Radware Alteon Application Manual page 348

Alteon Application Switch Operating System Application Guide
Offloading SSL Encryption and Authentication
2. Define the SSL policy which will govern the SSL offloading behavior:
>> Main# /cfg/slb/ssl/sslpol myPol
>> SSL Policy myPol# cipher rsa
>> SSL Policy myPol# bessl enabled
>> SSL Policy myPol# becipher low
>> SSL Policy myPol# ena
For details on defining additional SSL policy parameters, see the section on the
menu in the Alteon Application Switch Operating System Command Reference.
sslpol
3. Define a server certificate for this service:
— Import a third-party signed server certificate. For details on configuring the certificate
repository, see the section on the
Switch Operating System Command Reference.
— Alternatively, generate a self-signed server certificate, as shown in the following example:
>> Main# /cfg/slb/ssl/certs/srvrcert MyCert
>> Server certificate MyCert# generate
This operation will generate a self-signed server certificate.
Enter key size [512|1024|2048|4096] | [1024]:
Enter server certificate hash algorithm [md5|sha1|sha256|sha384|sha512] |
[sha1]: sha256
Enter certificate Common Name (e.g. your site's name):
Use certificate default values? [y/n]: [y/n]: y
Enter certificate validation period in days (1-3650) [365]:
Self signed server certificate, certificate signing request and key pair added.
4. Globally enable SSL.
>> Main# /cfg/slb/ssl/on
348
/cfg/slb/ssl/certs
Document ID: RDWR-ALOS-V2900_AG1302
(Define an ID to identify the SSL
Policy. The ID may be
alphanumeric or numeric.)
(Select the cipher suite to use
during SSL handshake. By
default, the RSA cipher suite is
selected. Radware recommends
using the PCI-DSS pre-configured
cipher suite for enhanced SSL
security.)
(Enable back-end SSL)
(Set the cipher to be used for
back-end connections)
(Enable the policy)
/cfg/slb/ssl/
menu in the Alteon Application
www.mysite.com