cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1165
Views
0
Helpful
1
Replies

ACE Load Balancer With ActiveX problem

jignesh.darji
Level 1
Level 1

Hi All

I am facing issue with ACE load Balancer,

SERVER-------------(http)-------------ACE----------------(https)---------------Client

Here If I removed https configuration I m able to work with Server but If put ssl configuration in ACE, client is not getting any prompt for dowload active x control and not able to work with application. He received only white blank page. This issue with Virtual IP (z.z.z.z)

If I access real server IPs it work smooth for me.!!

resource-class STICKY

  limit-resource all minimum 0.00 maximum unlimited

  limit-resource rate connections minimum 10.00 maximum unlimited

  limit-resource sticky minimum 10.00 maximum unlimited

probe http HTTP_PROBE

  interval 20

  passdetect interval 40

  receive 3

  expect status 0 499

  connection term forced

  open 1

parameter-map type ssl PARAMMAP_SSL_TERMINATION

  cipher RSA_WITH_3DES_EDE_CBC_SHA

  cipher RSA_WITH_AES_128_CBC_SHA priority 2

  cipher RSA_WITH_AES_256_CBC_SHA priority 3

rserver host Ser1

  ip address x.x.x.x1

  probe HTTP_PROBE

  inservice

rserver host Ser2

  ip address x.x.x.x2

  probe HTTP_PROBE

  inservice

serverfarm host HTTP

  rserver Ser1 80

    inservice

  rserver Ser2 80

    inservice

ssl-proxy service SSL_PSERVICE_SERVER

  key MYKEY.PEM

  cert MYCERT.PEM

  ssl advanced-options PARAMMAP_SSL_TERMINATION

sticky ip-netmask 255.255.255.255 address source STICKY

  replicate sticky

  serverfarm HTTP

class-map match-all L4_SSL-TERM_CLASS

  2 match virtual-address z.z.z.z tcp any

policy-map type loadbalance http first-match PM

  class class-default

    sticky-serverfarm STICKY

policy-map multi-match PM-MULTI-MATCH

  class L4_SSL-TERM_CLASS

    loadbalance vip inservice

    loadbalance policy PM

    loadbalance vip icmp-reply

Service-Policy Is already applied, please let me know if you have any idea for this case?

1 Reply 1

praprama
Cisco Employee
Cisco Employee

Hi Jignesh,

You might want to move this question to the application networking community as it is to do wit ACE:

https://supportforums.cisco.com/community/netpro/data-center/application-network

Thanks and Regards,

Prapanch

Review Cisco Networking products for a $25 gift card