Novell ACCESS MANAGER 3.1 SP1 - GATEWAY GUIDE Manual page 156

Figure 6-3
DNS Names:
test.company.com
sales.company.com
apps.company.com
Domain-based multi-homing has the following characteristics:
If you are using SSL, the back-end servers can all listen on the same SSL port (default for
HTTPS is 443).
If you are using SSL, the back-end servers can share the same SSL certificate. Instead of using
a specific hostname in the SSL certificate, the certificate can use a wildcard name such as
*.company.com, which matches all the servers.
Before configuring the Access Gateway, you need to complete the following:
Create the published DNS names with a common domain name for public access to the back-
end resources. For example, the table below lists three DNS names that use company.com as a
common domain name and then lists the IP address that these DNS names resolve to and the
Web servers they protect.
Published DNS Name
test.company.com
sales.company.com
apps.company.com
Configure your DNS server to resolve the published DNS names to the IP address of the
Access Gateway.
Set up the back-end Web servers.
156 Novell Access Manager 3.1 SP1 Access Gateway Guide
Using a Base Domain Name with Host Names
Firewall
Access Gateway
IP Address:
10.10.195.90:80
Access Gateway
IP Address
10.10.195.90:80
10.10.195.90:80
10.10.195.90:80
1 2 3
test1.com
test2.com
test3.com
4 5
sales4.com
sales5.com
6 7 8
apps6.com
apps7.com
apps8.com
Web Server Web Server
Host Name IP Address
test.internal.com 10.10.15.10
sales.internal.com 10.10.15.20
apps.internal.com 10.10.15.30