Forum Discussion

Deee-blue_14536's avatar
Deee-blue_14536
Icon for Nimbostratus rankNimbostratus
Mar 08, 2015

Client and server ssl cert location when redirecting to a second VIP (LTM)

Hi All,   I have a setup using a SAN cert which holds multiple URLs pointing to a single public IP address. I plan on having traffic hit a vip and then being filtered by url to a second tier of v...
application delivery
deployment
LTM
nitass's avatar
nitass
Icon for Employee rankEmployee
Mar 09, 2015

i understand on primary vs, san certificate on clientssl and default on serverssl. on secondary vs, default on both clientssl and serverssl.

default clientssl can be used on secondary vs because on primary vs, server certificate in default serverssl is set to ignore, so it does not ao server authentication (i.e. not checking server certificate from secondary vs).

Ignore: The Ignore setting is the default setting. The BIG-IP system ignores certificates from the server and never authenticates the server.

sol14806: Overview of the Server SSL profile (11.x)

https://support.f5.com/kb/en-us/solutions/public/14000/800/sol14806.html