Forum Discussion
Custom script to shut down interface
- Feb 08, 2022
you can using below icall
https://community.f5.com/t5/technical-forum/icall-for-working-as-if-llcf/td-p/214678
you just change log, and then interfaces number
Can you explain a bit more on why you only want to have some URIs requested via HTTP?
Are you decrypting HTTPS traffic on LTM using a client SSL profile and then passing the traffic to the pool members via HTTP? If so, all traffic to the pool members should be unencrypted.
Thanks,
Aaron
- Al_EstrellasNov 26, 2020
Nimbostratus
The above solution did not do the trick even I removed the chain, most likely because I am using the same key/certificate just using a different SSL profile to do the test.
I tried using a different key/certificate but also different domain and it worked. On December 2nd week, I'll get the new/replacement cert and will test the procedure in the KB and see if it works on same domain name different key/cert.
Here's the commands for reference:
modify /ltm virtual https_vs profiles add { newcert-clientssl {context clientside } }
modify /ltm virtual https_vs profiles delete { oldcert-clientssl }
I'll update this on December when I renew cert and will use a different SSL profile.
Thanks for the help.
If you are running a script to swap the clientssl profile of VIP, the below will work (you might need to have a standard where all clientssl profiles actually start with with word clientssl though)
modify /ltm virtual https_vs profiles delete { clientssl* }
modify /ltm virtual https_vs profiles add { newcert-clientssl {context clientside } }
Recent Discussions
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com