Cisco 11503 - CSS Content Services Switch Configuration Manual page 119

Chapter 4 Configuring SSL Termination
•
•
•
•
For example, to specify URL rewrite 22 for www.mydomain.com using port 444
for SSL traffic and port 81 for clear text, enter:
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 urlrewrite 22
www.mydomain.com sslport 444 clearport 81
To remove URL rewrite rule 22, enter:
(config-ssl-proxy-list[ssl_list1])# no ssl-server 20 urlrewrite 22
For example, for the HTTP URLs www.sales.acme.com and
www.services.acme.com, you could include the wildcard asterisk (*) character as
follows to match on the two URLs (keeping the default of port 443 for the SSL
port and port 80 for the clear text port):
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 urlrewrite 1
*.acme.com
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 urlrewrite 2
*.acme.com
Or, you could include the wildcard asterisk (*) character for the HTTP URLs
www.acmesales.com and www.acmeservices.com as follows:
OL-5655-01
urlrewrite number - The number of the URL rewrite rule to be added to the
virtual SSL server. Enter a value from 1 to 32 corresponding to the URL
rewrite rule. You can add a maximum of 32 URL rewrite rules to each SSL
server for handling HTTP to HTTPS redirects.
hostname - The domain name of the URL to be redirected (for example,
www.mydomain.com). Enter an unquoted text string with a maximum length
of 240 characters that corresponds to the domain name of the URL rewrite
host. Do not include the directory path as part of the hostname. If you intend
to use wildcards in domain names to identify and match on more than one
host in a single domain, insert an asterisk (*) wild card character in the
domain name.
sslport port - (Optional) Specifies the port used for SSL network traffic.
Enter a TCP port number that corresponds with an SSL content rule, which
uses the specified TCP port number. The SSL module rewrites an HTTP
redirect matching the URL redirect rule with the specified SSL port (or
default port 443 if no port number is specified). Enter a port value from 1 to
65535. The default value is 443.
clearport port - (Optional) Specifies the port used for clear text network
traffic. The SSL module matches redirects in the Location Response-Header
field with the specified clear text port (or default port 80 if no port number is
specified). Enter a port value from 1 to 65535. The default value is 80.
Cisco Content Services Switch SSL Configuration Guide
Configuring Virtual SSL Servers for an SSL Proxy List
4-37