6-7
Cisco Content Services Switch SSL Configuration Guide
OL-5655-01
Chapter 6 Configuring SSL Initiation
Configuring Back-End SSL Servers in an SSL Initiation Proxy List
Configuring an IP Address for the SSL Initiation Server
To configure an IP address for the SSL initiation server, use the backend-server
number ip address command. The IP address corresponds to the IP address of the
SSL initiation service.
For example, to configure the IP address 192.168.2.3 for SSL initiation back-end
server 1, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 ip address
192.168.2.3
To remove the IP address from SSL initiation server 1, enter:
(config-ssl-proxy-list[ssl_list1])# no backend-server 1 ip address
Note If you have not configured the SSL initiation back-end server IP address when you
issue the active command, the following error message appears and the CSS does
not activate the list.
%% Error in backend-server 1: SSL-server/Backend-server must have valid
IP address
Configuring a Port for the SSL Initiation Server
By default, the port for the SSL initiation back-end server is port 80. This port
accepts the clear text data traffic from the SSL initiation service and sends it to
the SSL module. To configure a different port for the SSL initiation server, use the
backend-server number port command. Enter a port number from 1 to 65535.
Note If you configure the backend-server number ip address and server-ip commands
with the same address, configure the backend-server number port and
server-port commands with different port numbers.
For example, to configure a port number of 1200, enter:
(config-ssl-proxy-list[ssl_list1])# backend-server 1 port 1200