Regarding VIP creation in ACE with SSL

[vrathod786]

Hi,

I am relatively new to the ACE environment.

There is a task for me to loadbalance 4 servers, with end to end ssl termination with it. they want to create a secure vip using ssl.

can anyone help me creating that vip. The loadbalancing part i can do it. But my question is that how do we create the key and certificate for the vip if we already have the cypto chaingroup in the loadbalancer .

Thanks.

[catterad77]

Hi Vikram,

Not entirely sure what you mean, by you already have the crypto chain group in your loadbalancer. As I thought you needed the certs on the ACE before a valid chaingroup can be created.  Anyway , I followed the below doco to get SSL working on my loadbalancers.

http://www.cisco.com/en/US/docs/app_ntwk_services/data_center_app_services/ace_appliances/vA1_7_/configuration/ssl/guide/sllgd.html

If you don't already have any certs then you can follow the above doco to create them.

Hope it helps

David