Creating A Back-End Server In An Ssl Initiation Proxy List; Configuring The Back-End Server As An Ssl Initiation Server - Cisco 11503 - CSS Content Services Switch Configuration Manual

Configuring Back-End SSL Servers in an SSL Initiation Proxy List

Creating a Back-End Server in an SSL Initiation Proxy List

Configuring the Back-End Server as an SSL Initiation Server

Cisco Content Services Switch SSL Configuration Guide
6-6
Before you can configure SSL initiation proxy list parameters, you must create a
back-end server in an SSL proxy list. To create a back-end server in the SSL proxy
list, use the backend-server number command. By default, this command creates
a back-end server of type backend-ssl and assigns it a number (index entry you
enter) in the SSL proxy list that you use to configure specific SSL parameters
associated with the back-end SSL server (for example, IP address, certificate
name, and key pair). Enter a value from 1 to 256.
For example, to create back-end server 1 in the proxy list, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1
To remove back-end server 1 and all its configured parameters from proxy list
ssl_list1, enter:
(config-ssl-proxy-list[ssl_list1])# no backend-server 1
To use the back-end server for SSL initiation, you must configure it as an
initiation server for use with services of type ssl-init. By default, the back-end
server is a server of type backend-ssl for use with services of type
ssl-accel-backend.
To configure the back-end server as an initiation server (accepts clear traffic from
a client and initiates SSL traffic with the SSL server) for use with services of type
ssl-init, use the backend-server number type command. The syntax for this
command is:
backend-server number type {backend-ssl|initiation}
For example, to configure back-end server 1 as an SSL initiation server in proxy
list ssl_list1, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 type initiation
To reconfigure the SSL initiation server as a back-end SSL server without having
to configure all the back-end server parameters, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 type backend-ssl
Chapter 6 Configuring SSL Initiation
OL-5655-01