SSL VPN
Reply
Contributor
mshafi@abc.com.qa
Posts: 25
Registered: ‎04-29-2010
0

MAG Device certificate

Hi All,

 

 

I have active/passive MAG cluster setup .  I am about to generate a CSR , now bit confused how to handle this tasks in a cluster setup. I searched many documents but not mentioned this part. My doubt is do i need to configure the cluster first and generate CSR or  CSR from individual unit ?

 

 

Regards,

Shafi.

Moderator
zanyterp
Posts: 2,276
Registered: ‎11-19-2007
0

Re: MAG Device certificate

Either way is fine and will get you a cert successfully that you can use
Recognized Expert
jayLaiz
Posts: 416
Registered: ‎11-25-2009
0

Re: MAG Device certificate

Hi Shafi,

 

In a cluster, the configuration is synchronsised between the nodes so you will need to create only one CSR request for the FQDN that your DNS resolves to the cluster VIP and that device certificate needs to ba assigned to the cluster VIP

 

You can generate the CSR after creating the cluster

 

Regards,

Jay

 

 

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.