Cisco 11503 - CSS Content Services Switch

Chapter 2 SSL Configuration Quick Starts
2-20
Cisco Content Services Switch SSL Configuration Guide
OL-5655-01
SSL Initiation Content Rule Quick Start
If you configured an SSL initiation server entry in an SSL proxy list, Table 2-9
provides an overview of the steps required to create an SSL content rule for an
SSL initiation server.
Table 2-9 SSL Initiation Content Rule Quick Start
1.
If necessary, create an owner.
(config)# owner ssl_owner
Create owner <ssl_owner>, [y/n]: y
2. Add the SSL initiation back-end server to an SSL content rule.
(config)# owner ssl_owner
(config-owner[ssl_owner])# content ssl_init_rule1
Create content <ssl_init_rule1>, [y/n]: y
3. Configure a virtual IP (VIP) address or domain name for the content rule.
(config-owner-content[ssl_backend_rule1]# vip address 192.168.2.3
4. Specify a TCP port number for the content rule.
(config-owner-content[ssl_backend_rule1]# port 80
5. (Optional) Enter the url command set to /* to use stickiness based on the
cookie.
(config-owner-content[ssl_backend_rule1])# url “/*”
6. (Optional) Enter the advanced-balance arrowpoint-cookie command to
enable the content rule to be sticky based on an arrowpoint cookie.
(config-owner-content[ssl_backend_rule1])# advanced-balance
arrowpoint-cookie
7. Add the SSL service to the content rule.
(config-owner-content[ssl_backend_rule1])# add service ssl_serv2
8. Activate the content rule.
(config-owner-content[ssl_backend_rule1])# active
9. Save your configuration changes to the running configuration.
# copy running-config startup-config