Cisco 11503 - CSS Content Services Switch Configuration Manual page 54

Table 2-7
Task and Command Example
4.
5.
6.
7.
8.
9.
10.
Cisco Content Services Switch SSL Configuration Guide
2-16
Back-End SSL Service and Content Rule Quick Start (continued)
(Optional) Configure a virtual port number for the back-end server. The port
number must match the virtual TCP port number configured for the
back-end server. By default, the port number is 80. In this example, the port
number is 8080.
(config-service[ssl_serv2])# port 8080
(Optional) By default, the service keepalive type is ICMP. You can also
configure the keepalive type for a back-end service to be none, TCP, or SSL. If
you configure a TCP or SSL keepalive type, you must configure the keepalive
port correctly for the service to work.
For example, to configure a keepalive type of SSL, enter.
(config-service[ssl_serv2])# keepalive type ssl
Then configure the port for the back-end SSL server. For example, enter:
(config-service[ssl_serv2])# keepalive port 443
Add the SSL proxy list to the SSL service.
(config-service[ssl_serv2])# add ssl-proxy-list ssl_list1
Activate the SSL service.
(config-service[ssl_serv2])# active
Add the back-end server to an SSL content rule.
(config)# owner ssl_owner
(config-owner[ssl_owner])# content ssl_backend_rule1
Create content <ssl_backend_rule1>, [y/n]: y
Configure a virtual IP (VIP) address or domain name for the content rule.
Ensure that the VIP address for the content rule is the same as the address
specified for the virtual SSL server.
(config-owner-content[ssl_backend_rule1]# vip address 192.168.3.6
Specify a TCP port number for the content rule. Ensure the port number is
the same as the virtual TCP port specified for the back-end SSL entry in the
SSL proxy list.
(config-owner-content[ssl_backend_rule1]# port 8080
Chapter 2 SSL Configuration Quick Starts
OL-5655-01