Using port 443 in L4 policy with ACE

[lukaszkhalil]

Hello

I am trying to create on my ACE a VIP on a port 443 that will work in a layer 4. The real http traffic will be decrypted on the rservers.

As long as I do not use the port 443 as a VIP port everything is OK, but if I changed it to 443 I loose the communication.

Does anybody know if there is any restriction in the ACE that does not allow using the 443 TCP port for L4 traffic?

Thank you in advance

Regards

Lucas

[Surya ARBY]

No restriction. It should work. here is one of my template for that :

access-list PERMIT-ALL line 8 extended permit ip any any

serverfarm host XXX

failaction purge

predictor leastconns

probe generic-tcp

rserver SYMI-NH01 443

  inservice

rserver SYMI-NH02 443

  inservice

sticky ip-netmask 255.255.255.0 address source XXX

timeout 3600

replicate sticky

serverfarm XXX

class-map match-any XXX

2 match virtual-address A.B.C.D 255.255.255.255 tcp eq https

policy-map type loadbalance first-match XXX

class class-default

sticky-serverfarm XXX

[lukaszkhalil]

OK, thanks.

I forgot to mention that my rservers are listening on different port then 443.

[Surya ARBY]

Just change the port in the serverfarm