14-45
User
Guide

for

the

Cisco

Application

Networking

Manager

5.2
OL-26572-01
Chapter
14






Configuring

Traffic

Policies
Configuring
Rules

and

Actions

for

Policy

Maps
SSL-Proxy
SSL
proxy

server

ser

vice

that

defines

t

he

SSL

pa

rameters

that

the

ACE

is

to

use

during

the
handshake
and

subsequent

SSL

session.
Do
the

following:
a.
In
the

SSL

Proxy

field,

choose

the

SSL

proxy

server

service

to

use

in

the

handshake

and
subsequent
SSL

session

when

the

ACE

engages

with

an

SSL

client.
b.
In
the
SSL

Proxy

Type
field,

confirm

that

Server

is

selected

to

indicate

that
the
ACE

is

to

be
configured
so

that

it

is

recognized

as

an

SSL

server.
UDP-Fast-Age
Option
that

appears

for

ACE

modules

only.

The

ACE

is

to

close

the

connection

immediately

after
sending
a

response

to

the

client,

thereby

enabling

per-packet

load

balancing

for

UDP

traffic.
VIP-Advertise
Option
that

appears

for

ACE

modules

release

only.

The

ACE

is

to

advertise

the

IP

address

of

a
virtual
server

as

the

host

route.
Do
the

following:
a.
In
the
Active

field,
check
the
checkbox

if

you

want

the
ACE

to

advertises

the

IP

address

of
the
virtual

server

as

the

host

route

only

if

there

is

at

least

one

active

real

server

in

the

server
farm.
Note
Uncheck
the

Active

field

check

box

if

you

want

the

ACE

to

always

advertises

the

IP
address
of

the

virtual

server

whether

there

is

any

active

real

server

associated

with

the
VIP.
b.
If
you
check

the

Active

field

check

box,

in

the

Metric

Distance

field,
enter

the

administrative
distance
to

include

in

the

routing

table.

Valid

entries

are

from

1

to

254.
VIP-ICMP-Reply
VIP
is

to

send

an

ICMP

ECHO-REPLY

response

to

ICMP

requests.
Do
the

following:
a.
In
the

Active

field,

check

the

checkbox

to

instruct

the

ACE

to

reply

to

an
ICMP

request

only
if
the

configured

VIP

is

active.

If

the

VIP

is

not

active

and

the

active

option

is

specified,

the
ACE
discards

the

ICMP

request

and

the

request

times

out.
b.
In
the

Primary

Inservice

field,

check

the

checkbox
to
instruct

the

ACE

to

reply

to

an
ICMP
ping
only

if

the

primary

server

farm

state

is

UP,

regardless

of

the

state

of

the

backup

server
farm.
If

this

option

is

enabled

and

the

primary

server

farm

state

is

DOWN,

the

ACE

discards
the
ICMP

request

and

the

request

times

out.
VIP-In-Service
VIP
is

to

be

enabled

for

server

load-balancing

operations.
Table
14-18
Layer
3/Layer

4

Network

Traffic

Policy

Map

Actions

(continued)
Action
Description/Steps