Radware Alteon Application Manual page 353

3. Define the Trusted CA used to authenticate the client's certificate by importing its certificate to
Alteon.
a. Import a Trusted CA Certificate into the certificate repository. For details on importing a
Trusted CA Certificate, see the section on the
Alteon Application Switch Operating System Command Reference.
b. Optionally, you can define a group of Trusted CA certificates. For details on defining a
Trusted CA Certificate group, see the section on the
in the Alteon Application Switch Operating System Command Reference.
4. Define the client authentication policy.
>> Main#/cfg/slb/ssl/authpol Cauth
>> Client Authentication Policy Cauth# trustca
<cert|group> <cert/group ID>
>> Client Authentication Policy Cauth# ena
>> Client Authentication Policy Cauth# validity
>> Client Authentication Policy clientauth
Validation# method ocsp
For details on defining additional client authentication policy parameters, see the section on the
/cfg/slb/ssl/authpol
Reference.
5. Associate the defined client authenticating policy to the SSL policy used in the HTTPS service.
>> Main# /cfg/slb/ssl/sslpol myPol
>> SSL Policy myPol# authpol Cauth
6. Enable DAM or configure proxy IP addresses and enable proxy on the client port.
Example 6: Configuring a Clear-text HTTP Service with Back-end Encryption
1. Before you can configure an SSL offloading service, ensure that Alteon is configured for basic
SLB, as follows:
— Assign an IP address to each of the real servers in the server pool.
— Define an IP interface.
— Define each real server.
— Assign servers to real server groups.
— Enable SLB.
— Define a server port and client port.
— Define a virtual server.
For more information on how to configure Alteon for SLB, see
2. Define the SSL policy which will govern the SSL offloading behavior:
Document ID: RDWR-ALOS-V2900_AG1302
Alteon Application Switch Operating System Application Guide
/cfg/slb/ssl/certs/import
menu in the Alteon Application Switch Operating System Command
Offloading SSL Encryption and Authentication
/cfg/slb/ssl/certs/group
(Define an ID to identify the client
authentication policy. The ID may
be alphanumeric or numeric.)
(Select the trust CA certificate or
group to be used)
(Enable the policy)
(Optionally, switch to the Validity
menu and set the certificate
validation method to OCSP)
(Enter the defined SSL policy)
(Associate the defined client
Authentication Policy)
Server Load Balancing, page
menu in the
menu
165.
353