ACE - redirect url from http to https

[khaderbasha]

We need to implement ACE configuration to re-direct any web traffic from one website to secure site.

Ex:http://www.test.com to be redirected to https://www.test.com.

Appreciate if you can point me in right direction.

[ciscocsoc · Accepted solution]

Hi,

You need to create a class-map to match HTTP and then a redirect serverfarm to send a redirect request to the browser. The following is extracted from one of my contexts:

rserver redirect RED1

webhost-redirection https://%h 302

inservice

serverfarm redirect FARM-RED1

rserver RED1

inservice

class-map match-any REDIRECT-HTTP

2 match virtual-address 192.168.12.34 tcp eq www

policy-map type loadbalance first-match LB-POLICY-REDIRECT

class class-default

serverfarm FARM-RED1

policy-map multi-match L4POLICY

class REDIRECT-HTTP

loadbalance vip inservice

loadbalance policy LB-POLICY-REDIRECT

loadbalance vip icmp-reply active

loadbalance vip advertise

HTH

Cathy

[khaderbasha]

Hi Cathy, appreciate your very quick response, would you mind pointing me to the correct documentation and any other tool where I can test this config, some form of plug-in for packet tracer or ACE virtual simulator etc...

Thanks.

Khader

[ciscocsoc]

Hi Khader,

The Server Load Balancing Configuration Guide contains the redirection information in the section "Configuring a Real Server Relocation String".

The only way to test this is to configure it into a context on a real ACE. Wireshark will enable you to see the 302 redirection.

Cathy