cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2698
Views
0
Helpful
6
Replies

https to https redirection on Cisco ACE

nlkarthik
Level 1
Level 1

Hello All,

I need your help on the below reqeust

------------------------------------------------------------

Whenever a client types in the ip address of the website:  https://a.b.c.d,

they want it to redirect to their URL https://abc.com, How do we achieve this on Cisco ACE ?

I had checked this forum : https://supportforums.cisco.com/message/462397 and tried configuring a similar setup, but it didnt work.

Whenever we hit the vip on https, it shud get redirected to  a https url... Please advice if this is possible?

Thanks and regards,

Karthik

6 Replies 6

ohynderi
Level 1
Level 1

Hello Karthik,

Can you show me what you have configured so far?

Thanks,

Olivier

Hello Olivier,

Many thanks for your response.

Here is the configuration which i had updated.

----------------------------------------------------------------------

action-list type modify http HTTP_MODIFY_ACTLIST

  header rewrite request Host header-value http://1.1.1.1/ replace http://abc.com

policy-map type loadbalance first-match abc_1.1.1.1:80

  class class-default

    serverfarm abc_1.1.1.1:80 backup abc_1.1.1.1:80_backup

    action HTTP_MODIFY_ACTLIST

I have just mentioned the VIP as 1.1.1.1 here and the url as abc.com as an example .

Thanks and regards,

Karthik

Forget your rewrite rules and try this :

rserver redirect HTTPS-REDIRECT

  webhost-redirection https://www.abc.com 301

  inservice

exit

serverfarm redirect HTTPS-REDIRECT-SF

  rserver HTTPS-REDIRECT

  inservice

exit

class-map type http loadbalance match-any HOST-CM

  match http header Host header-value "www[.]abc[.]com"

exit

policy-map type loadbalance first-match HTTPS

  class HOST-CM

    serverfarm XXXX

  class class-default

    serverfarm HTTPS-REDIRECT-SF

exit

exit

Anyway SSL Offload is mandatory and your certificate's FQDN should be www.abc.com, if a user uses the IP address instead, the web browser will raise a warning popup. If using only HTTP, there is no problem.

Hello Surya,

Thanks for your email.

Yes this is right ... But it will work only for domain names like www.abc.com ... But on this request, domain names were not mentioned. The exact request is to redirect all https VIP's (eg : https://1.1.1.1) to be redirected to http url's(eg: https://abc.com ).

Thanks and regards,

Karthik

How many VIPs there are ? You will have to bind a redirection rule to each virtual server, associating each VIP to a specific name, it won't work if virtual hosts are in use.

Hi Surya,

There are four VIP's that would need this action to be performed.Can you assist on how to bind the redirection rule to each server.. They are physical servers and not vm hosts.

Thanks and regards,

Karthik

Review Cisco Networking for a $25 gift card