3.2. Device Trust

A mesh of F5 DNS servers need to exchange keys to establish a trusted mechanism for HA communications.

../../_images/establish_trust.png

Launch Web Shell to Site A DNS

../../_images/dns_sitea_web_shell.png

Run the following command:

Enter ‘yes’ for any connectivity prompts. When prompted for a password use “F5demo!!”.

TMSH

bigip_add

../../_images/bigip_add.png

The ‘bigip_add’ command pulls the management certificate from the destination BIGIP devices for use during the encrypted iQuery channel setup between GSLB servers in the cluster. When running ‘bigip_add’ without any options, the command will be run against all BIGIP devices in the GSLB Server list using current username to connect to the endpoints. You can specifiy a connection username or endpoint IP(s) if needed.

bigip_add <user>@<endpoint_IP>
bigip_add <endpoint_IP>
bigip_add <endpoint_IP1> <endpoint_IP2>

Navigate to: DNS ›› GSLB : Servers : Trusted Server Certificates

../../_images/gslb_dataceter_servers_trusted_certificates.png