Chapter 2
SSL Configuration Quick Starts
Back-End SSL Service and Content Rule Quick Start
OL-5655-01
The following running-configuration example shows the results of entering the
commands in
Table
2-6.
!************************** SERVICE **************************
service ssl-serv1
type ssl-accel
slot 3
keepalive type none
add ssl-proxy-list ssl_list1
active
!*************************** OWNER ***************************
owner ssl_owner
content ssl_rule1
protocol tcp
vip address 192.168.3.6
port 444
application ssl
advanced-balance ssl
add service ssl-serv1
active
If you configured a back-end SSL server entry in an SSL proxy list,
provides an overview of the steps required to create an SSL service for a back-end
SSL server, including adding the SSL proxy list to the service and creating an SSL
content rule.
Table 2-7
Back-End SSL Service and Content Rule Quick Start
Task and Command Example
Create an SSL service.
1.
(config)# service ssl_serv2
Create service <ssl_serv2>, [y/n]: y
Specify ssl-accel-backend as the service type.
2.
(config-service[ssl_serv2])# type ssl-accel-backend
Configure a virtual IP (VIP) address for the back-end server. The IP address
3.
must match the IP address configured for the back-end server.
(config-service[ssl_serv2])# vip address 192.168.4.4
Cisco Content Services Switch SSL Configuration Guide
Table 2-7
2-15