Secure communication is terminated and regenerated at the load balancer before forwarding a request to the Distributed Authentication User Interface.
Access https://is-f5.example.com, the BIG-IP load balancer login page, in a web browser.
Log in using the following information:
username
password
Click Configure your BIG-IP using the Configuration Utility.
In the left pane, click Proxies.
Under the Proxies tab, click Add.
In the Add Proxy dialog, provide the following information:
Check SSL and ServerSSL.
The IP address of Load Balancer 3.
1443
The secure port number
The IP address of Load Balancer 3.
9443
The secure port number
Choose Local Virtual Server.
Choose lb-3.example.com.
Choose lb-3.example.com.
Check this box.
Click Next.
The Insert HTTP Header String page is displayed.
Choose Matching for Rewrite Redirects.
Click Next.
The Client Cipher List String page is displayed.
Accept the defaults and click Next.
The Server Chain File page is displayed.
Select OpenSSL_CA_Cert.crt from the drop-down list.
Click Done.
The new proxy server is now added to the Proxy Server list.
Log out of the load balancer console.
Access https://lb-3.example.com:1443/index.html from a web browser to verify the configuration.
A message may be displayed indicating that the browser doesn't recognize the certificate issuer. If this happens, install the CA root certificate in the browser so that the browser recognizes the certificate issuer. See your browser's online help system for information on installing a root CA certificate.
Close the browser.