Forum Discussion

Christian_Manue's avatar
Christian_Manue
Icon for Nimbostratus rankNimbostratus
Jul 26, 2018

VIP SSL TLS v1.1 and TLS v1.2

Hello Friends, We want setup an encription VIP with the following consideration:

 

  • The connection from the Client to the VIP F5 will be TLS v1.1
  • The connection from the VIP F5 to the server will be TLS v1.2

We only have one certificate for both connection.

 

Which would be the step for that configuration?

 

Thanks for your answers.

 

application delivery
BIG-IP
LTM
tls v1.1
tls v1.2
vip ssl

1 Reply

Sort By
  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Jul 26, 2018

    You need a custom client-ssl profile which sets the certificate/key, and a Parent Profile of clientssl (this sets the cipher string to DEFAULT)

     

    You also need a server-ssl profile - the default serverssl should be suitable.