cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
878
Views
0
Helpful
2
Replies

ACE Module & FWSM

pemalcoun
Level 1
Level 1

Dear Gents,

Attached is the current setup & configuration for both ACE & FWSM.

we can ping the VIP from the user side, but we are not able to open the web application using the VIP.

Appreciate your kind support to solve the issue when trying to open the application using the VIP.

Best Regards,

2 Replies 2

pemalcoun
Level 1
Level 1

Dear All,

I changed the setup to one armed mode and modifed the configuration and it is working fine.

BR

Pierre this is babu.

     Can you please forward ACE ONE ARM MODE current configuration which is working fine. Check my configuration and please replay if any modification require.

boot system image:c4710ace-mz.A4_2_0.bin

interface gigabitEthernet 1/1

switchport access vlan 255

no shutdown

interface gigabitEthernet 1/2

switchport access vlan 110

no shutdown

interface gigabitEthernet 1/3

shutdown

interface gigabitEthernet 1/4

shutdown

access-list ALL line 8 extended permit ip any any

access-list ALL line 16 extended permit icmp any any

probe http HTTP

port 80

interval 20

passdetect interval 40

receive 3

expect status 0 499

connection term forced

open 1

probe icmp PING

description Probe PING

interval 2

faildetect 2

passdetect interval 2

passdetect count 2

receive 1

probe snmp SNMP-PROBE

description SNMP-PROBE

interval 15

passdetect interval 10

version 2c

community MODA-MSD-RW

oid .1.3.6.1.2.1.4.3.0

   type absolute max 1000000000

weight 6000

rserver host SERVER1

description msd-hq-sp01

ip address 10.0.160.14

conn-limit max 2000000 min 1500000

rate-limit connection 100000

rate-limit bandwidth 10000000

inservice

rserver host SERVER2

description msd-hq-sp02

ip address 10.0.160.15

conn-limit max 2000000 min 1500000

fail-on-all

weight 20

inservice

rserver host SERVER3

conn-limit max 2000000 min 1500000

fail-on-all

weight 30

inservice

rserver host SERVER4

conn-limit max 2000000 min 1500000

fail-on-all

weight 40

inservice

serverfarm host MoDA-MSD-SFARM

description MoDA-MSD-SERVERS

probe PING

rserver SERVER1 80

   conn-limit max 2000000 min 1500000

   rate-limit connection 100000

   rate-limit bandwidth 5000000

   inservice

rserver SERVER2 80

   conn-limit max 2000000 min 1500000

   rate-limit connection 100000

   rate-limit bandwidth 5000000

   inservice

sticky ip-netmask 255.255.255.255 address source STKY_WEB1

timeout 60

replicate sticky

serverfarm MoDA-MSD-SFARM

class-map match-all frontend

2 match virtual-address 10.0.160.17 tcp eq www

class-map type management match-any remote_access

2 match protocol xml-https any

3 match protocol icmp any

4 match protocol telnet any

5 match protocol ssh any

6 match protocol http any

7 match protocol https any

8 match protocol snmp any

policy-map type management first-match remote_mgmt_allow_policy

class remote_access

   permit

policy-map type loadbalance first-match frontend

class class-default

   serverfarm MoDA-MSD-SFARM

policy-map multi-match CLIENT-VIPS

class frontend

   loadbalance vip inservice

   loadbalance policy frontend

   loadbalance vip icmp-reply

   nat dynamic 1 vlan 110

class class-default

interface vlan 110

ip address 10.110.10.101 255.255.255.0

access-group input ALL

nat-pool 1 10.110.10.200 10.110.10.200 netmask 255.255.255.0 pat

service-policy input CLIENT-VIPS

service-policy input remote_mgmt_allow_policy

no shutdown

interface vlan 255

ip address 10.0.255.245 255.255.255.0

no shutdown

ft interface vlan 115

ip address 10.1.1.1 255.255.255.0

peer ip address 10.1.1.2 255.255.255.0

no shutdown

ft peer 1

heartbeat interval 300

heartbeat count 20

ft-interface vlan 115

query-interface vlan 110

ft group 1

peer 1

priority 120

associate-context Admin

inservice

ip route 0.0.0.0 0.0.0.0 10.110.10.254

snmp-server community MODA-MSD-RO group Network-Monitor

snmp-server host 10.0.160.144 traps version 2c MODA-MSD-RW

snmp-server enable traps snmp coldstart

snmp-server enable traps virtual-context

snmp-server enable traps license

snmp-server enable traps slb vserver

snmp-server enable traps slb real

snmp-server enable traps syslog

snmp-server enable traps snmp authentication

snmp-server enable traps snmp linkup

snmp-server enable traps snmp linkdown

username admin password 5 $1$D1e1pS1d$KBuTV0Oe195u3b3dW9RQF/ role Admin domain

default-domain

username www password 5 $1$JfHnQdU/$0FLEMgeJIuAzIKGc3Xv.p1 role Admin domain de

fault-domain

ssh key rsa 1024 force

Thank you,

Babu.S

Review Cisco Networking for a $25 gift card