Dell 3-DNS Spezifikationen PDF herunterladen (Seite 175)

Proxies

BIG-IP® Reference Guide 4-95

To modify per-session authentication using the

Configuration utility

You can modify the SSL proxy to require authentication not only once per

session, but also upon each subsequent reuse of an SSL session.

1. In the navigation pane, click Proxies.

2. Click the Add button.

3. Click on the Client Authenticate Once box. This changes the

setting from once to always.

4. Click Done.

To modify per-session authentication from the command

line

To modify the SSL proxy to require authentication not only once per

session, but also upon each subsequent reuse of an SSL session, specify

always argument with the bigpipe proxy command, as follows. This

changes the setting from once to always.

bigpipe proxy <ip>:<service> [clientssl] authenticate <once | always>

Authentication depth

Using this option, you can configure the maximum number of certificates

that can be traversed in the client certificate chain. The default value is nine.

If a longer chain is provided, and the client has not been authenticated

within this number of traversals, client certificate verification fails.

To configure authentication depth using the Configuration

utility

1. In the navigation pane, click Proxies.

2. Click the Add button.

3. In the Client Authenticate Depth box, type a whole number.

4. Click Done.

To configure authentication depth from the command line

To configure authentication depth from the command line, use the

authenticate depth argument with the bigpipe proxy command, as follows:

b proxy <ip>:<service> [clientssl] authenticate depth <num>

Inserting headers into HTTP requests

You can configure the SSL proxy to insert several kinds of headers into an

HTTP client request. They are:

• A custom HTTP header

• Cipher specification

1 2 ... 170 171 172 173 174 175 176 177 178 179 180 ... 425 426

Keine Kommentare

Dell 3-DNS Spezifikationen Seite 175