Dell 3-DNS Especificaciones descargar pdf (Pagina 174)

Chapter 4: Configuring the High-Level Network

4-94

Basic authentication options

You can configure an SSL proxy to handle authentication of clients in three

ways:

• You can configure the proxy to request and verify a client certificate. In

this case, the SSL proxy always grants access regardless of the status or

absence of the certificate.

• You can configure the proxy to require a client to present a valid and

trusted certificate before granting access.

• You can configure the proxy to ignore a certificate (or lack of one) and

therefore never authenticate the client. This is the default setting.

Tip

The request option works well with the header insertion feature.

Configuring the SSL proxy to insert client certificate information into an

HTTP client request and to authenticate clients based on the request option

allows the BIG-IP or a server to then perform actions such as redirecting

the request to another server, or sending different content back to the client.

To configure client-side authentication using the

Configuration utility

1. From the navigation pane, click Proxies.

2. Click the Add button.

3. In the Client Certificate box, choose either the Request, Require,

or Ignore option.

4. Click Done.

To configure client-side authentication from the

command-line

To configure client-side authentication from the command line, use the

bigpipe proxy command and specify the desired option, as follows:

b proxy <ip>:<service> [clientssl] client cert <request | require | ignore>

Additional authentication options

If an SSL proxy is configured to verify client certificates, you can use two

other options to configure client authentication in more detail: per-session

authentication and authentication depth.

Per-session authentication

You can configure an SSL proxy to require authentication either once per

SSL session, or once per session and upon each subsequent reuse of an SSL

session. The default setting for this option is once, which causes the SSL

proxy to request a client certificate and authenticate the client once per

session.

1 2 ... 169 170 171 172 173 174 175 176 177 178 179 ... 425 426

Sin comentarios

Dell 3-DNS Especificaciones Pagina 174