ACE SNAT Rule for TOMCAT Application

[somnathroy1979]

                   The SNAT rule is configured in ACE 4710 which is currently working fine but the application end user is complaining that they are able to see the ip address of the real server.

Vip address - 10.80.74.24

Tomcat 1 - 10.80.133.19

Tomcat 2 - 10.80.133.18.

The problem is when the team is hitting the web browser with this URL https://10.80.73.24/ccs-sales-web

the address on the bar changes to https://10.80.133.18/ccs-sales-web. what is the actual problem and how I can rectify this issue.

These are all TOMCAT application server accessed via port 443.

[Jorge Bejarano]

Hey,

Can you paste the configuration related?

Has this ever worked before?

What version do you run?

Jorge

[somnathroy1979]

Please find the config:

probe icmp ICMP

rserver host gbnvrlapp27

ip address 10.80.133.18

probe ICMP

inservice

rserver host gbnvrlapp28

ip address 10.80.133.19

probe ICMP

inservice

serverfarm host QA-CWIAB-f

predictor leastconns

rserver gbnvrlapp27

   inservice

rserver gbnvrlapp28

   inservice

sticky ip-netmask 255.255.255.255 address source STICKY-QA-CWIAB-f

replicate sticky

serverfarm QA-CWIAB-f

policy-map type loadbalance first-match QA-CWIAB-pm

class class-default

   sticky-serverfarm STICKY-QA-CWIAB-f

class-map match-all QA-CWIAB-vip

2 match virtual-address 10.80.73.24 any

policy-map multi-match VLAN405

class QA-CWIAB-vip

   loadbalance vip inservice

   loadbalance policy QA-CWIAB-pm

   loadbalance vip icmp-reply active

   nat dynamic 1 vlan 405

interface vlan 405

ip address 10.80.73.248 255.255.255.0

peer ip address 10.80.73.247 255.255.255.0

access-group input ALL

nat-pool 1 10.80.73.249 10.80.73.249 netmask 255.255.255.0 pat

service-policy input VLAN405

no shutdown

[somnathroy1979]

hi,

Please see the version details.

ystem:    Version A5(1.2) [build 3.0(0)A5(1.2) adbuild_19:38:58-2012/01/17_/auto/adbure_nightly4/renum
ber/rel_a5_1_2_throttle/REL_3_0_0_A5_1_2]
  system image file: (hd0,1)/c4710ace-t1k9-mz.A5_1_2.bin
  Device Manager version 5.1 (0) 20111215:1009

  installed license: no feature license is installed

[Cesar Roque]

Hi,

It sounds that the server is doing a redirect, check if this is correct and test without the redirect.  

---------------------
Cesar R
ANS Team