Forum Discussion

Thiyagu_343098's avatar
Thiyagu_343098
Icon for Nimbostratus rankNimbostratus
Jul 04, 2018

Required configruation change to add two SSL profile to a VIP

Hello, For the same LB VIP we have two names and I have to add the SSL profile for both the SAN name to the same VIP.   Could you please help me to know the configuration change required to add th...
application delivery
big-ip
LTM
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Jul 04, 2018

Hi Thiyagu,

 

If you want to assocaited 2 SSL profil to the same VS you can follow this steps.

 

So suppose you have this 2 ssl profil:

 

  • Profil A: myhost.mydomain.com
  • Profil B: *.mydomain2.com

First of in your profil you have to set the same: - Ciphers (To begin let the 2 profil at Default). - Renegotiation will be checked on both profil. - try to set the same Parent Profile in both profil (clientssl for example).

 

Then in Profil A set "Server Name" at "myhost.mydomain.com"

 

And in profil B set "Server Name" at "*.mydomain2.com" and check "Default SSL Profile for SNI".

 

When you set 2 ssl profil or more you have to have an Default SSL Profile for SNI.

 

Regards