Dell 3-DNS Especificaciones descargar pdf (Pagina 171)

Proxies

BIG-IP® Reference Guide 4-91

Figure 4.43 shows the state of the /config/bigip.conf file, after creating an

SSL proxy with SSL-to-Server enabled. Note that the certificate and key

files for client-side SSL connections have also been configured.

Configuring client certificates

This option extends the SSL-to-Server feature by allowing the BIG-IP to

authenticate itself using client certificates. You can thus specify a key file

and a certificate file for the proxy as an SSL client, as it acts on the server

side. When a server-side SSL certificate is specified, the certificate is used

only if the server requests client authentication.

To configure client certificates using the Configuration

utility

Configuring client certificates for SSL-to-Server using the Configuration

utility is similar to configuring the existing client SSL key/certificate pair.

1. From navigation pane, click Proxies.

2. Click the Add button.

3. Check the SSL and ServerSSL check boxes.

4. In the boxes labeled Server SSL Certificate and Server SSL Key,

either type the names of the key and certificate files or select the

names from a list of available key and certificate files.

5. Click Done.

To configure client keys and certificates from the command

line

When configuring SSL-to-Server, you can use the bigpipe proxy command

to designate a key file and a certificate file. This is done as is the following

example:

b proxy 10.1.1.1:443 \

target virtual 20.1.1.10:443 \

clientssl enable \

clientssl key my.server.net.key \

clientssl cert my.server.net.crt \

proxy 10.1.1.1:443 unit 1 {

target virtual 20.1.1.1:https

clientssl enable

clientssl key my.server.net.key

clientssl cert my.server.net.crt

serverssl enable

}

Figure 4.43 SSL proxy entries in /config/bigip.conf wth SSL-to-Server

enabled

1 2 ... 166 167 168 169 170 171 172 173 174 175 176 ... 425 426

Sin comentarios

Dell 3-DNS Especificaciones Pagina 171