Table 2-3 Ssl Termination Proxy List Quick Start - Cisco 11503 - CSS Content Services Switch Configuration Manual

Chapter 2 SSL Configuration Quick Starts
Table 2-3
Task and Command Example
1.
2.
3.
4.
5.
6.
7.
OL-5655-01
SSL Termination Proxy List Quick Start
Create the SSL proxy list.
(config)# ssl-proxy-list ssl_list1
Create ssl-list <ssl_list1>, [y/n]: y
Once you create an SSL proxy list, the CLI enters into ssl-proxy-list
configuration mode for the newly created SSL proxy list.
(config-ssl-proxy-list[ssl_list1])#
Specify a number to identify a virtual SSL server in the SSL proxy list.
(config-ssl-proxy-list[ssl_list1])# ssl-server 20
Specify a virtual IP (VIP) address. Enter a VIP address that corresponds to
an SSL content rule.
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 vip address
192.168.3.6
(Optional) Specify the virtual TCP port number if you need to change it to
correspond with the content rule. By default, the virtual TCP port number
is 443.
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 port 444
Specify the name of an existing RSA certificate association and RSA key
pair association for the SSL proxy list virtual SSL server.
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 rsacert
myrsacert1
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 rsakey
myrsakey1
Assign the appropriate cipher suite for the RSA certificates and keys in use,
the IP address of the back-end content rule used for the cipher suite, and the
TCP port of the back-end content rule.
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 cipher
rsa-export-with-rc4-40-md5 192.168.3.6 8080 weight 5
(Optional) Specify the URL rewrite option for the domain name of the URL
to be redirected to avoid nonsecure HTTP 300-series redirects.
(config-ssl-proxy-list[ssl_list1])# ssl-server 20 urlrewrite 22
www.mydomain.com
Cisco Content Services Switch SSL Configuration Guide
2-7