23.3 Testing the Scripts

  1. Enter the following command to stop the SSL VPN server:

    /etc/init.d/novell-sslvpn stop

  2. Enter the following command to verify if the scripts have blocked port 8080:

    iptables -L

    The following lines are displayed if port 8080 is blocked:

    Chain    sslvpn-heartbeat-chain (1 reference)
    target    prot opt source      destination
    REJECT    tcp  --  anywhere      anywhere    tcp
    dpt:http-alt reject-with icmp-port-unreachable
    
  3. In the Administration Console, click Access Gateways > [Name of Server] > Health. The following message is displayed if the SSL VPN server is down:

    The HTTP Reverse Proxy service <reverse proxy name> might not be functioning properly. Few of the Web servers being accelerated are unreachable <sslvpn server IP Address>:8080
    

    Click Update from Server to get the latest health status of the Access Gateway.

  4. Connect to SSL VPN. Verify that your connection was sent to the SSL VPN that is running and not to the one that is marked as down by the Access Gateway.

  5. Enter the following command to start the SSL VPN server:

    /etc/init.d/novell-sslvpn start

  6. Enter the following command to verify if the script has removed the block on port 8080:

    iptables -L

    The following lines are displayed if the block on port 8080 is removed:

    Chain sslvpn-heartbeat-chain (1 references)
    target    prot opt source      destination
    
  7. In the Administration Console, click Access Gateways > [Name of Server] > Health, then check that the SSL VPN server is up.

    Click Update from Server to get the latest health status of the Access Gateway.

  8. Connect to SSL VPN. Verify if your connection was sent to the SSL VPN server that was restarted. It might require several attempts before you can connect to the desired Access Gateway.

  9. Repeat Step 1 to Step 8 to verify if the SSL VPN health scripts are working on all the SSL VPN servers.