Chapter 6
Configuring SSL Initiation
Configuring an IP Address for the SSL Initiation Server
Note
Configuring a Port for the SSL Initiation Server
Note
OL-5655-01
To configure an IP address for the SSL initiation server, use the backend-server
number ip address command. The IP address corresponds to the IP address of the
SSL initiation service.
For example, to configure the IP address 192.168.2.3 for SSL initiation back-end
server 1, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 ip address
192.168.2.3
To remove the IP address from SSL initiation server 1, enter:
(config-ssl-proxy-list[ssl_list1])# no backend-server 1 ip address
If you have not configured the SSL initiation back-end server IP address when you
issue the active command, the following error message appears and the CSS does
not activate the list.
%% Error in backend-server 1: SSL-server/Backend-server must have valid
IP address
By default, the port for the SSL initiation back-end server is port 80. This port
accepts the clear text data traffic from the SSL initiation service and sends it to
the SSL module. To configure a different port for the SSL initiation server, use the
backend-server number port command. Enter a port number from 1 to 65535.
If you configure the backend-server number ip address and server-ip commands
with the same address, configure the backend-server number port and
server-port commands with different port numbers.
For example, to configure a port number of 1200, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 port 1200
Configuring Back-End SSL Servers in an SSL Initiation Proxy List
Cisco Content Services Switch SSL Configuration Guide
6-7