
First Time Configuration Using EQ OS 10
eqcli > certificate ct01
eqcli-cert> certfile ftp://10.0.0.21/certfile.pem
eqcli-cert> keyfile ftp://10.0.0.21/keyfile.pem
If you want to cut and paste the certificate and key using an editor, use commands like the
following:
eqcli > certificate ct01 certfile edit
eqcli > certificate ct01 keyfile edit
Certificates and keys must be downloaded separately, in PEM format. If a chain of
certificates and keys must be uploaded, ensure that all the certificates are in one file and all
the private keys are in another.
16. Create a Layer 7 HTTPS cluster using server pool sp02 and associate certificate ct01 with the cluster:
eqcli > cluster cl03 proto https ip 172.16.0.203 port 443 srvpool sp01
certificate ct01
17. Create a Layer 7 HTTP cluster -- do not specify a server pool, since this cluster will be used only to redirect
clients to cl03:
eqcli > cluster cl04 proto http ip 172.16.0.203 port 80
18. Add a sorry responder that will be used to display a web page that asks the user to try again later:
eqcli > resp Sorrycl01 type sorry html edit
An editor is launched so that you can enter the HTML for the responder page. For example,
you can enter Once you are done, type <Esc><Enter> and then <Enter> to save the HTML you
entered.
19. Add the responder created in the previous step to cluster cl01:
eqcli > cluster cl01 resp Sorrycl01
The effect of adding this responder to cl01 is that if all the servers in server pool sp01 are
unavailable, clients making requests to cluster cl01 will receive an automatic response
asking them to try again later.
54
Copyright © 2013 Coyote Point Systems. A subsidiary of Fortinet, Inc.
Comentarios a estos manuales