Working in the CLI
Cluster 'proto'
Flag
Description
spoof
Disables Source NAT (SNAT) -- the client IP address is
used as the source IP in packets sent to servers.
http and https
abort_server
Close server connections without waiting.
always
Always insert a cookie into server responses.
client_ip
Include the client IP address in headers.
compress
Compress server responses.(Not valid for E250GX)
ignore_case
Do not consider case when evaluating a match rule.
no_header_rewrite
Do not rewrite Location headers in server responses.
once_only
Evaluate the first set of headers in a client connection
only.
persist
Insert a cookie in server responses if the server did not.
spoof
Use the client IP as source IP in packets sent to servers.
tcp_mux
Enables TCP multiplexing for a cluster. TCP multiplexing
must also be enabled on at least one server instance in the
server pool assigned to the cluster (or one of its match
rules). See the section.
https only
allow_sslv2
Enable SSLv2 for client connections.
allow_sslv3
Enable SSLv3 for client connections. This option is
enabled by default.
push_client_cert
Send the entire client certificate to the back-end server.
This allows the server to confirm that the client
connection is authenticated without having to do a
complete SSL renegotiation.
require_client_cert
Require that clients present certificates.
174
Copyright © 2014 Coyote Point Systems, A Subsidiary of Fortinet, Inc.
Summary of Contents for Equalizer GX Series
Page 18: ......
Page 32: ...Overview 32 Copyright 2014 Coyote Point Systems A Subsidiary of Fortinet Inc ...
Page 42: ......
Page 52: ......
Page 64: ......
Page 72: ......
Page 76: ......
Page 228: ......
Page 238: ......
Page 476: ......
Page 492: ......
Page 530: ......
Page 614: ......
Page 626: ......
Page 638: ......
Page 678: ......
Page 732: ...Using SNMP Traps 732 Copyright 2014 Coyote Point Systems A Subsidiary of Fortinet Inc ...
Page 754: ......
Page 790: ......
Page 804: ......
Page 842: ......
Page 866: ......