14-45

User

Guide

for

the

Cisco

Application

Networking

Manager

5.2

OL-26572-01

Chapter

14

Configuring

Traffic

Policies

Configuring

Rules

and

Actions

for

Policy

Maps

SSL-Proxy

SSL

proxy

server

ser

vice

that

defines

t

he

SSL

pa

rameters

that

the

ACE

is

to

use

during

the

handshake

and

subsequent

SSL

session.

Do

the

following:

a.

In

the

SSL

Proxy

field,

choose

the

SSL

proxy

server

service

to

use

in

the

handshake

and

subsequent

SSL

session

when

the

ACE

engages

with

an

SSL

client.

b.

In

the

SSL

Proxy

Type

field,

confirm

that

Server

is

selected

to

indicate

that

the

ACE

is

to

be

configured

so

that

it

is

recognized

as

an

SSL

server.

UDP-Fast-Age

Option

that

appears

for

ACE

modules

only.

The

ACE

is

to

close

the

connection

immediately

after

sending

a

response

to

the

client,

thereby

enabling

per-packet

load

balancing

for

UDP

traffic.

VIP-Advertise

Option

that

appears

for

ACE

modules

release

only.

The

ACE

is

to

advertise

the

IP

address

of

a

virtual

server

as

the

host

route.

Do

the

following:

a.

In

the

Active

field,

check

the

checkbox

if

you

want

the

ACE

to

advertises

the

IP

address

of

the

virtual

server

as

the

host

route

only

if

there

is

at

least

one

active

real

server

in

the

server

farm.

Note

Uncheck

the

Active

field

check

box

if

you

want

the

ACE

to

always

advertises

the

IP

address

of

the

virtual

server

whether

there

is

any

active

real

server

associated

with

the

VIP.

b.

If

you

check

the

Active

field

check

box,

in

the

Metric

Distance

field,

enter

the

administrative

distance

to

include

in

the

routing

table.

Valid

entries

are

from

1

to

254.

VIP-ICMP-Reply

VIP

is

to

send

an

ICMP

ECHO-REPLY

response

to

ICMP

requests.

Do

the

following:

a.

In

the

Active

field,

check

the

checkbox

to

instruct

the

ACE

to

reply

to

an

ICMP

request

only

if

the

configured

VIP

is

active.

If

the

VIP

is

not

active

and

the

active

option

is

specified,

the

ACE

discards

the

ICMP

request

and

the

request

times

out.

b.

In

the

Primary

Inservice

field,

check

the

checkbox

to

instruct

the

ACE

to

reply

to

an

ICMP

ping

only

if

the

primary

server

farm

state

is

UP,

regardless

of

the

state

of

the

backup

server

farm.

If

this

option

is

enabled

and

the

primary

server

farm

state

is

DOWN,

the

ACE

discards

the

ICMP

request

and

the

request

times

out.

VIP-In-Service

VIP

is

to

be

enabled

for

server

load-balancing

operations.

Table

14-18

Layer

3/Layer

4

Network

Traffic

Policy

Map

Actions

(continued)

Action

Description/Steps