ACE Redirection to HTTPS by URL

[jason.williams]

Is it possible to configure the ACE to redirect a URL to HTTPS?  I don't want to redirect the entire site, only certain pages.

Thanks.

Jason

[chrhiggi]

Not many people do.  Give it a shot with your config, to me, it sounds very likely to be contributing to your issue, if not the entire problem.

[jason.williams]

Chris,

I need to confirm that I have the parameter-map in the right place.

Here's what I have:

parameter-map type http HTTP_PARAM_MAP

  header modify per-request

  persistence-rebalance

policy-map multi-match CLIENTSIDE_VIPS

  class VIP_WEBFARM_STAGING_WWW

    loadbalance vip inservice

    loadbalance policy PM_WEBFARM_STAGING_URL_REDIRECT

    loadbalance vip icmp-reply active

  class VIP_WEBFARM_STAGING_HTTPS

    loadbalance vip inservice

    loadbalance policy PM_WEBFARM_STAGING

    loadbalance vip icmp-reply active

    appl-parameter http advanced-options HTTP_PARAM_MAP

    ssl-proxy server STAGING_SSL_PROXY

[chrhiggi]

Jason,

Looks good assuming the class configs are the same as you previously pasted in.

Regards,

Chris

[Jorge Bejarano]

Hello, Jason

Sorry for the delay.

I thought you had an appliance.

Here you have a link where you can download the software for the module:

http://www.cisco.com/cisco/software/release.html?mdfid=280557289&softwareid=280836738&release=A2%282.4%29&rellifecycle=&relind=AVAILABLE&reltype=latest

Before doing any upgrade, I highly recommend you to follow the recommendations from Chris and we can go from there

Thanks,

[chrhiggi]

Jason-

There must be something else going on. Get a TAC case open for this and put in the notes to contact Chris Higgins about the SR.  When we resolve this, I will cross post the results back into the case.

What we are going to need to do:

Start a Wireshark trace on your client, get the full config for the IP's your hitting, analyse the trace against the config.  There can still be something very simple going on here (ACE is case sensitive, but you can toggle that behavrior as an example.)  We will just need to look at a trace to check into it, and it should only take a 30 or so minutes to figure this out for you.

Regards,

Chris