Radware Alteon Application Manual page 344

Alteon Application Switch Operating System Application Guide
Offloading SSL Encryption and Authentication
— Assign servers to real server groups.
— Enable SLB.
— Define server port and client port.
— Define virtual server
For more information on how to configure Alteon for SLB, see
2. Define the SSL Policy which will govern the SSL offloading behavior.
>> Main# /cfg/slb/ssl/sslpol myPol
>> SSL Policy myPol# cipher high
>> SSL Policy myPol# ena
For details on defining additional SSL policy parameters, see the section on the
menu in the Alteon Application Switch Operating System Command Reference.
sslpol
3. Define a server certificate for this service:
— Import a third-party signed server certificate. For details on configuring the certificate
repository, see the section on the
Switch Operating System Command Reference.
— Alternatively, generate a self-signed server certificate, as shown in the following example:
>> Main# /cfg/slb/ssl/certs/srvrcert MyCert
>> Server certificate MyCert# generate
This operation will generate a self-signed server certificate.
Enter key size [512|1024|2048|4096] | [1024]:
Enter server certificate hash algorithm [md5|sha1|sha256|sha384|sha512] |
[sha1]: sha256
Enter certificate Common Name (e.g. your site's name):
Use certificate default values? [y/n]: [y/n]: y
Enter certificate validation period in days (1-3650) [365]:
Self signed server certificate, certificate signing request and key pair added.
4. Globally enable SSL.
>> Main# /cfg/slb/ssl/on
5. Set the HTTPS virtual service to be used in the defined virtual server.
344
/cfg/slb/ssl/certs
Document ID: RDWR-ALOS-V2900_AG1302
Server Load Balancing, page
(Define an ID to identify the SSL
Policy. The ID may be
alphanumeric or numeric.)
(Select the cipher suite to use
during SSL handshake. By
default, the RSA cipher suite is
selected. Radware recommends
using the PCI-DSS pre-configured
cipher suite for enhanced SSL
security.)
(Enable the policy)
/cfg/slb/ssl/
menu in the Alteon Application
www.mysite.com
165.