cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
360
Views
0
Helpful
2
Replies

Address consolidation

rich.polyak
Level 1
Level 1

Good afternoon, I think I know my answer but I'm hoping somebody has something up there sleave that can assist me.

The Problem is this,

I currently have a pair of 11506 without the SSL license hosting like 35 ssl sites utilizing layer 3 rules.

The certificates are terminated on the individual web servers.

The Application folks are asking if the CSS's can consolidate the VIP addresses via layer 5 rules? For they are needing approx another 10 to 15 more ssl sites?

What I'm looking for are what are my options?

I know I could do this if I terminated certs on the CSS's, but is there another way to do this without terminating the certs on the CSS's?

If I utilized redirects to ssl would this work? or will this work for only non inital ssl requests?

any help would be helpful.

Thx

-Rich

2 Replies 2

Gilles Dufour
Cisco Employee
Cisco Employee

you simply can't do anything else than L3 rule with SSL traffic unless you terminate SSL on the device.

This is true for any loadbalancers.

Gilles.

Gilles,

This is what I thought, but I just wanted to double check.

Thx

-Rich