ACE ssl redirect

[dbelno]

Hi,

i am trying to solve this requirements.

redirect from https://my-url.at to https://myurl.at

or from https://my-url.com to https://myurl.at

I have certificiates installed on ACE with alternates domains such as my-url.com,.... The main domain is myurl.at

Is it possible to redirect or rewrite from https to https ? I have not found any configuration examples.

BR

Norbert

[Kanwaljeet Singh]

Hi Norbert,

I tested this long time back and configuration would be similar i.e create a redirect server, serverfarm etc but you need to configure ACE for SSL termination. 

You can try this and if it doesn't work, let me know. I will try to create a sample configuration for you.

Regards,

Kanwal

Note: Please mark answers if they are helpful.

[dbelno]

Hi Kanwal,

ACE does SSL termination in my configuration.

I did many http to https redirects in other configurations also with action-lists, but never done with https to https.

So when the client hits the VIP with 443, i can configure a policy-map with a redirect serverfarm

and rserver redirect "webhost-redirect https://x.y 302" ?

What is with the "right" url a client enters ?

Currently i have an http to https redirect "webhost-redirection https://%h 302".

Can you send me a sample configuration please.

Thanks a lot

Norbert

[Kanwaljeet Singh · Accepted solution]

Hi Norbet,

Something like this:

rserver redirect R1
webhost-redirection  https://test.com 302
inservice

serverfarm redirect Redirect
rserver R1
inservice

ssl-proxy service SSL-REDIRECT
key cisco-sample-key----->The key and cert used here are just for example.
cert cisco-sample-cert---->Proper cert should be used.

class-map match-all Redirect
2 match virtual-address 10.86.212.36 tcp eq https

policy-map type loadbalance first-match Policy-Redirect
class class-default
serverfarm Redirect

policy-map multi-match Policy-Test
class Redirect
loadbalance vip inservice
loadbalance policy Policy-Redirect
loadbalance vip icmp-reply
nat dynamic 1 vlan 5
ssl-proxy server SSL-REDIRECT

Let me know if it works fine.

Regards,

Kanwal

Note: Please mark answers if they are helpful.

[dbelno]

Hi Kawal

thanks for you input.

One question i have: When i configured it in this way all requests are redirected but i think i will run into a loop when a client enters the correct url like https://mysite.com.

What i want is, that only https://my-site.com or https://www.my-site.com and other combinations are redirected to https://mysite.com.

When a client enters https://mysite.com it should be redirected.

Can i do this with only one VIP ?  

Thanks,

Norbert

[dbelno]

Hi Kanwal,

Everything is working fine.

Thanks for your support !

BR

Norbert