Forum Discussion

J_Saunders_4728's avatar
J_Saunders_4728
Icon for Nimbostratus rankNimbostratus
May 12, 2010

SSL Certificate on F5 VIP and Real

All,     I have the following requirement:     I have a VIP with a Verisign certificate configured on it. The VIP listens on port 443, and the Reals/Members listen on port 443. It has been...
config
design
Hamish's avatar
Hamish
Icon for Cirrocumulus rankCirrocumulus
May 12, 2010
The minimum on the F5 side is to add server_ssl to the VS so that it will negotiate the SSL/TLS when it connects to the servers. That should work as it is. If you require any options on the server_ssl then create a new server ssl profile, using the server_ssl as a parent and just over-ride the changes in the new profile configuration (Then add the new profile to the VS).

 

 

If you already have a custom server ssl profile on your VS then you MAY need to alter it, depending on what is set. But the default one should work fine.

 

 

H