
2 - 5
Importing keys and certificates
Once you have obtained a certificate, you can import this certificate into the
BIG-IP LTM system using the Configuration utility. By importing a
certificate or archive into the Configuration utility, you ease the task of
managing that certificate or archive. You can use the Import SSL
Certificates and Keys screen only when the certificate you are importing is
in Privacy Enhanced Mail (PEM) format.
To import a key or certificate
1. On the Main tab, expand Local Traffic.
2. Click SSL Certificates. The list of existing certificates displays.
3. In the upper right corner of the screen, click Import.
4. From the Import Type list, select the type of import (Certificate or
Key).
5. In the Certificate (or Key) Name box, type a unique name for the
certificate or key.
6. In the Certificate (or Key) Source box, choose to either upload the
file or paste the text.
7. Click Import.
8. If you imported the certificate, repeat this procedure for the key.
Creating BIG-IP LTM profiles
The next task is to create the profiles. A profile is an object that contains
user-configurable settings for controlling the behavior of a particular type of
network traffic, such as HTTP connections. Using profiles enhances your
control over managing network traffic, and makes traffic-management tasks
easier and more efficient.
Although it is possible to use the default profiles, we strongly recommend
you create new profiles based on the default parent profiles, even if you do
not change any of the settings initially. Creating new profiles allows you to
easily modify the profile settings specific to this deployment, and ensures
you do not accidentally overwrite the default profile.
Creating an HTTP profile
The first new profile we create is an HTTP profile. The HTTP profile
contains numerous configuration options for how the BIG-IP LTM system
handles HTTP traffic. In this example, we use the
http-lan-optimized-caching parent profile.
To create a new HTTP profile
1. On the Main tab, expand Local Traffic, and then click Profiles.
The HTTP Profiles screen opens.
Kommentare zu diesen Handbüchern