Figure 8-6 Full Proxy Configuration Using A Single Ssl Module - Cisco 11503 - CSS Content Services Switch Configuration Manual

Figure 8-6
Source = 172.16.6.58
Destination = 192.168.5.5
VIP = 192.168.5.5
Source = 192.168.7.200
Destination = 192.168.7.1
!*************************** GLOBAL ***************************
deye2gtcld1b6feeeebabfcfagyezc5f /
Cisco Content Services Switch SSL Configuration Guide
8-18
Full Proxy Configuration Using a Single SSL Module
Client A
Internet
Layer 5 ssl-rule
Layer 5 http-rule
ServerABC
192.168.7.1
logging commands enable
ssl associate dsakey dsakey dsakey.pem
ssl associate dhparams dhparams dhparams.pem
ssl associate rsakey rsakey rsakey.pem
ssl associate cert rsacert rsacert.pem
ftp-record ssl_record 161.44.174.127 anonymous des-password
Chapter 8
Client IP address
172.16.6.58
Source group
ssl_module_proxy
translates IP 172.16.6.58
to VIP 192.168.7.200
Acceleration
Module 1
ServerDEF ServerGHI
192.168.7.2 192.168.7.3
Examples of CSS SSL Configurations
SSL
CSS 11506
Ethernet
connection
OL-5655-01