Nortel 3050 Command Reference Manual page 91

Table 22
SSL Server Configuration Menu Options (/cfg/ssl/server) (cont'd.)
Command Syntax and Usage
port <TCP port number>
rip <real server IP address>
rport <TCP port number>
Copyright © 2007 Nortel Networks
.
/cfg/ssl/server <id> SSL Server Configuration 91
Sets the TCP port number to which the virtual SSL server listens. The
default is port 443 for all virtual SSL servers.
When using the VPN Gateway for SSL Acceleration, the port setting
on the VPN Gateway must be accompanied by a redirect filter (on the
Nortel Application Switch) in which the dport value corresponds to the
port value (on the VPN Gateway).
Sets the IP address of the real server to which the virtual SSL server
should connect when initiating requests.
When using the VPN Gateway in conjunction with an Nortel Application
Switch, the real server IP address (RIP) should be the set to 0.0.0.0
(the default setting). This setting instructs the VPN Gateway to use the
destination IP address found in the received packets, when initiating
requests to the virtual server on the Nortel Application Switch to which
the virtual SSL server has been mapped.
When using the VPN Gateway as a stand-alone web server accelerator,
without any interoperability with an Nortel Application Switch, the real
server IP address (RIP) should be set to the IP address of the (single)
server that the NVG offloads.
If you have enabled the built-in load balancing capabilities of the
VPN Gateway, the rip command is unavailable. Instead, the IP
address for each load balanced real server is specified using the
/cfg/ssl/server #/adv/loadbalanc/backend #/ip command.
Sets the TCP port to which the virtual SSL server connects. The default
rport value for all virtual SSL servers that are created is 81. If you are
setting up your VPN Gateway as a web server accelerator, the NVG
will use this port to send and receive decrypted HTTP information to
and from the real web servers. Note that both the virtual server (on the
Nortel Application Switch) and the real servers must also be configured
to listen for NVG traffic on port 81.
When using the VPN Gateway as a stand-alone web server accelerator
(of a single real web server) in combination with end to end encryption,
the rport value should be set to 443. The real web server must also
be configured to listen to TCP port 443.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007