Forum Discussion
NimbostratusMutual Authentication
Hi All,
We have multiple VIPs in our environment where we have mutual authentication configured. At time we face issue where some of the cert at server side gets changed and we need to take tcpdump to figure out correct cert. But at time I have seen issue where we take wireshark and instead of seeing 'client hello' after 'ack' we just keep on seeing 'psh, ack'. Below is the command I use to take capture:
tcpdump -vnni 0.0 -s0 host 1.1.1.1 -w /var/tmp test.pcap
Is there anything I am missing? I am using f5 plugin as well.
Thanks.
1 Reply
- Kevin_Stewart
Employee
Okay, let's clarify a few things. You say "cert at server side", which implies to me that you're sending the client cert all the way through, which also implies that you're not decrypting and re-encrypting at the F5. So if that's the case, what type of persistence do you have configured for the pool members?
