Forum Discussion

Mate_132781's avatar
Mate_132781
Icon for Cirrostratus rankCirrostratus
Mar 30, 2016

SSL Re-Encryption - No SSL traffic on server side

Hi,   I configured SSL re-encryption on F5 virtual edition, but I don't see SSL traffic on server side.   Client correctly connects to outside IP of F5, but when I create TCPDUMP there is no SS...
application delivery
BIG-IP
re-encryption
ssl
TMOS
  • Mate_132781's avatar
    Mate_132781
    Apr 01, 2016

    Thank you for hint! :-)

     

    To be sure I disabled HTTPS monitor on BIG-IP and after that there was no any traffic to server. After starting HTTPS connection from client I noticed that F5 used outside IP adress (one to which client connected) as a source IP address torward server. SNAT auto-map was enabled on VS.

     

    After that I created SANT pool with inside IP address of F5, associate it with VS and now everything is working.

     

    Monitor traffic confused me in TCPDUMP.

     

    Thanks for help.

     

Mate_132781's avatar
Mate_132781
Icon for Cirrostratus rankCirrostratus
Apr 01, 2016

Thank you for hint! :-)

 

To be sure I disabled HTTPS monitor on BIG-IP and after that there was no any traffic to server. After starting HTTPS connection from client I noticed that F5 used outside IP adress (one to which client connected) as a source IP address torward server. SNAT auto-map was enabled on VS.

 

After that I created SANT pool with inside IP address of F5, associate it with VS and now everything is working.

 

Monitor traffic confused me in TCPDUMP.

 

Thanks for help.