MSM7xx Controllers Configuration Guide v6.4.0

DescriptionParameter
<?xml version="1.0" encoding="UTF-8"?>
<SOAP-ENV:Envelope
xmlns:SOAP-ENV="http://schemas.xmlsoap.org/soap/envelope/"
xmlns:SOAP-ENC="http://schemas.xmlsoap.org/soap/encoding/"
xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
xmlns:xsd="http://www.w3.org/2001/XMLSchema"
xmlns:MYCOMPANY="http://www.mycompany.com/SOAP/NOCAPI/1.0/">
<SOAP-ENV:Body>
<MYCOMPANY:WebServerStatus>
<MYCOMPANY:result>UP</MYCOMPANY:result>
<!-Change this between UP and DOWN to determine the state of your server !>
</MYCOMPANY:WebServerStatus>
</SOAP-ENV:Body>
</SOAP-ENV:Envelope>
Change the
<MYCOMPANY:result>
line to indicate the status of the server as follows:
Server is UP
<MYCOMPANY:result>UP</MYCOMPANY:result>
Server is DOWN
<MYCOMPANY:result>DOWN</MYCOMPANY:result>
Do not change any other lines in the file.
If the controller fails to receive an answer to a poll, or receives an incorrect answer (bad format,
wrong result setting) it is interpreted as the server being down.
Polling
Initially, the controller polls the primary server at an interval of 10 minutes. As long as the primary
is active, it is used. If it is not available, then the secondary server is used, but only until the primary
server becomes available again.
If both servers are not available, both are polled in turn with no delay (other than the poll timeout)
until one becomes available. When both servers are unavailable the access list DNAT-SERVER
definition is skipped with no action taken, and processing moves to the next rule in the access list.
This next rule can then be used to define the action taken when both DNAT-SERVERS are down.
The following table shows possible results when polling is active for both the primary and secondary
servers.
DescriptionServer 2Server 1
Traffic matching the DNAT-SERVER rule is forwarded
to server 1.
UPUP
Traffic matching the DNAT-SERVER rule is forwarded
to server 1.
DOWNUP
Traffic matching the DNAT-SERVER rule is forwarded
to server 2.
UPDOWN
No action is performed for the DNAT-SERVER rule.
Processing moves to the next rule in the list. To accept
all traffic if both servers are down, define this rule as:
DOWNDOWN
ACCEPT,all,all,all
Example
The following creates an access list called redirect which is used to redirect HTTP traffic for
authenticated users to either srv1.mycompany.com or srv2.mycompany.com depending on
which one is active. Port 8080 is used to forward traffic. If neither the primary or secondary
DNAT-SERVER is available, all traffic is accepted.
Colubris AV-Pair - Site attribute values 483