Nortel 3050 Command Reference Manual page 117

Table 29
Rewrite Menu Options (/cfg/ssl/server/http/rewrite)
Command Syntax and Usage
rewrite on|off
ciphers <cipher list>
response iSD|WebServer
Copyright © 2007 Nortel Networks
.
/cfg/ssl/server <id> /http/rewrite HTTP Rewrite Configuration 117
Enables or disables the rewrite functionality for the current virtual SSL
server. When you enable the rewrite functionality, a customized error
message can be sent back to the client's web browser in case the browser
is unable to perform the required cipher strength. If the rewrite functionality
is not enabled in such a scenario, the client request is simply rejected
during the SSL handshake. For more information about how to configure
an SSL server to use the rewrite functionality, see the "Configuring the
NVG to Rewrite Client Requests" chapter in the Application Guide for SSL
Acceleration.
The default rewrite setting is off.
Lets you change the cipher list used when the SSL rewrite function is
enabled. The default cipher list used when the rewrite function is not
enabled corresponds to ALL@STRENGTH.
When the rewrite function is enabled, the default rewrite cipher list is
HIGH:MEDIUM.
If you change the default rewrite cipher list from HIGH:MEDIUM when
having the rewrite function enabled, remember that the rewrite cipher
strength must always be higher than the cipher strength specified by using
the /cfg/ssl/server #/ssl/ciphers command (where the default
cipher list is ALL@STRENGTH).
For more information about supported ciphers and cipher list formats, see
Appendix A, Supported Ciphers, in the User's Guide.
Specifies whether the iSD (VPN Gateway) or a web server should handle
the response message sent back to the client. When response is set to
WebServer, use the URI command to point to a resource on a web server
that can provide a customized error message.
The default response setting is iSD.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007