Forum Discussion

cwdusheke_14267's avatar
cwdusheke_14267
Icon for Nimbostratus rankNimbostratus
Jul 28, 2015

F5 SSL Profile Unchecking CIPHER Box

I am trying to figure out how uncheck the custom box in a ssl profile using the tmsh command line. What I want to do is write a script to force the ssl profile use the clienssl profile for ciphers.

 

Any ideas? I am on version 11.5.3.

 

3 Replies

  • I'm assuming you mean you want to force it to use the DEFAULT value here.

    tmsh modify ltm profile client-ssl [profile name] ciphers default-value
    
  • I actually want my ssl profile to inherent the client-ssl cipher setting. So, I have a ssl profile call abc. The cipher setting is set to Default. I also have a clientssl profile and it's cipher setting is !RC4. What I want to do is for the abc profile to use the parent clientssl cipher setting. I can get there via the gui by just unchecking the custom box next to the cipher option.

     

  • Try this:

    tmsh modify ltm profile client-ssl [profile name] ciphers default-value defaults-from [parent profile name]