Hi, Please refer the following link : https://supportforums.cisco.com/thread/132052 You just need server nat and that will help you to fix the issue. regards, Ajay Kumar ... View more

Hi, Ideally you should allow the traffic from inside to outside. Also try to use server NAT as used in below thread. https://supportforums.cisco.com/thread/132052 In case if you dont want to use ACE as default gateway then you can also use source NAT. That will help you to pass the traffic without issue. Hope that helps. regards, Ajay Kumar ... View more

Hi Rodrigo, It is possible that the key is encrypted with a password. Please follow the steps as described in the link below in order to decrypt the key. http://support.citrix.com/article/CTX122930 Many times just a extra line or space can corrupt the certificate. Let me know if that helps. regards, Ajay Kumar ... View more

Hi Ajay, Please refer the following link : http://www.cisco.com/en/US/prod/collateral/contnetw/ps5719/ps7027/ps8361/white_paper_c11-688039.html#wp9000476 read section : Cisco ACE IPv6 SLB-Gateway (Translation) Mode regards, Ajay Kumar ... View more

Hi Shobith, "persistence-rebalance strict" is the one which will help fix the issue. Configuring Persistence with Load Balancing on Each HTTP Request When the persistence-rebalance feature is enabled on the ACE, it does  not load balance successive GET requests on the same TCP connection  unless it matches a load-balancing class map that is different from the  load-balancing class map matched by the previous request (see the "Configuring HTTP Persistence Rebalance" section). To configure the ACE to load balance each subsequent GET request on the same TCP connection independently, use the persistence-rebalance strict command in parameter map HTTP configuration mode. The syntax of this command is as follows: persistence-rebalance strict This command allows the ACE to load balance each HTTP request to a potentially different Layer 7 class or real server. For example, to enable the strict persistence rebalance feature, enter: host1/Admin(config)# parameter-map type http http_parameter_map host1/Admin(config-parammap-http)# persistence-rebalance strict To reset persistence to the default setting of disabled, enter: host1/Admin(config-parammap-http)# no persistence-rebalance To change to persistence rebalance behavior that does not load balance successive requests to the same connection, use the persistence-rebalance command. hope that helps. regards, Ajay Kumar ... View more

Hi, I see you are willing to capture ipv6. You can create ACL using ipv6 : ace-4710-1/Admin(config)# access-list test extended permit ip        Specify source IP address     Specify source IPv6 address   any           Any source address and mask (Equiv of 0.0.0.0 0.0.0.0)   anyv6         Any source address and mask (Equiv of 0::0/0)   host          Configure source host   object-group  Network object-group for source address see if that helps. Or else Span is a good option as suggested by Jorge. regards, Ajay Kumar ... View more

Hi, if you just want to verify whether the traffic is hitting ACE or not you can try the following : create a access list with source as client IP address. ( here source is 10.10.10.10 in my example ) ace-4710-1/Admin(config)# access-list captureacl extended permit tcp 10.10.10.10 255.255.255.0 any eq 443 ace-4710-1/Admin# capture capturetest all access-list captureacl ace-4710-1/Admin# capture capturetest start Once it is done you can stop it by using ace-4710-2/Admin# capture capturetest stop Save the file to disk : ace-4710-2/Admin# copy capture capturetest disk0: test.pcap hope that helps. regards, Ajay Kumar ... View more