For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

hui_37443's avatar
hui_37443
Icon for Nimbostratus rankNimbostratus
Jun 24, 2009

Proxy OCSP request

Our Big-IP LTM dev/test device is sitting behind company's firewall. In order to make an OCSP request to our CA, which is an Internet site, I have to configure it to go through the proxy. So far I can...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 24, 2009
You can configure a virtual server to pass the traffic through LTM. You could configure the virtual server to be very specific (only the IP and port of the OCSP server) or very generic (any IP and any port). You would probably want to enable the virtual server only on the VLAN that the "client" is coming in on. If you have a single gateway, you can use a forwarding IP virtual server with no pool. LTM will use the routing table to select a destination gateway. Or if you have multiple gateways, you can configure a pool of the gateways and then use a Performance L4 virtual server.

 

 

You can check the LTM configuration guide for your version on AskF5 for details.

 

 

Aaron