Forum Discussion

Racharla_Chandr's avatar
Racharla_Chandr
Icon for Nimbostratus rankNimbostratus
Feb 08, 2016

using client & server ssl profiles on a VIP

Hi All,   I've configured a virtual server as https://www.xyz-google.com with a self-signed certificate and the backend server as 216.58.197.68:443 ( I've applied basic serverssl profile on the VI...
application delivery
BIG-IP
LTM
profiles
ssl
Kai_Wilke's avatar
Kai_Wilke
Icon for MVP rankMVP
Feb 08, 2016

Hi Chandu,

 

to enable your clients to access the Virtual Server using SSL you have to assign a Client-SSL-Profile. To forward the traffic to your Backend-Systems via SSL you have to assign Server-SSL-Profilesis.

 

If this configuration is causing troubles, you may check:

 

  1. If the underlying TCP connection is getting sucessful established (e.g. missing SNAT configuration?)
  2. If the SSL negotiation having some problems (see increase SSL loglevel and then keep an eye on the LTM event-log).
  3. You may also switch temporary to the "secure-incompatible" profiles, to check if certain SSL security settings are causing trouble.

Cheers, Kai