Chapter 6 Configuring SSL Initiation
Configuring a Service for SSL Initiation
6-26
Cisco Content Services Switch SSL Configuration Guide
OL-5655-01
Adding an SSL Proxy List to an SSL Initiation Service
After you configure an SSL proxy list for an SSL initiation server, add the active
list to one or more SSL initiation services to define how the CSS processes SSL
requests for content from an SSL initiation back-end server. Configuring the SSL
initiation service is similar to configuring a local service except that you must set
the service type to ssl-init. Also, an SSL initiation service requires an SSL proxy
list with a back-end server entry.
An SSL proxy list contains the parameters for the SSL initiation service. To add
the proxy list to the service, use the add ssl-proxy-list command. For more
information on configuring an SSL proxy list for SSL initiation, see the “Creating
an SSL Initiation Proxy List” section.
Enter the name of the previously created SSL proxy list (see the “Creating an SSL
Initiation Proxy List” section) that you want to add to the service.
For example, to add the SSL proxy list ssl_list1 for an SSL initiation service,
enter:
(config-service[ssl_serv1])# add ssl-proxy-list ssl_list1
To remove an SSL proxy list for the SSL initiation service, enter:
(config-service[ssl_serv1])# remove ssl-proxy-list ssl_list1
Specifying the SSL Module Slot
The CSS 11501 supports a single integrated SSL module. The CSS 11503 and
CSS 11506 support multiple SSL modules; a maximum of two in a CSS 11503
and a maximum of four in a CSS 11506. The SSL service requires the SSL module
slot number to correlate the SSL proxy list and virtual SSL server(s) to a specific
SSL module. Use the slot command to specify the slot in the CSS chassis where
the SSL module is located.
The valid slot entries are:
• CSS 11501 - 2
• CSS 11503 - 2 and 3
• CSS 11506 - 2 to 6
Slot 1 is reserved for the SCM.
To Next Page
Loading...
Need help?
General
