Feedback
Table Of Contents
Symbols - A - B - C - D - E - F - G - H - I - K - L - M - N - O - P - Q - R - S - T - U - V - W -
Index
Symbols
"xST" metacharacter for Layer 4 generic data parsing 3-22
A
action list
associating with a Layer 7 policy map 3-57
configuring 3-11
alias IP address 7-2, 7-5, 7-18
application response, load-balancing method 1-2, 2-58
asymmetric routing 1-8
asymmetric server normalization 2-77
B
backup
server, configuring 2-67
server farm, behavior with stickiness 5-8
server farm, configuring 2-63, 2-76
server farms 3-64
bandwidth rate limiting 2-10, 2-72
booster, UDP 3-105
bursting threshold, VM probe 6-12
C
case-sensitivity matching 3-73, 3-86
cipher-based load balancing 3-38
cipher suites
HTTPS probes, configuring for 4-30
Cisco Overlay Transport Virtualization. See OTV
class map
configuration example 3-133
description, entering 3-18, 3-70, 3-72, 3-85, 3-88
Layer 7 3-26
overview 3-2
use with real servers 2-2
compression
content types supported 3-59
HTTP parameter map 3-74
Layer 7 SLB policy action 3-58, 3-73
Layer 7 SLB policy action, excluding specific files/MIME types for HTTP compression 3-40
configurational examples
HTTP cookie stickiness 5-51
HTTP header stickiness 5-63
IP address stickiness 5-18
probe 4-58
RADIUS load-balancing 3-117, 3-118
real server 2-16
server farms 2-82
SIP load-balancing 3-131, 3-132
SLB traffic policy 3-133
stickiness 5-115
connection keepalive. See HTTP persistence rebalance
connections
clearing for real servers 2-90
connection failure, specifying server farm action 2-23
connection termination, TCP 4-18
displaying for real servers 2-88
displaying for server farms 2-97
content
length 2-44
matching HTTP 3-29
offset 5-35
cookie
client 5-5
configuring stickiness 5-40
match criteria 3-30
maximum bytes to parse 3-71, 3-78, 3-86
offset 5-47
sticky client identification 5-5
string 2-70
credentials (mailbox), configuring for IMAP probes 4-39
D
database entries
sticky, clearing 5-115
sticky, displaying 5-109
Data Center Interconnect. See DCI
destination IP address 2-43, 2-89, 2-98, 3-2, 3-13, 3-62, 5-3, 5-10, 5-13, 5-16, 7-3
destination server status code, configuring for SMTP probes 4-37
differentiated services code point. See DSCP
displaying
probe configuration information 4-72
real server configuration information 2-84
server farm configuration information 2-91
sticky configuration information 5-108
DNS
load balancing 3-105
probes, configuring 4-34
domain
name, configuring for DNS probes 4-35
DSCP 3-67
DWS
configuration guidelines 6-5
configuring 6-3
displaying statistics 6-15
enabling a server farm 6-14
overview 6-1
prerequisites 6-4
real server locality, displaying 6-20
real server locality in server farm, displaying 6-19
server farm attributes 6-13
server farm state, displaying 6-19
VIP state, displaying 6-18
dynamic workload scaling. See DWS
E
Echo probes, configuring 4-21
e-commerce
applications, sticky requirements 5-3
using stickiness 5-2
expressions, regular 3-14, 3-16, 3-19, 3-21, 3-30, 3-31, 3-32, 3-36
F
failover
server farm 2-63
Finger probes, configuring 4-22
firewall
alias IP address 7-2, 7-5, 7-18
configuration examples 7-32
configurations, displaying 7-31
configurations, supported 7-3
disabling NAT 2-76
load balancing 7-1, 7-3, 7-6, 7-17
overview 7-1
standard configurational diagram 7-4
stealth configurational diagram 7-5
traffic distribution 7-2
FTP probes, configuring 4-32
G
generic protocol
data parsing 3-18
load balancing 3-52
graceful server shutdown 2-14, 2-16, 2-75, 4-18
H
hash load-balancing methods
secondary cookie 2-46
header
deletion 3-17
health monitoring
configuring 4-1
inband 2-35
real servers 2-6
HTTP
content match criteria 3-29
load balancing 3-52
persistence rebalance 3-81, 3-83
persistence strict 3-82
probes, configuring 4-23, 4-25, 4-47
request method, configuring for probes 4-26
return error code checking 2-61
statistics, displaying 3-143, 3-154
URL hit count statistics, displaying 3-152
URL match criteria, excluding for HTTP compression 3-40
HTTP content
HTTP cookie
match criteria 3-30
stickiness 5-40
HTTP header
deletion 3-17
length 3-79
maximum bytes to parse 3-71, 3-78, 3-86
sticky client identification 5-6
HTTP parameter map
case-sensitivity matching 3-73, 3-86
compression 3-74
maximum bytes to parse 3-71, 3-78, 3-86
maximum parse length exceeded 3-79
persistence rebalance 3-81, 3-83
persistence rebalance strict 3-82
statistics, displaying 3-143
TCP server reuse 3-83
HTTP return codes
server farms, displaying 2-96
HTTPS
cipher suite for probes 4-30
probes, configuring 4-29
I
ICMP
probes, configuring 4-17
IMAP probes, configuring 4-38
inband health monitoring 2-35
interface
applying Layer 3 and Layer 4 policy to 3-102
interval, configuring for probes 4-12
IP address
configuring a probe under a redirect server 2-8
configuring destination for probes 4-7
configuring stickiness 5-10
destination 2-43, 2-89, 2-98, 3-2, 3-13, 3-62, 5-3, 5-10, 5-13, 5-16, 7-3, 7-12, 7-26
entering for real servers 2-6
expected for DNS probes 4-35
source 2-43, 2-89, 2-98, 3-13, 3-24, 3-48, 3-61, 3-62, 5-3, 5-10, 5-13, 5-16, 5-110, 7-3, 7-8, 7-20
sticky client identification 5-4
sticky configuration requirements 5-9
virtual 2-76, 3-13, 3-61, 3-87, 3-88, 3-92, 3-98, 3-100, 5-107, 7-9, 7-15, 7-21, 7-22, 7-29
K
keepalive-appliance protocol (KAL-AP)
clearing statistics 4-71
displaying load information 4-69
displaying statistics 4-70
L
Layer 3 and 4 policy map
SLB, configuring 3-92
Layer 3 and Layer 4 class map
associating with policy map 3-94
configuring 3-87
overview 3-2
Layer 3 and Layer 4 SLB policy actions
configuration quick start 3-9
connection parameter map, associating with Layer 3 and Layer 4 policy map 3-97
enabling a VIP for load balancing 3-100
enabling UDP per packet load balancing 3-99
enabling VIP reply to ICMP request 3-98
HTTP parameter map, associating with Layer 3 and Layer 4 policy map 3-96
Layer 7 policy map, associating with Layer 3 and Layer 4 policy map 3-95
specifying 3-95
Layer 4 payload
"xST" metacharacter 3-22
length for sticky 5-26
match criteria for generic data parsing 3-20
offset for sticky 5-26
Layer 7 class map
associating with Layer 7 policy map 3-55
configuration quick start 3-4
configuring 3-26
HTTP cookie 3-30
HTTP URL, excluding specific files/MIME types for HTTP compression 3-40
nesting 3-50
overview 3-2
SSL cipher 3-38
Layer 7 policy map
configuration quick start 3-4
configuring 3-51
defining inline match statements 3-54
Layer 7 class map association 3-55
Layer 7 SLB policy actions
associating with Layer 3 and Layer 4 SLB policy 3-69
compress packets 3-60
discarding requests 3-61
forwarding requests 3-61
HTTP compression, excluding specific files/MIME types 3-40
HTTP header insertion 3-11, 3-13, 3-61
IP differentiated services code point 3-67
load balancing to server farm 3-64
SSL proxy service 3-68
sticky server farm 3-67
least bandwidth, load-balancing method 1-3, 2-51
leastconns, load-balancing method 1-3, 2-53
least loaded, load-balancing method 1-3, 2-55
load balancing
application response 1-2, 2-58
configurational diagram 3-3
configuring real servers and server farms 2-1
configuring traffic policies 3-1
definition 1-1
DNS 3-105
enabling a VIP 3-100
example 3-133
least loaded 1-3
least-loaded 2-55
operating ACE exclusively for 1-8
overview 1-1
predictor method 2-41
standard firewall 7-6
statistics, clearing 3-160
statistics, displaying 3-137
stealth firewall 7-17
load threshold, VM probe 6-12
M
mailbox, configuring for IMAP probes 4-39
match criteria
HTTP cookie 3-30
HTTP URL, excluding for HTTP compression 3-40
Layer 4 payload 3-20
nested HTTP class map 3-50
RADIUS calling station ID 3-42
RADIUS username 3-42
RTSP header 3-43
RTSP URL 3-45
single match statement 3-54
SIP header 3-46
SSL cipher 3-38
MD5 hash value, configuring for probes 4-28
method
IMAP probes 4-40
POP3 probes 4-42
Multipurpose 3-40
N
NAS address, configuring for RADIUS probes 4-50
NAT
disabling 2-76
Network Access Server, configuring for RADIUS probes 4-50
Nexus 7000 series switches 6-1, 6-4
Nexus device
configuring 6-5
credentials 6-7
IP address 6-6
statistics, displaying 6-15
non-RADIUS data forwarding 3-115
O
P
parameter map
case-sensitivity matching 3-73, 3-86
HTTP compression 3-74
HTTP statistics, displaying 3-143
maximum bytes to parse 3-71, 3-78, 3-86
maximum parse length exceeded 3-79
persistence rebalance 3-81, 3-83
persistence rebalance strict 3-82
RTSP 3-84
TCP server reuse 3-83
partial server farm failover 2-63
password credentials
IMAP probes 4-39
POP3 probes 4-41
RADIUS probes 4-50
payload length 5-26
persistence rebalance 3-81, 3-83
policy map
associated class map 3-94
configuration example 3-133
configuring 3-1
Layer 3 and Layer 4 3-92
Layer 7 3-51
POP3 probe, configuring 4-40
port
number, configuring for probes 4-8
probe port inheritance 4-9
predictor
application response 1-2, 2-58
hash cookie secondary 2-46
least loaded 1-3
least-loaded 2-55
probe
active, defining 4-3
active script file statistics, displaying A-28
associating with server farms 2-38, 2-69
clearing statistics 4-80
configuration example 4-58
configurations, displaying 4-72
configuring for real servers 2-6
configuring for scripts A-11
description, entering 4-6
DNS 4-34
DNS domain name 4-35
DNS expected IP address 4-35
Echo 4-21
Finger 4-22
FTP 4-32
FTP server status code 4-33
global scripted probe statistics, displaying A-27
HTTP 4-23
HTTP MD5 hash value 4-28
HTTP request method 4-26
HTTPS 4-29
HTTP server status code 4-27, 4-45, 4-48
ICMP 4-17
IMAP 4-38
IMAP credentials 4-39
IMAP mailbox 4-39
IMAP request method 4-40
IP destination address 4-7
POP3 4-40
POP3 credentials 4-41
POP3 request method 4-42
port inheritance 4-9
port number 4-8
RADIUS 4-49
RADIUS credentials 4-50
RADIUS NAS address 4-50
retry count 4-13
RTSP, configuring 4-45
scripted 4-56
scripted, debugging A-30
scripted probe information, displaying A-24, A-25
scripting quick start A-4
scripting using TCL A-2
script name 4-57
script-writing example A-23
SIP, configuring 4-42
SMTP 4-36
SMTP destination server status code 4-37
SNMP-based server load, configuring 4-51
SSL cipher suite 4-30
SSL version 4-31
statistics, clearing 4-80
statistics, displaying 4-71
status code 4-37
TCP connection termination 4-18
TCP type 4-17
Telnet 4-34
threshold 4-14
time interval 4-12
timeout for a response 4-16
TLS version 4-31
types 2-38
UDP 4-20
VM, configuring 6-10
wait period 4-14
writing scripts for A-12
protocol, generic data parsing 3-18
protocol, generic load balancing 3-52
Q
quick start
HTTP-content stickiness configuration 5-31
HTTP-cookie stickiness configuration 5-42
HTTP-header stickiness configuration 5-54
IP address stickiness configuration 5-11
Layer 3 and Layer 4 SLB traffic policy configuration 3-9
Layer 4 payload stickiness configuration 5-21
Layer 7 Traffic Policy Configuration 3-4
probe scripting A-4
RADIUS-attribute stickiness configuration 5-67
RTSP-Session stickiness configuration 5-73
SIP Call-ID stickiness configuration 5-81
Standard FWLB Configuration for ACE A 7-7
Standard FWLB Configuration for ACE B 7-11
Stealth FWLB Configuration for ACE A 7-19
Stealth FWLB Configuration for ACE B 7-24
R
RADIUS
calling station ID 3-42
load balancing 3-42, 3-52, 3-111
load-balancing configuration examples 3-117, 3-118
match criteria 3-42
probes, configuring 4-49
username 3-42
rate limiting
RDP load balancing 3-52, 3-107
real server
cookie string 2-70
real servers
associating with server farm 2-64
backup 2-67
behavior 2-14
checking health 2-6
clearing connections 2-90
clearing statistics 2-90
configuration examples 2-16
configuration quick start 2-3
configuring 2-1
configuring probes for 2-6
configuring weight (connection capacity) 2-13, 2-66
configuring weight for in server farm 2-66
creating 2-4
displaying configurations and statistics 2-83
displaying connections 2-88
entering description for 2-5, 2-66
entering IP address 2-6
graceful shutdown 2-14, 2-75, 4-18
managing 2-14
overview 2-2
redirecting client requests 2-12
setting connection limits 2-9, 2-72
shutting down, gracefully 2-14, 2-75, 4-18
Real Time Streaming Protocol. See RTSP
redirect server
configuring a probe 2-8
regular expressions 3-14, 3-16, 3-19, 3-21, 3-30, 3-31, 3-32, 3-36
Remote Authentication Dial In User Service. See RADIUS
Remote Desktop Protocol. See RDP
request methods
configuring for IMAP probes 4-40
configuring for POP3 probes 4-42
retry
count, configuring for probes 4-13
roundrobin, load-balancing predictor 1-3, 2-60
routing
asymmetric 1-8
RTSP
header 3-43
header match criteria 3-43
load balancing 3-43, 3-45, 3-52, 3-120
match criteria 3-45
maximum number of bytes to parse 3-86
parameter map, configuring 3-84
probe 4-45
URL 3-45
S
scripted probes
configuring 4-56
script name 4-57
scripts
active script file statistics, displaying A-28
configuring probes for A-11
copying A-7
copying and loading A-6
debugging A-30
displaying script file contents A-30
environment variables A-20
exit codes A-21
global scripted probe statistics, displaying A-27
information, displaying A-24, A-25
loading A-9
overview A-2
probe script example A-23
reloading modified A-10
removing from memory A-10
sample A-8
script probe array A-20
supported commands A-13
unzipping A-8
writing for health monitoring A-12
server
reuse 3-83
shutdown, graceful 2-16
server farms
assigning backup server 2-67
associating probes for 2-38, 2-69
associating real servers for use with 2-64
associating VMs as real servers 6-15
backup 3-64
backup, behavior with stickiness 5-8
backup, configuring 2-63, 2-76
clearing statistics 2-101
configuration examples 2-82
configuration quick start 2-19
configuring 2-1
creating 2-21
disabling NAT 2-76
displaying configurations 2-91
displaying connections 2-97
displaying HTTP return codes 2-96
displaying statistics 2-92
DWS attributes 6-13
enabling for DWS 6-14
enabling load balancing for 3-64
entering description for 2-22
failover, partial 2-63
HTTP return error code checking, configuring 2-61
placing real servers in service 2-74
predictor method 2-41
real server weight, configuring 2-66
setting real server connection limits 2-72
specifying failure action 2-23
sticky, configuring 3-67
server load balancing
configurational diagram 3-3
configuration example 3-133
configuring Layer 3 and Layer 4 policy map 3-92
configuring Layer 7 class map 3-26
configuring Layer 7 policy map 3-51
configuring traffic policies 3-1
definition 1-1
operating ACE exclusively for 1-8
overview 1-1
statistics, clearing 3-160
statistics, displaying 3-137
server normalization, asymmetric 2-77
server shutdown, graceful 2-75, 4-18
service policy
applying to an interface 3-102
statistics, clearing 3-161
statistics, displaying 3-147
Session Initiation Protocol. See SIP
shared secret credentials, configuring for RADIUS probes 4-50
shutdown, graceful server 2-16, 4-18
SIP
Call-ID 3-46
header match criteria 3-46
load balancing 3-46, 3-52, 3-126
load-balancing configuration examples 3-131, 3-132
probe 4-42
request method, configuring for probes 4-44, 4-46
SLB. See server load balancing
SMTP probes, configuring 4-36
SNMP
SNMP-based server load probe 4-51
sorry server. See backup server
source IP address 2-43, 2-89, 2-98, 3-13, 3-24, 3-48, 3-61, 3-62, 5-3, 5-10, 5-13, 5-16, 5-110, 7-3, 7-8, 7-20
SSL
cipher-based load balancing 3-38
cipher match criteria 3-38
proxy service, specifying 3-68
Session ID stickiness 5-6
SSL Session-ID stickiness 5-87
version, configuring for probes 4-31
standard firewall
diagram, configurational 7-4
example, configurational 7-32, 7-33
load balancing, configuring 7-6
statistics
active script files, displaying A-28
HTTP, displaying 3-154
HTTP parameter map, displaying 3-143
HTTP URL statement hit counts, displaying 3-152
load-balancing, clearing 3-160
load-balancing, displaying 3-137
probes, clearing 4-80
probes, displaying 4-71
real servers, clearing 2-90
real servers, displaying 2-84
scripted probes, displaying A-27
server farms, clearing 2-101
server farms, displaying 2-92
service-policy, clearing 3-161
service policy, displaying 3-147
sticky, clearing 5-114
sticky, displaying 5-108
sticky database, displaying 5-109
status code, configuring for SMTP probes 4-37
stealth firewall
diagram, configurational 7-5
example, configurational 7-35, 7-36
IP address, configuring 7-18
load balancing, configuring 7-17
stickiness
configurational example 5-115
database entries, clearing 5-115
displaying information 5-108
HTTP cookie 5-40
HTTP cookie configuration example 5-51
HTTP header configuration example 5-63
IP address configuration example 5-18
IP addresses, configuring 5-10
quick start, HTTP-content configuration 5-31
quick start, HTTP-cookie configuration 5-42
quick start, HTTP-header stickiness configuration 5-54
quick start, IP address sticky configuration 5-11
quick start, Layer 4 payload configuration 5-21
quick start, RADIUS stickiness configuration 5-67
quick start, RTSP-Session stickiness configuration 5-73
quick start, SIP Call-ID stickiness configuration 5-81
quick start, SSL Session ID 5-89
SLB traffic policy, configuring 5-106
statistics, clearing 5-114
statistics, displaying 5-109
stickiness (HTTP-content)
associating server farm with sticky group 5-39
content length, configuring 5-35
content offset, configuring 5-35
quick start 5-31
replicate HTTP-content sticky table entries, enabling 5-35
server farm entry, configuring 5-39
static content, configuring 5-38
sticky group, creating 5-33
timeout, configuring 5-34
timeout for active connections, configuring 5-34
stickiness (HTTP-cookie)
associating server farm with sticky group 5-50
configuration example 5-51
cookie insertion, enabling 5-47
cookie length, configuring 5-47
cookie offset, configuring 5-47
replicate HTTP-cookie sticky table entries, enabling 5-46
secondary cookie, configuring 5-48
server farm entry, configuring 5-50
static cookie, configuring 5-49
sticky group, creating 5-44
timeout, configuring 5-45
timeout for active connections, configuring 5-45
stickiness (HTTP-header)
associating server farm with sticky group 5-62
configuration example 5-63
cookie length, configuring 5-60
cookie offset, configuring 5-60
replicate HTTP-header sticky table entries, enabling 5-60
server farm sticky group, configuring 5-62
static HTTP-header, configuring 5-61
sticky group, creating 5-56
timeout, configuring 5-59
timeout for active connections, configuring 5-59
stickiness (IP address)
associating server farm with sticky group 5-17
configuration example 5-18
quick start 5-11
replicate IP-address sticky table entries, enabling 5-15
requirements 5-9
server farm sticky group, configuring 5-17
static IP-address table entries, configuring 5-16
sticky IP group, creating 5-13
timeout, configuring 5-14
timeout for active connections, configuring 5-14
stickiness (Layer 4 payload)
associating server farm with sticky group 5-29
overview 5-19
parameters, configuring 5-26
quick start 5-21
replicate Layer 4 payload sticky table entries, enabling 5-25
server farm entry, configuring 5-29
static entry, configuring 5-28
timeout, configuring 5-24
timeout for active connections, configuring 5-24
stickiness (RADIUS-attribute)
associating server farm with sticky group 5-71
quick start 5-67
replicate RADIUS-attribute sticky table entries, enabling 5-70
server farm sticky group, configuring 5-71
sticky group, creating 5-69
timeout, configuring 5-69
timeout for active connections, configuring 5-70
stickiness (RTSP-Session)
associating server farm with sticky group 5-79
cookie length, configuring 5-77
cookie offset, configuring 5-77
quick start 5-73
replicate RTSP-Session sticky table entries, enabling 5-76
server farm sticky group, configuring 5-79
static RTSP-Session, configuring 5-78
sticky group, creating 5-75
timeout, configuring 5-75
timeout for active connections, configuring 5-76
stickiness (SIP Call-ID)
associating server farm with sticky group 5-86
quick start 5-81
replicate SIP Call-ID sticky table entries, enabling 5-84
server farm sticky group, configuring 5-86
static SIP Call-ID, configuring 5-85
sticky group, creating 5-83
timeout, configuring 5-83
timeout for active connections, configuring 5-84
stickiness (SSL Session ID)
32-byte configuration example 5-95
configuration requirements and considerations 5-88
offset, length, and beginning pattern, configuring 5-93
overview 5-87
quick start 5-89
server farm entry, configuring 5-92
SSL Session ID learning, enabling 5-93
sticky group, creating 5-91
sticky timeout, configuring 5-92
sticky
configuration examples 5-18, 5-51, 5-63
cookies for client identification 5-5
database entries, clearing 5-115
database entries, displaying 5-109
displaying information 5-108
e-commerce application requirements 5-3
groups 5-3
HTTP header for client identification 5-6
IP address for client identification 5-4
methods 5-3
overview 5-2
purpose 5-2
statistics, clearing 5-109
statistics, displaying 5-109
table 5-7
T
TCL
copying and loading scripts A-6
copying scripts A-7
environment variables A-20
exit codes A-21
loading scripts A-9
reloading modified scripts A-10
removing scripts from memory A-10
scripts overview A-2
supported script commands A-13
unzipping scripts A-8
TCP
connection termination 4-18
probe, configuring 4-17
server reuse, configuring 3-83
Telnet
probes, configuring 4-34
threshold, configuring for probes 4-14
timeout period, configuring for probe response 4-16
TLS
version, configuring for probes 4-31
Toolkit Command Language. See TCL. A-1
traffic, distribution across firewalls 7-1, 7-3
traffic classification process 3-2
traffic policies
configurational diagram 3-3
configuration example 3-133
configuring 3-1
configuring for stickiness 5-106
overview 3-2
U
UDP
booster 3-105
per packet load balancing 3-99
probe, configuring 4-20
URL
delimiters, defining 3-76, 3-77
length 3-79
maximum bytes to parse 3-71, 3-78, 3-86
username
credentials, configuring 4-39, 4-41, 4-50
V
VIP
defining match criteria 3-89, 4-62, 4-64, 5-107, 7-9, 7-21, 7-22
disabling translation 2-76
enabling for load balancing 3-100, 7-15, 7-29
reply to ICMP request 3-98
UDP per packet load balancing 3-99
virtual private cloud 6-1
VM controller
configuring 6-8
credentials 6-9
statistics, displaying 6-16
URL 6-8
VM probe
associating a VM controller 6-11
bursting threshold 6-12
configuring 6-10
details, displaying 6-21
interval 6-10
load threshold 6-12
statistics, displaying 6-20
VMs
associating as real servers in a server farm 6-15
locality 6-5
overview 6-1
VMware vCenter Server 6-1
VPC 6-1
W
wait interval, configuring for probes 4-14, 4-15
wait period, configuring for probes 4-14
weight, setting for real servers 2-13, 2-66