topic Use cookie sticky for http/s and source for all other ports in Application Networking

Use cookie sticky for http/s and source for all other ports

jason.williams — Wed, 25 Jul 2012 02:54:41 GMT

I'm trying to configure OWA and Exchnage behind the ACE. Both are on the same servers/serverfarm.

I want to configure stickyness to use cookies when connecting to OWA (http and https), but use souce IP for all other ports.

I could probably use 2 different VIPs, one for OWA and one for Exchange, but I was trying to avoid that.

I know I can set up a VIP class map to match to ports 80 and 443, but how do I create one for "everything else"?

Thanks.

Jason

Use cookie sticky for http/s and source for all other ports

Kanwaljeet Singh — Wed, 25 Jul 2012 03:14:41 GMT

Hi Jason,

You can create a third class map for all other ports.

(config-cmap)# 2 match virtual-address 1.1.1.1 tcp any

You can use this class in policy map multi match at the end.

Let me know if you have any questions.

Regards,

Kanwal

Use cookie sticky for http/s and source for all other ports

jason.williams — Wed, 25 Jul 2012 14:55:18 GMT

So I'm clear, my multi-match policy takes the first match, correct?

Here is what I have:

sticky ip-netmask 255.255.255.255 address source EXCHANGE2010

timeout 60

replicate sticky

serverfarm EXCHANGE2010_FARM_LB

sticky http-cookie MS-OWA2010 OWA2010_COOKIE_STICKY

cookie insert

timeout 60

replicate sticky

serverfarm EXCHANGE2010_FARM_LB

class-map match-all VIP_OWA2010

3 match virtual-address 1.1.1.1 eq www

4 match virtual-address 1.1.1.1 eq https

class-map match-all VIP_EXCHANGE2010

3 match virtual-address 1.1.1.1 any

policy-map type loadbalance first-match PM_OWA2010

class class-default

sticky-serverfarm OWA2010_COOKIE_STICKY

policy-map type loadbalance first-match PM_EXCHANGE2010

class class-default

sticky-serverfarm EXCHANGE2010

policy-map multi-match CLIENTSIDE_VIPS

class VIP_OWA2010

loadbalance vip inservice

loadbalance policy PM_OWA2010

loadbalance vip icmp-reply active

class VIP_EXCHANGE2010

loadbalance vip inservice

loadbalance policy PM_EXCHANGE2010

loadbalance vip icmp-reply active

Use cookie sticky for http/s and source for all other ports

Kanwaljeet Singh — Wed, 25 Jul 2012 15:33:20 GMT

Hi Jason,

Yes it looks alright!

Regards,

Kanwal