ACE VIP not accessible from client

i have clint vlan configured with vlan 30
and servers vlan with vlan 100..
i have 2 real servers in server vlan 172.16.100.20 and 172.16.100.30
ACE VIP is active and serverfarm is OPERATIONAL
from client and Serve i am able to ping to VIP.
but when i try to browse http://VIP from client its not working.
could any one help me to identify the issue why i am not abl to access http://VIP or https://VIP from cient

Hi ssivanan,
I need more information to asnwer for your question. Can you pls put your configuration ?
Here are some points I like to check.
+ Are you able to browse the contents locally, specifying own ip address on the one of servers ?
+ Do those servers have a route to vlan 30 ?
+ How does the browsing not working ? Can you elaborate ?
+ What do you see in "show conn" when it fails ?
Great documents on CCO. Worth checking.
http://docwiki.cisco.com/wiki/Cisco_Application_Control_Engine_%28ACE%29_Module_Troubleshooting_Guide%2C_Release_A2%28x%29_--_Troubleshooting_Connectivity
- Kim

Similar Messages

JSPs not accessible from client browser

Hi all,
I deployed a working, tested J2EE application on a Win 2003 server running OAS 10.1.2.0.2. The application deployed smoothly and is running fine from the server itself.
But from a client machine (another machine on our LAN), I am unable to access any JSP, including index.jsp. I am able to, however, access the login page if I supply the actual .do url (login/Login.do). I can see from the logs that login is completing successfully, but the resultant JSP page is again not thrown to the browser. I am getting a "server not found" error.
The server resides in the IP domain a.b.6.xxx, and the client has an IP like a.b.7.xxx. Could this cause any issues?
Any insights on this problems would be appreciated. Please ask for any other info that you need.
Harish

Hi ssivanan,
I need more information to asnwer for your question. Can you pls put your configuration ?
Here are some points I like to check.
+ Are you able to browse the contents locally, specifying own ip address on the one of servers ?
+ Do those servers have a route to vlan 30 ?
+ How does the browsing not working ? Can you elaborate ?
+ What do you see in "show conn" when it fails ?
Great documents on CCO. Worth checking.
http://docwiki.cisco.com/wiki/Cisco_Application_Control_Engine_%28ACE%29_Module_Troubleshooting_Guide%2C_Release_A2%28x%29_--_Troubleshooting_Connectivity
- Kim

The Report Server page comes up on local server, but the page does not open from clients

Hello,
The Report Server Page opens up just fine on the local server, but page does not open up from desktops and client PCs. SSRS is installed on a Windows Server 2008 R2 server and with SQL Server 2008 R2 SP2
Clients are using IE 11 and they see:
Oops! Internet Explorer could not connect to tumdv-fsql01
How can make this site accessible from clients?
Thanks
Paul

That did not work.
What port numbers specifically does SSRS use? I will check the firewall.
http://100.100.100.100/CengeaReports/Pages/Folder.aspx
When I add the IP Address and try the link again, IE says "This page can not be displayed". When I try the Fix connection problems, IE says:
"The website is online, but it is not responding to connection attempts."
Paul

ERROR: NO_GUEST: Guest login not allowed from client startup

we are getting the following error with express 6.3.4 when connectting to the express server from Objects using a connection editor.
The error message is
Error #12150 in XPCUBE: Non-fatal (0300): Data Manager is unable to generate transmission.
Error #10300 in XDMRESP: Non-fatal (0300): ERROR: NO_GUEST: Guest login not allowed from client startup
Encountered similar error while calling from OLAP web application.
In stored procedure XWD_RAMSTARTUP: The following Express
Server error occurred: NO_GUEST: Guest login not allowed from
client startup
Which I believe is the same reason.
Can you pls suggest what could be the problem and how can we over come this.

In the Connection Editor, under "Relational Data-> Settings" did you check the "Personal Configuration" box?
If you did, you should ensure the Authentication type is not set to "None".

Why are protected fields not-accessible from sub-classed inner class?

I ran across a situation at work where we have to sub-class an inner class from a third-party package. So, it looks something like this...
package SomePackage;
public class Outer {
   protected int x;
   public class Inner {
package OtherPackage;
public class NewOuter extends Outer {
   public class NewInner extends Outer.Inner {
}Now the NewInner class needs to access protected variables in the Outer class, just like the Inner class does. But because NewOut/NewInner are in a different package I get the following error message.
Variable x in class SomePackage.Outer not accessible from inner class NewOuter. NewInner.You can still access those protected variables from the NewOuter class though. So, I can write accessor methods in NewOuter for NewInner to use, but I am wondering why this is. I know that if NewOuter/NewInner are in the same package as Outer/Inner then everything works fine, but does not when they are in different packages.
I have to use JDK1.1.8 for the project so I don't know if there would be a difference in JDK1.2+, but I would think that nothing has changed. Anyway, if you know why Java disallows access as I have detailed please let me know.

Although I don't have the 1.1.8 JDK installed on my system, I was able to compile the following code with the 1.3.1_01 JDK and run it within a Java 1.1.4 environment (the JVM in the MSIE 5.5 browser). As long as you don't access any of the APIs that were introduced with 1.2+ or later, the classes generated by the JDK 1.2+ javac are compatible with the 1.1.4+ JVM.
//// D:\testing\SomePackage\Outer.java ////package SomePackage ;
public class Outer {
    protected int x ;
    public Outer(int xx) {
        x = xx ;
    public class Inner {
}//// D:\testing\OtherPackage\NewOuter.java ////package OtherPackage;
import SomePackage.* ;
public class NewOuter extends Outer {
    public NewOuter(int xx) {
        super(xx) ;
    public class NewInner extends Outer.Inner {
        public int getIt() {
            return x ;
}//// D:\testings\Test.java ////import OtherPackage.* ;
import java.awt.* ;
import java.applet.* ;
public class Test extends Applet {
    public void init () {
        initComponents ();
    private void initComponents() {
        add(new Label("x = ")) ;
        int myx = new NewOuter(3288).new NewInner().getIt() ;
        TextField xfld = new TextField() ;
        xfld.setEditable(false) ;
        xfld.setText(Integer.toString(myx)) ;
        add(xfld) ;
}//// d:\testing\build.cmd ////set classpath=.;D:\testing
cd \testing\SomePackage
javac Outer.java
cd ..\OtherPackage
javac NewOuter.java
cd ..
javac Test.java//// d:\testing\Test.html ////<HTML><HEAD></HEAD><BODY>
<APPLET CODE="Test.class" CODEBASE="." WIDTH=200 HEIGHT=100></APPLET>
</BODY></HTML>

My bookmarks used to appear in dropdown menu from the address bar on my iMac G5. I switched to Mac Notebook & from Leopard to Lion. Now my bookmarks are not accessible from the address bar anymore (the line where you type in the website address)

'''My bookmarks used to appear in dropdown menu from the address bar on my iMac G5. I switched to Mac Notebook & from Leopard to Lion. Now my bookmarks are not accessible from the address bar anymore (the line where you type in the website address)'''

There appears to be a problem with Firefox 20 with UNC paths when using roaming profiles on a server.
*[[/questions/955140]] why is the 20.0 address bar unresponsive?
This is currently investigated and tracked via this bug report.
*[https://bugzilla.mozilla.org/show_bug.cgi?id=857672 bug 857672] - Address Bar not working (roaming profiles;UNC path support OS.File)
<i>(please do not comment in bug reports: [https://bugzilla.mozilla.org/page.cgi?id=etiquette.html])</i>

Method not accessible from other classes

Hi,
I ve defined a class and would like to create an instance of it from another class. That works fine, I am also able to access class variables. However the class method "calcul" which is defined as following, is not accessible from other classes:
class Server {
static String name;
public static void calcul (String inputS) {
int length = inputS.length();
for (int i = 0 ; i < length; i++) {
System.out.println(newServer.name.charAt(i)); }
If I create an instant of the class in the same class, the method is then available for the object.
I am using JBuilder, so I can see, which methods and variables are available for an object. Thanks for your help

calcul is a static method, that means you do not need an instance of server to run this method. This method is also public, but your class Server is not, your Server class is package protected. So only classes within the same package has Server can use its method. How to use the calcul method?// somewhere in the same package as the Server class
Server.calcul( "toto" );

Site not accessible from the Load balanced web front end server - sharepoint 2010

I have a production environment with 2 WFE's(sp-wfe1 & sp-wfe2), 2 APP's and 2 SQL clustered VM's.
2 WFE's are load balanced using hardware load balancer.
An A-Record(PORTAL) is created in DNS for the virtual IP of the load balancer which points to the 2 WFE's.
A web application is created on the WFE's on port 80.
alternative access mapping is configured and the load balanced record "http://PORTAL" is used under the default zone.
Under IIS I have edited the bindings for the sharepoint site at port 80 and added the HOSTNAME as PORTAL.
Result: The site is accessible from outside the server and works fine.
ISSUE: The site is not accessible within the WFE's(sp-wfe1 & sp-wfe2).
When I browse the site from the WFE's server it ask for the credentials and when I enter the credentials and click OK it ask the credentials again and again and in the end displays a blank page.
Kindly help me in this issue because I am clueless and couldn't find anything helpful on the internet.
Regards,
Mudassar
MADDY-DEV Forum answers from Microsoft Forum

Loop back check.
http://www.harbar.net/archive/2009/07/02/disableloopbackcheck-amp-sharepoint-what-every-admin-and-developer-should-know.aspx

Files not accessible from local view

Hello,
I recently got a new computer (iMac 11,3) and transferred all files from a backup drive. Since then, the local view in Dreamweaver's file panel does not display the files in my local root folder. The files are visible and accessible from the desktop. I can open them in Dreamweaver by dragging them onto the Dreamweaver icon, but I can't put them to the remote server (get and put commands are grayed out). I've edited the site settings, and defined a new site with a new local root folder, but still have the same problem. I'm using DW cs3. The old computer was an iMac G5, with a non-Intel processor. I hope that's not the problem.
Thanks!

Local:
Site name: Neal homepage
local root folder: Sesostris:Users:nskorpen:Documents:Neal homepage:
Default image folder: (blank)
Links relative to : Document
HTTP address: http://www.nealskorpen.com/
case sensitive links: off
cache: disabled
Remote:
Access: FTP
FTP host: www.nealskorpen.com
Host directory: /public_html/
login and password: I'm not going to list these here. I tested the
connection and they worked.
Use passive FTP: disabled
Use IPv6 transfer mode: disabled
use firewall: disabled
use SFTP: disabled
Maintain synchronization information: enabled
Automatically upload files to server on save: disabled
check in/out: disabled

OSB Proxy service accessible from client?

Are non SOAP/WSDL OSB business services accessible from outside the OSB? Or are these only accessible from other services within the OSB?
Thanks
Edited by: magic1007 on Mar 18, 2010 7:50 AM

Thanks!!
Now, I Know I'm near, because using the proxy service URL:
http://localhost:7001/PROJECT/ProxyServices/CompraDivisas_FIX
I have an answer from the explorer and other from de console, both of them are asking me for the request message... So, how should I send that request?? I have 2 cases:
1) I need to send as request a FIX string:
8=HeaderBeginID9=40386842735=MTB1128=5.0SP149=PROJECT56=TargetCompanyID91=CandadoSeguridad34=795538142=525557=TargetSubID143=TargetLocID116=NONE144=0129=043=N52=20090311-17:06:16.720213=XML_DATA369=118219457811=11=CPADIVI581=144=12.0015=EUR55=USD54=160=20090411-14:35:4238=1152=1516=10040=1432=20100210-17:06:16.72010=PJVVHFdsicvr8f16
2) My request is an XML:
<?xml version="1.0" encoding="UTF-8"?>
<QuoteRequestIM>
     <BeginString>BeginString</BeginString>
     <BodyLength>604607687</BodyLength>
     <MsgType>R</MsgType>
     <SenderCompID>SenderID</SenderCompID>
     <TargetCompID>PROJECT_ID</TargetCompID>
     <MsgSeqNum>1</MsgSeqNum>
     <SendingTime>2010-01-27T14:35:42</SendingTime>
     <QuoteReqID>QuoteRequestID</QuoteReqID>
     <RelatedSym>
          <Symbol>EUR/USD</Symbol>
          <Currency>EUR</Currency>
          <Legs>
               <LegSymbol>EUR/USD</LegSymbol>
               <LegQty>1000000.0</LegQty>
               <LegSettlType>0</LegSettlType>
               <LegSettlDate>2010-01-30</LegSettlDate>
               <LegRefID>A0001</LegRefID>
          </Legs>
          <Legs>
               <LegSymbol>EUR/USD</LegSymbol>
               <LegQty>1000000.0</LegQty>
               <LegSettlType>6</LegSettlType>
               <LegSettlDate>2010-02-28</LegSettlDate>
               <LegRefID>A0002</LegRefID>
          </Legs>
          <ExpireTime>2006-01-27T14:35:42</ExpireTime>
     </RelatedSym>
     <CheckSum>QBp0r7s7J_nsKe3p</CheckSum>
</QuoteRequestIM>
How, when & where can I introduce this request to my proxy service??
Thanks a lot Anuj!!!
WaLeX

SMP 3.0 with SP3 AgentryApp is not Connecting from Client : Communications error (14)

Hello,
In SMP 3.0 : Version 3.0.2, SP Level:02, my Agentry App : Work Manger 6.0 is working fine, it is running from device and running properly. After i migrate my SMP3.0 from SP02 To SP03, it is not connection from Any Device,(it is not showing any Error in Log file, Means App deployed successfully.) whenever we try to connect from Any device it is showing following Error Message.
Requesting Public Key from Server
Communications error (14)
Connection failed
Ending transmission
??? : Is there any other confugration need to do in SMP 3.0 : SP03???? please help on this Issue...
Thanks
Krishna

Hello Steve,
i go through the SAP Note 2008882. based on that Note i run the following
command.
C:\windows\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe -pa
"C:\SAP\MobilePlatform3\Server\configuration\com.sap.mobile.platform.serv
er.agentry" smpServiceUser.
Now that Error is Gone from Log file but still it is not allowing to
connect. Even from ATE also.
Event Log File :
06/19/2014 17:54:00, 0,         0,         0, Thr       3192, New files opened events.log, messages.log
06/19/2014 17:54:00, 0,         0,         2, Thr       3192, Loading the Agentry Runtime's public/private key for password exchanges.
06/19/2014 17:54:01, 0,         0,         2, Thr       3192, Upgraded the Agentry key pair from pre-SP03 format
06/19/2014 17:54:01, 0,         0,         2, Thr       3192, Key pair loaded successfully.
06/19/2014 17:54:01, 0,         0,         2, Thr       3192, Agentry Startup
06/19/2014 17:54:01, 0,        17,        14, Thr       3192, WebSockets Front End v7.0.3.205
06/19/2014 17:54:01, 0,         1,         4, Thr       3192, Agentry Server Agent v7.0.3.205
06/19/2014 17:54:01, 0,        20,       150, Thr       1656, Loading Development application definitions
06/19/2014 17:54:07, 0,        24,         4, Thr       1656, Loaded HTTPXML-HTTPXMLSystemConnection (HTTPXML v7.0.3.205) from ag3httpxmlbe.dll
06/19/2014 17:54:07, 1,         3,         9, Thr       1656, Java-1, Chickaming Java, initialHeapSize, File: , ..\agentry\SystemLogger.cpp#792:DTLoggerHandler::badKey
06/19/2014 17:54:07, 1,         3,         9, Thr       1656, Java-1, Chickaming Java, maxHeapSize, File: , ..\agentry\SystemLogger.cpp#792:DTLoggerHandler::badKey
06/19/2014 17:54:07, 1,         3,         9, Thr       1656, Java-1, Chickaming Java, reduceOSSignalUse, File: , ..\agentry\SystemLogger.cpp#792:DTLoggerHandler::badKey
06/19/2014 17:54:07, 1,         3,         9, Thr       1656, Java-1, Chickaming Java, nonStandardJavaOptions, File: , ..\agentry\SystemLogger.cpp#792:DTLoggerHandler::badKey
06/19/2014 17:54:20, 0,        23,         4, Thr       1656, Loaded Java Back End (Java v7.0.3.205) from ag3javabe.dll
06/19/2014 17:54:20, 0,        20,       152, Thr       1656, Loading Development application definitions for default localization
06/19/2014 17:54:20, 0,        20,       153, Thr       1656, Finished loading Development application definitions for default localization
06/19/2014 17:54:20, 0,        20,       151, Thr       1656, Finished loading Development application definitions
06/19/2014 17:54:21, 0,        20,         4, Thr       3192, Server v7.0.3.205
06/19/2014 17:54:21, 0,        17,        10, Thr       3192, WebSockets Front End v7.0.3.205
06/19/2014 17:54:21, 0,         0,         0, Thr       3192, Old log files moved into C:\SAP\MobilePlatform3\Server\log\agentry\rolled\2014-06-19-175400
06/19/2014 17:54:21, 0,         0,        23, Thr       3192, Agentry startup is complete.
Thanks
Krishna

Manage out clients are not accessible from intranet

Hi!
DA 2012 R2 works in NLB cluster in DMZ zone. I can access internet clients from DA servers (ping, RDP), but not from intranet management workstations (W7). Those workstations have ISATAP IPv6 addresses (from DA server(s)).
What can be wrong here, how to troubleshoot?
Thanks,
UV

Hi!
Again, briefly:
DA clients are out and configured for remote (manage out) management;
DA clients out there are registering their IPv6 addresses in DNS;
HTTPSTunnel is the only way to connect, DA server is in DMZ zone, no straight connection to internet from DA server.
Intranet management workstations have ISATAP address from DA server;
Intranet management workstations can resolove DA clients IPv6 updated addresses;
In clients outside users are logged on and need help over remote assistance;
Remote assistance is enabled on DA clients (and it can be offered from DA server);
Intranet management workstations no not belong to management servers group.
Intranet management workstations cannot connect to DA clients out there to offer remote assistance!
Why can it happen?
UV

ICal server accessible from clients, but not from a local user...

So I've got iCal server running just fine, and the clients log in and work great.
However, when I try to connect to the iCal server from a user that's local to the server itself (i.e. a non-Admin user on the Mac Pro running the server software) I get Kerberos errors.
The user, while local, is also been added to the Directory via the Workgroup manager. And what's strange is that their login will work just fine when coming from a client, and will work just fine for things like the Wiki Server and such locally.
However, when we try to add an account to their iCal to let them see a Group's Shared Calendar and todos It asks for their Kerberos password, and then even if given a valid password for a valid user (that an outside client works fine with) it states that it can't find that user in the Kerberos.
Obviously I'm doing something wrong, but I haven't been able to figure out what. Any help would be loved!

Hi
Don't use Kerberos for the authentication method and it should work just fine.
Tony

Supporting details are not accessible from SmartView client

Hi All,
For one of our users Supporting detail functionality is not available using SmartView client. While clicking on Supporting detail option in excel, the bar is showing hour glass but never displaying the supporting detail window. We reinstalled the client but with no success. We are not sure what is causing this issue. Kindly share your thoughts around the possible causes.
P.S - We asked the user to go to planning web for the time being.
Thanks,
Praveen

What versions of software are you on? Smartview / Excel etc
If other users are fine and share common software versions, then this would point to something on the client machine....have a try of disabling all add-ins except Smart View to see if anything is conflicting?
I assume the behaviour is the same whether trying to interact with already existing supporting details or creating own?
JB

Cisco ACE VIP not responding to Pings

I've searched..... I cannot figure out why my VIPs do not ping. I have two vlans that both replay to a ping on the interface IPs. And I'm new at this, thanks in advace.
GKEL2-ACE1/35568059-Axia# show run
Generating configuration....
no ft auto-sync startup-config
logging enable
logging timestamp
logging trap 5
logging host 10.85.242.100 udp/514
login timeout 60
crypto chaingroup walnut-wcrt100
cert .dom.cer
cert wcrt100.pem
crypto chaingroup .dom-wcrt100
cert .dom.cer
cert wcrt100.pem
crypto csr-params .dom
country CA
state AB
organization-unit IT
common-name .dom
serial-number 1000
email support
crypto csr-params .dom
country CA
state AB
organization-unit IT
common-name .dom
serial-number 1001
email support
access-list ANYONE line 10 extended permit ip any any
access-list ANYONE line 20 extended permit icmp any any
access-list All line 1 extended permit ip any any
probe http HTTP1025
port 1025
interval 2
faildetect 2
passdetect interval 2
request method get url /Login.css
open 1
probe icmp PING
interval 2
faildetect 2
passdetect interval 60
probe tcp PROBE-TCP
interval 2
faildetect 2
passdetect interval 10
passdetect count 2
open 1
rserver redirect REDIRECT-HTTPS
webhost-redirection https://%h%p 302
inservice
rserver host WL1
ip address 10.205.70.100
inservice
rserver host WL2
ip address 10.205.70.101
inservice
rserver host WLDev1
ip address 10.205.71.202
inservice
rserver host WLDev2
ip address 10.205.71.203
inservice
rserver host WLTest1
ip address 10.205.71.150
inservice
rserver host WLTest2
ip address 10.205.71.151
inservice
serverfarm redirect REDIRECT-SERVERFARM
rserver REDIRECT-HTTPS
    inservice
serverfarm host WEBLOGIC-7433
predictor leastconns
probe PING
rserver WL1 7433
    inservice
rserver WL2 7433
    inservice
serverfarm host WEBLOGIC-PROD
predictor leastconns
probe PING
rserver WL1 1025
    inservice
rserver WL2 1026
    inservice
serverfarm host WEBLOGIC-TEST-SSH
predictor leastconns
rserver WLTest1 22
    inservice
rserver WLTest2 22
    inservice
sticky http-cookie acecookie STICKY-INSERT-COOKIE
cookie insert
serverfarm WEBLOGIC-PROD
action-list type modify http REWRITE
header insert response Via header-value "1.1 web:%ps (ace10-8/a2)value"
header insert request Via header-value "1.1 web:%ps (ace10-8/a2)value"
header insert request X-Forwarded-Proto header-value "%pd"
ssl url rewrite location "*.*"
ssl header-insert session Id
ssl-proxy service ssl-client
ssl-proxy service ssl-proxy
key netcracker.cal.dom.key
cert netcracker.cal.dom.cer
chaingroup netcracker.cal.dom-wcrt100
class-map match-any L4VIPCLASS
2 match virtual-address 10.205.70.80 any
class-map type http loadbalance match-any L7-URL
2 match http url /*.*
class-map type http loadbalance match-all L7SLBCLASS
2 match http url /*
class-map type management match-any REMOTE-MANAGEMENT
2 match protocol telnet any
3 match protocol icmp any
4 match protocol ssh any
5 match protocol snmp any
6 match protocol http any
7 match protocol https any
class-map match-any SSH_Test
2 match virtual-address 10.205.71.80 tcp eq 22
class-map match-any weblogic-7433
2 match virtual-address 10.205.70.80 tcp eq 7433
class-map match-any weblogic-http
2 match virtual-address 10.205.70.80 tcp eq www
class-map match-any weblogic-https
2 match virtual-address 10.205.70.80 tcp eq https
policy-map type management first-match REMOTE-MANAGEMENT
class REMOTE-MANAGEMENT
    permit
policy-map type loadbalance first-match L7SLBPOLICY
class L7SLBCLASS
    ssl-proxy client ssl-client
policy-map type loadbalance first-match SSH_Test_Policy
class class-default
    serverfarm WEBLOGIC-TEST-SSH
policy-map type loadbalance first-match weblogic-7433-policy
class class-default
    serverfarm WEBLOGIC-7433
    ssl-proxy client ssl-client
policy-map type loadbalance first-match weblogic-http-policy
class class-default
    serverfarm REDIRECT-SERVERFARM
policy-map type loadbalance first-match weblogic-https-policy
class L7-URL
    sticky-serverfarm STICKY-INSERT-COOKIE
class class-default
    serverfarm WEBLOGIC-PROD
    action REWRITE
    ssl-proxy client ssl-proxy
policy-map multi-match L4LSBPOLICY
class L4VIPCLASS
    loadbalance policy L7SLBPOLICY
policy-map multi-match LB-VIP
class weblogic-http
    loadbalance vip inservice
    loadbalance policy weblogic-http-policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3440
class weblogic-https
    loadbalance vip inservice
    loadbalance policy weblogic-https-policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3440
    ssl-proxy server ssl-proxy
class weblogic-7433
    loadbalance vip inservice
    loadbalance policy weblogic-7433-policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3440
    ssl-proxy server ssl-proxy
policy-map multi-match LB-VIP-Test
class SSH_Test
    loadbalance vip inservice
    loadbalance policy SSH_Test_Policy
    loadbalance vip icmp-reply
interface vlan 3440
description Internal Production
ip address 10.205.70.250 255.255.255.0
access-group input All
access-group output All
nat-pool 1 10.205.70.249 10.205.70.249 netmask 255.255.255.0 pat
service-policy input REMOTE-MANAGEMENT
service-policy input LB-VIP
service-policy input L4LSBPOLICY
no shutdown
interface vlan 3516
description Internal Test/Dev
ip address 10.205.71.250 255.255.255.0
access-group input All
access-group output All
nat-pool 2 10.205.71.249 10.205.71.249 netmask 255.255.255.0 pat
service-policy input REMOTE-MANAGEMENT
service-policy input LB-VIP-Test
no shutdown
interface vlan 3520
description LB
ip address 10.205.72.1 255.255.255.0
access-group input All
access-group output All
no shutdown
ip route 0.0.0.0 0.0.0.0 10.205.70.253
username admin password 5 $1$r2r0NmEH$z8S0RxYdhwOE4RGXQ41 role Admin domain default-domain
username cust_admin password 5 $1$/tOIIfUK$yigE519cqLq1IFgX. role Admin domain default-domain

I have removed that service policy completely. It was from some knowledgebase article when I was trying to get http redirection working.
There is no more L4LSBPOLICY nor L4VIPCLASS, Thanks a lot for looking at this...
GKEL2-ACE1/35568059-Axia# show service-policy summary
service-policy: LB-VIP
Class                            VIP             Prot Port        VLAN          State    Curr Conns   Hit Count Conns Drop
weblogic-http                    10.205.70.80    tcp   eq 80       1,3440        IN-SRVC           0       50773         53
weblogic-https                   10.205.70.80    tcp   eq 443      1,3440        IN-SRVC           0        7406        112
weblogic-7433                    10.205.70.80    tcp   eq 7433     1,3440        IN-SRVC           0      145321         30
service-policy: LB-VIP-Dev
Class                            VIP             Prot Port        VLAN          State    Curr Conns   Hit Count Conns Drop
weblogic-http-dev                10.205.71.90    tcp   eq 80       1,3516        IN-SRVC           0           0          0
weblogic-https-dev               10.205.71.90    tcp   eq 443      1,3516        IN-SRVC           0           0          0
weblogic-7433-dev                10.205.71.90    tcp   eq 7433     1,3516        IN-SRVC           0           0          0
service-policy: LB-VIP-Test
Class                            VIP             Prot Port        VLAN          State    Curr Conns   Hit Count Conns Drop
SSH_Test                         10.205.71.80    tcp   eq 22       1,3516        IN-SRVC           0          29         24
weblogic-http-test               10.205.71.80    tcp   eq 80       1,3516        IN-SRVC           0         117         40
weblogic-https-test              10.205.71.80    tcp   eq 443      1,3516        IN-SRVC           0         161         61
weblogic-7433-test               10.205.71.80    tcp   eq 7433     1,3516        IN-SRVC           0          27         11
class-map type http loadbalance match-any L7-URL
2 match http url /*.*
class-map type http loadbalance match-all L7SLBCLASS
2 match http url /*
class-map type management match-any REMOTE-MANAGEMENT
2 match protocol telnet any
3 match protocol icmp any
4 match protocol ssh any
5 match protocol snmp any
6 match protocol http any
7 match protocol https any
class-map match-any SSH_Test
2 match virtual-address 10.205.71.80 tcp eq 22
class-map match-any weblogic-7433
2 match virtual-address 10.205.70.80 tcp eq 7433
class-map match-any weblogic-7433-dev
2 match virtual-address 10.205.71.90 tcp eq 7433
class-map match-any weblogic-7433-test
2 match virtual-address 10.205.71.80 tcp eq 7433
class-map match-any weblogic-http
2 match virtual-address 10.205.70.80 tcp eq www
class-map match-any weblogic-http-dev
2 match virtual-address 10.205.71.90 tcp eq www
class-map match-any weblogic-http-test
2 match virtual-address 10.205.71.80 tcp eq www
class-map match-any weblogic-https
2 match virtual-address 10.205.70.80 tcp eq https
class-map match-any weblogic-https-dev
2 match virtual-address 10.205.71.90 tcp eq https
class-map match-any weblogic-https-test
2 match virtual-address 10.205.71.80 tcp eq https
policy-map type management first-match REMOTE-MANAGEMENT
class REMOTE-MANAGEMENT
    permit
policy-map type loadbalance first-match L7SLBPOLICY
class L7SLBCLASS
    ssl-proxy client ssl-client
policy-map type loadbalance first-match SSH_Test_Policy
class class-default
    serverfarm WEBLOGIC-TEST-SSH
policy-map type loadbalance first-match weblogic-7433-dev-policy
class class-default
    serverfarm WEBLOGIC-7433-Dev
policy-map type loadbalance first-match weblogic-7433-policy
class class-default
    serverfarm WEBLOGIC-7433
    ssl-proxy client ssl-client
policy-map type loadbalance first-match weblogic-7433-test-policy
class class-default
    serverfarm WEBLOGIC-7433-Test
    ssl-proxy client ssl-client
policy-map type loadbalance first-match weblogic-http-dev-policy
class class-default
    serverfarm REDIRECT-SERVERFARM
policy-map type loadbalance first-match weblogic-http-policy
class class-default
    serverfarm REDIRECT-SERVERFARM
policy-map type loadbalance first-match weblogic-http-test-policy
class class-default
    serverfarm REDIRECT-SERVERFARM
policy-map type loadbalance first-match weblogic-https-dev-policy
class L7-URL
    sticky-serverfarm STICKY-INSERT-COOKIE-DEV
class class-default
    serverfarm WEBLOGIC-DEV
    action REWRITE
policy-map type loadbalance first-match weblogic-https-policy
class L7-URL
    sticky-serverfarm STICKY-INSERT-COOKIE
class class-default
    serverfarm WEBLOGIC-PROD
    action REWRITE
    ssl-proxy client ssl-proxy
policy-map type loadbalance first-match weblogic-https-test-policy
class L7-URL
    sticky-serverfarm STICKY-INSERT-COOKIE-TEST
class class-default
    serverfarm WEBLOGIC-TEST
    action REWRITE
    ssl-proxy client ssl-proxy-nctest
policy-map multi-match LB-VIP
class weblogic-http
    loadbalance vip inservice
    loadbalance policy weblogic-http-policy
    loadbalance vip icmp-reply active
    nat dynamic 1 vlan 3440
class weblogic-https
    loadbalance vip inservice
    loadbalance policy weblogic-https-policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3440
    ssl-proxy server ssl-proxy
class weblogic-7433
    loadbalance vip inservice
    loadbalance policy weblogic-7433-policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3440
    ssl-proxy server ssl-proxy
policy-map multi-match LB-VIP-Dev
class weblogic-http-dev
    loadbalance vip inservice
    loadbalance policy weblogic-http-dev-policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3516
class weblogic-https-dev
    loadbalance vip inservice
    loadbalance policy weblogic-https-dev-policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3516
class weblogic-7433-dev
    loadbalance vip inservice
    loadbalance policy weblogic-7433-dev-policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3516
policy-map multi-match LB-VIP-Test
class SSH_Test
    loadbalance vip inservice
    loadbalance policy SSH_Test_Policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3516
class weblogic-http-test
    loadbalance vip inservice
    loadbalance policy weblogic-http-test-policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3516
class weblogic-https-test
    loadbalance vip inservice
    loadbalance policy weblogic-https-test-policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3516
    ssl-proxy server ssl-proxy-nctest
class weblogic-7433-test
    loadbalance vip inservice
    loadbalance policy weblogic-7433-test-policy
    loadbalance vip icmp-reply
    nat dynamic 1 vlan 3516
    ssl-proxy server ssl-proxy-nctest
interface vlan 3440
description Internal Production
ip address 10.205.70.250 255.255.255.0
mac-sticky enable
access-group input All
access-group output All
nat-pool 1 10.205.70.249 10.205.70.249 netmask 255.255.255.0 pat
service-policy input REMOTE-MANAGEMENT
service-policy input LB-VIP
no shutdown
interface vlan 3516
description Internal Test/Dev
ip address 10.205.71.250 255.255.255.0
mac-sticky enable
access-group input All
access-group output All
nat-pool 1 10.205.71.240 10.205.71.249 netmask 255.255.255.0 pat
service-policy input REMOTE-MANAGEMENT
service-policy input LB-VIP-Test
service-policy input LB-VIP-Dev
no shutdown
interface vlan 3520
description LB
ip address 10.205.72.1 255.255.255.0
access-group input All
access-group output All
no shutdown
ip route 0.0.0.0 0.0.0.0 10.205.70.253

ACE VIP not accessible from client

Similar Messages

Maybe you are looking for