Forum Discussion

Amit585731's avatar
Amit585731
Icon for Nimbostratus rankNimbostratus
May 14, 2016

Mutual Authentication

Hi All,

 

We have multiple VIPs in our environment where we have mutual authentication configured. At time we face issue where some of the cert at server side gets changed and we need to take tcpdump to figure out correct cert. But at time I have seen issue where we take wireshark and instead of seeing 'client hello' after 'ack' we just keep on seeing 'psh, ack'. Below is the command I use to take capture:

 

tcpdump -vnni 0.0 -s0 host 1.1.1.1 -w /var/tmp test.pcap

 

Is there anything I am missing? I am using f5 plugin as well.

 

Thanks.

 

application delivery
LTM
tcpdump
wireshark

1 Reply

Sort By
  • Kevin_Stewart's avatar
    Kevin_Stewart
    Icon for Employee rankEmployee
    May 14, 2016

    Okay, let's clarify a few things. You say "cert at server side", which implies to me that you're sending the client cert all the way through, which also implies that you're not decrypting and re-encrypting at the F5. So if that's the case, what type of persistence do you have configured for the pool members?