Cisco Systems 6500 Switch User Manual


 
2-57
Catalyst 6500 Series Switch SSL Services Module Command Reference
OL-9105-01
Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module
service client
Table 2-9 lists the commands that are available in proxy-client configuration submode.
Both secured mode and bridge mode between the Content Switching Module (CSM) and the SSL
Services Module are supported.
Use the secondary keyword (optional) for the bridge-mode topology.
Table 2-9 Proxy-client Configuration Submode Command Descriptions
Syntax Description
certificate rsa general-purpose trustpoint
trustpoint-name
Configures the certificate with RSA general-purpose keys and associates a
trustpoint to the certificate.
default {certificate | inservice | nat | server |
virtual}
Sets a command to its default settings.
description Allows you to enter a description for the proxy service.
exit Exits from proxy-client configuration submode.
help Provides a description of the interactive help system.
inservice Declares a proxy client as administratively up.
nat {server | client natpool-name} Specifies the usage of either server NAT or client NAT for the server-side
connection that is opened by the SSL Services Module.
policy health-probe tcp policy-name Applies a TCP health probe policy to a proxy server.
policy http-header policy-name Applies an HTTP header insertion policy to a proxy server.
policy urlrewrite policy-name Applies a URL rewrite policy to the proxy server.
server ipaddr ip-addr protocol protocol
port portno [sslv2]
Defines the IP address of the target server for the proxy server. You can also
specify the port number and the transport protocol. The target IP address can
be a virtual IP address of an SLB device or a real IP address of a web server.
The sslv2 keyword enables SSL version 2.
server policy tcp
server-side-tcp-policy-name
Applies a TCP policy to the server side of a proxy server. You can specify the
port number and the transport protocol.
virtual ipaddr ip-addr protocol protocol
port portno [secondary]
Defines the IP address of the target server for the proxy server. You can also
specify the port number and the transport protocol. The target IP address can
be a virtual IP address of an SLB device or a real IP address of a web server.
virtual policy ssl ssl-policy-name Applies an SSL policy with the client side of a proxy server.
virtual policy tcp
client-side-tcp-policy-name
Applies a TCP policy to the client side of a proxy server.
vlan vlan Virtual Service VLAN configuration.