, however when i try to import the demo licence from my laptop to the server it does not allow me to tftp the file to the server.[URL]

View 1 Replies View Related

Cisco Application :: Disable Telnet For ACS 1120 Appliance Version 5.0

Feb 5, 2012

disable telnet for ACS 1120 Appliance version 5.0.0.21 .is there anway to do it , not able to login via telnet and ssh it says wrong credentials but webgui is working fine with same user and password.

View 1 Replies View Related

Cisco Application :: 47XX - Run Mixed VMware Cluster Version 3.5 And 4.1 On ACE

Jun 28, 2011

I have a CAS array for Exchange 2010 configured to loadbalance on my Cisco ACE 47XX. My question is: Can I run a mixed VMware cluster version 3.5 and 4.1 on my ACE? I am experiencing is dropped RPC connections and I was wondering if that could be the cause of it or maybe I am misconfigured something on the ACE
 
Another question:Should I seperate the two cluster versions on their own serverfarm and than loadbalance the farms? What I mean is serverfarm 3.5 and serverfarm 4.1 and than loadbalance them.

View 3 Replies View Related

Cisco Application Networking :: CSS 115003 Configuring HTTP Compression (not Work)

Jan 18, 2012

I need configure HTTP Compression by hardware on CSS 11503. I make config like this [URL]
 
My config:
 
service s1
ip address 10.1.66.11 (web server)
keepalive type none

[Code].....

View 4 Replies View Related

Cisco Application :: Configuring Load Balancer (ACE 4710) - Unable To Ping VIP

May 13, 2013

I have trouble with new installation  LB ACE 4710 for Oracle application load balance. Problem: Unable to PING VIP - 10.11.10.55 / 24
 
Below are the simple configuration parameters:

1. ACE 4710 is connected with Cisco 3560 Switch - L2 Trunk (Channel Group)

2. Cisco 3560 Switch is connected with Cisco 6500 Switch (Core) also L2 Trunk

3. There are 3 Vlans,(255, 310, and 370), Vlan 255 is management Vlan

4. Real Servers and Virtual IP are part of Vlan 310
- VIP  - 10.11.10.55
- Real Server1 - 10.11.10.46
- Real Server2 - 10.11.10.47

5. Gateway is 10.11.10.1 (vlan 310), 10.11.70.1 (Vlan 370)

View 5 Replies View Related

Cisco Application :: Change Version In ACE 4710 To Support NTP Server External?

Oct 26, 2011

I´m Trying to synchronize the clock with NTP server external, these ntp server only support NTP version 3.Can I change the NTP version in the ACE4710 Appliance to support the ntp server external?If is possible, How I can change it ?
 
 This is the version:
 
Cisco Application Control Software (ACSW)
TAC support: [URL]
Copyright (c) 1985-2011 by Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained herein are owned by
other third parties and are used and distributed under license.

[code]....

View 1 Replies View Related

Cisco Firewall :: ASA Version 9.0(1) / Configuring NAT On Intranet Firewall?

Dec 26, 2012

configuring NAT on intranet firewall. here is the my topology:
 
  DMZ Network  - - - - - - - - - External Firewall   - - - - - - - - - Internet
                                                          |
                                                          |    
                                                          |
  Internal Network  - - - - - - - - - Internal Firewall  
 
1) I can Ping the intneral host from external firewall, internet firewall and DMZ network

2) Both ASA's are running OS Version 9.0(1)

3) ACL used permit IP any any, on both (i.e inside and outside)
 
NAT configuration on Internal Firewall  (Identity NAT)
 
object network MGMT-SRV-INSIDE           subnet 10.10.10.0 255.255.255.192
object network MGMT-SRV-identity
subnet10.10.10.0 255.255.255.192
 object network MGMT-SRV-INSIDE           nat (Inside,Outside) static MGMT-SRV-identity

[code]....

View 1 Replies View Related

Cisco AAA/Identity/Nac :: ACS1113 Version 4.2 Ssh Version 1 / Specify Only Version 2 Or Turn Off SSH?

Sep 14, 2009

McAffee scan of acs 1113 appliance running the 4.2 build 124 patch 12 version reports that a medium vulnerability exists because the system has SSH version 1.  Any way to specify only version 2 or turn off SSH?

View 9 Replies View Related

Cisco Security :: ACS 4.1 Version Recovery Disc On 4.2 Version To Recover Forgotten Password

Jan 16, 2012

Can we use ACS 4.1 version recovery disc on 4.2 verison to recover the forgotten password.

View 1 Replies View Related







Copyrights 2005-15 www.BigResource.com, All rights reserved