Cisco Systems 6500 manual Related Commands service

Page 89

Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module

show ssl-proxy certificate-history

This example shows how to display the certificate record for a specific proxy service:

ssl-proxy#show ssl-proxy certificate-history service s6 Record 3, Timestamp:00:01:34, 16:37:18 UTC Oct 31 2002

Installed Server Certificate, Index 7 Proxy Service:s6, Trust Point:t10

Key Pair Name:k10, Key Usage:RSA General Purpose, Exportable Time of Key Generation:07:56:43 UTC Oct 11 2002

Subject Name:CN = host1.cisco.com, OID.1.2.840.113549.1.9.2 = simpson5-2-ste.cisco.com, OID.1.2.840.113549.1.9.8 = 207.79.1.9, OID.2.5.4.5 = B0FFF235

Issuer Name:CN = SimpsonTestCA, OU = Simpson Lab, O = Cisco Systems, L = San Jose, ST

=CA, C = US, EA =<16> simpson-pki@cisco.com Serial Number:24BC81B7000100000D85

Validity Start Time:22:38:00 UTC Oct 19 2002

End Time:22:48:00 UTC Oct 19 2003

Renew Time:00:00:00 UTC Jan 1 1970

End of Certificate Record

Record 4, Timestamp:00:01:40, 16:37:23 UTC Oct 31 2002 Deleted Server Certificate, Index 0

Proxy Service:s6, Trust Point:t6

Key Pair Name:k6, Key Usage:RSA General Purpose, Not Exportable Time of Key Generation:00:28:28 UTC Mar 1 1993

Subject Name:CN = host1.cisco.com, OID.1.2.840.113549.1.9.2 = simpson5-2-ste.cisco.com, OID.1.2.840.113549.1.9.8 = 207.79.1.8, OID.2.5.4.5 = B0FFF235

Issuer Name:CN = SimpsonTestCA, OU = Simpson Lab, O = Cisco Systems, L = San Jose, ST

=CA, C = US, EA =<16> simpson-pki@cisco.com Serial Number:5CB5CFD6000100000D97

Validity Start Time:19:30:26 UTC Oct 30 2002

End Time:19:40:26 UTC Oct 30 2003

Renew Time:00:00:00 UTC Jan 1 1970

End of Certificate Record

Total number of certificate history records displayed = 2

Related Commands service

Catalyst 6500 Series Switch SSL Services Module Command Reference

	OL-9105-01	2-63

Image 89

Contents Text Part Number OL-9105-01 Corporate HeadquartersPage Iii N T E N T SNatpool Acronyms A-1 OL-9105-01 Organization AudienceRelated Documentation Chapter Title DescriptionConvention Description ConventionsBoldface font Example, interface interface typeCisco.com Obtaining DocumentationCisco Product Security Overview Documentation FeedbackObtaining Technical Assistance Reporting Security Problems in Cisco ProductsXii Submitting a Service RequestXiii Obtaining Additional Publications and InformationXiv This chapter includes the following sections Getting HelpHow to Find Command Options Command Comment Mode keyword Must enter next on the command lineAfter you enter the mode keyword Complete the command. If additionalCommand Mode Access Method Prompt Exit Method Understanding Command ModesConfigure terminal privileged Exec Configure terminalInterface command Using the No and Default Forms of CommandsImage using the boot system flash filename With an interfaceCharacter Special Meaning Using the CLI String SearchAeiou \$ \ \+AbcdABCD DA-DCharacter Telebit 3107 v32bisBa?b This string matches any number of asterisksCodex telebit Za-z0-9+Abcd $\.121300 For example1300$ 1300space space1300 1300, ,1300, 1300 ,1300 WithOL-9105-01 A P T E R Command Modes Command History DefaultsClear ssl-proxy conn Release ModificationDefaults Command Modes Command History Clear ssl-proxy contentUsage Guidelines Clear ssl-proxy sessionClear ssl-proxy stats Ssl-proxy#clear ssl-proxy stats Terminal Crypto pki export pemDes 3desCrypto pki import pem Related CommandsCrypto pki import pem Defaults Command HistoryExportable Usage-keysCrypto pki export pem Crypto pki export pkcs12 This example shows how to export a PKCS12 file using SCP Crypto pki import pkcs12 Crypto This example shows how to import a PKCS12 file using SCPFilename TP2? /users/admin-1/pkcs12/TP2.p12 Name key-name Crypto key decrypt rsaPassphrase passphrase Crypto key encrypt rsaCrypto key lock rsa Crypto key encrypt rsaCrypto key decrypt rsa Optional Specifies that the key can be exported Crypto key export rsa pemKeylabel Name of the key Key nametest-keys UsageGeneral Purpose Key Instead of one general-purpose key pair Crypto key import rsa pemNull-Imports from the null file system System-Imports from the system file systemPEM-formatted RSA key to the SSL Services Module Crypto key lock rsa name key-namepassphrase passphrase Crypto key lock rsaName key-name Optional Name of the key Passphrase passphraseCrypto key unlock rsa name key-namepassphrase passphrase Crypto key unlock rsaDebug ssl-proxy Command History Release Modification This example shows how to turn on App debugging Configuration mode Do commandCommand EXEC-level command to be executed Syntax Description Syntax Description Defaults Command Modes Command HistoryInterface ssl-proxy Standby delay minimum reload Standby authenticationStandby timers Standby ipSsl-proxyconfig-subif#ip address 208.59.100.18 Ssl-proxy config# interface ssl-proxyThis example shows how to define a pool of IP addresses Context subcommand modeNatpool Natpool nat-pool-name startipaddr endipaddr netmask netmaskPolicy health-probe tcp Syntax Description Defaults Command ModesInterval seconds Failed-interval secondsSsl-proxyconfig#ssl-proxy context ssl Open-timeout secondsSsl-proxyconfig-context#policy health-probe tcp probe1 Running on server IP addressPage Client-cert pem Policy http-headerAlias Policy that is applied to the payloadField To Insert Description Client-cert pem Custom custom-string Client-ip-portInserts the custom-stringheader into the Http header PrefixSSL-OFFLOAD-SOFTWARE VERSION3.11 Related Commands show ssl-proxy policySession-caching is enabled Close-protocol is disabledTimeout session timeout absolute Policy sslSSL-Policy Configuration Submode Command Descriptions Timeout handshake timeout Renegotiation volume sizeHelp Renegotiation interval timeOL-9105-01 This example shows how to disable a session cache This example shows how to enable a session cacheOL-9105-01 Policy tcp Delayed-ack-timeout timer Delayed-ack-threshold delayNo timeout fin-wait timeout-in-seconds No timeout inactivity timeout-in-secondsForm of this command to return to the default setting No timeout reassembly timeNo tos carryover Server to client connection, the server connection must beSsl-proxy config-ctx-tcp-policy# mss Policy url-rewrite Redirectonly Ssl-proxyconfig-context#ssl-proxy policy url-rewrite test1Ca-pool-name Certificate authority pool name Pool caPool ca ca-pool-name Service Default certificate inservice nat server Authenticate verify all signature-onlyInservice Certificate rsa general-purpose trustpointVlan vlan Virtual policy ssl ssl-policy-nameVirtual policy tcp Related Commands show ssl-proxy service Policy health-probe tcp Policy http-header Service clientVirtual policy ssl ssl-policy-name Nat server client natpool-nameVirtual policy tcp Vlan vlanSsl-proxy config-ctx-ssl-proxy# server policy tcp tcppl1 Show interfaces ssl-proxy 0.subinterface Show interfaces ssl-proxyPolicy tcp Show ionterfacesShow ssl-proxy buffers This command has no default settingsShow ssl-proxy buffers Ssl-proxy#show ssl-proxy buffersService name Show ssl-proxy certificate-history service nameSpecific proxy service Show ssl-proxy certificate-historyRecord 1, Timestamp000051, 163634 UTC Oct 31 Ssl-proxy# show ssl-proxy certificate-historyRelated Commands service 4tuple Show ssl-proxy connLocal RemoteSsl-proxy#show ssl-proxy conn Context name Module module200.200.1438814 58796 Show ssl-proxy context Context DefaultShow ssl-proxy context name Name Optional Name of the contextShow ssl-proxy crash-info brief details Show ssl-proxy crash-infoBrief DetailsSsl-proxy#show ssl-proxy crash-info brief Stack top Printing 1024 bytes from stack topSsl-proxy#show ssl-proxy mac address Show ssl-proxy mac addressShow ssl-proxy mac address Show ssl-proxy natpool namecontext name Show ssl-proxy natpoolContext name NatpoolHealth-probe tcp Show ssl-proxy policyHttp-header Url-rewriteSsl-proxy#show ssl-proxy policy tcp tcp-policy1 Ssl-proxy#show ssl-proxy policy ssl ssl-policy1Ssl-proxy#show ssl-proxy policy health-probe tcp tcp-health Show ssl-proxy service namecontext name Show ssl-proxy serviceSsl-proxy#show ssl-proxy service Ssl-proxy#show ssl-proxy service S6Service client Show ssl-proxy stats type ContentShow ssl-proxy stats Stats This example shows how to display the PKI statistics This example shows how to display the TCP statisticsSsl-proxy# show ssl-proxy stats hdr This example shows how to display context statisticsSsl-proxy#show ssl-proxy stats context Context name Default Ssl-proxy#show ssl-proxy stats content This example shows how to display content statisticsShow ssl-proxy status Show ssl-proxy statusShow ssl-proxy status fdu ssl tcp TCP cpu is alive Ssl-proxy#show ssl-proxy version Show ssl-proxy versionShow ssl-proxy version Show ssl-proxy vlan vlan-iddebugmodule module Show ssl-proxy vlanDebug Optional Displays debug informationDefaults Command Modes Command History Examples Snmp-server enableSsl-proxy context Command Purpose and Guidelines DefaultsSsl-proxy context name No ssl-proxy context name Description descriptionPolicy tcp policy-name Policy ssl policy-namePolicy url-rewrite policy-name Pool ca nameThis example shows how to start a cryptographic self-test Seconds Global configurationSsl-proxy crypto selftest Time-intervalRelated Commands show ssl-proxy mac address This example shows how to configure a MAC addressSsl-proxy config# ssl-proxy mac address 00e0.b0ff.f232 Ssl-proxy mac addressSsl-proxy pki Related Commands show ssl-proxy stats This example shows how to specify the cache sizeThis example shows how to enable PKI event-history Key-name Name of the key Passphrase Pass phrase Ssl-proxy crypto key unlock rsaSsl-proxyconfig#ssl-proxy ip-frag-ttl Time is 6 seconds Global configurationSsl-proxy ip-frag-ttl Ssl-proxy ip-frag-ttl timeSsl-proxy config# no ssl-proxy ssl ratelimit Ssl-proxy config# ssl-proxy ssl ratelimitSsl-proxy ssl ratelimit Ssl-proxy ssl ratelimit No ssl-proxy ssl ratelimitGroup-number is String is cisco Standby authenticationMin-delay is 1 second Reload-delay is 5 seconds Standby delay minimum reloadSsl-proxyconfig-subif#standby delay minimum 30 reload Show standby delaySsl-proxyconfig#interface ssl-proxy Standby ip Defaults Command Modes Command History Usage GuidelinesSecondary Group-number is100 Used by the hot standby group is learned using HsrpStandby group-numbermac-addressmac-address Standby mac-addressNo standby group-numbermac-address Mac-address MAC addressThat is used in the end nodes Ssl-proxyconfig-subif#standby 1 mac-addressShow standby 102103 Standby mac-refreshStandby mac-refresh seconds no standby mac-refresh Standby name Hsrp is disabledStandby name group-name No standby name group-name Group-name Name of the standby group105 Standby preemptLeaves any synchronization delay if it was configured Operation returns to the default behaviorClients To become the active routerStandby group-numberpriority priority Standby priorityNo standby group-numberpriority priority Group-number is Priority is108 This example shows how to change the router priority109 Standby redirectsSsl-proxyconfig-subif#standby redirects timers 90 Related Commands show standbyShow standby redirect 110Msec Standby timersOptional Specifies the interval in milliseconds 111112 Decrement priority Standby trackOr comes back up 113Router B Configuration Router a ConfigurationRelated Commands standby preempt 114Standby use-bia scope interface no standby use-bia Standby use-biaScope interface On which it was entered, instead of the major interfaceStandby version This example shows how to configure Hsrp versionStandby version 1 Specifies Hsrp versionAcronym Expansion CCA CbacCDP CEFDsap DramDscp DspuIcmp ICDIDB IDPMdix MD5Mdss MFDOSM OSIOspf PAEROM RmonRommon RPCSVC STPSVI TACACS+WRR Weighted round-robinXNS Xerox Network SystemOL-9105-01 Acknowledgments for Open-Source Software OL-9105-01 Asterisk + plus sign Period ? command Caret # character privileged Exec mode prompt$ character IN-1IN-2 IN-3 IN-4 IN-5 TCPIN-6 Configuration submode User Exec mode, summary

Related manuals

Manual 20 pages 62.17 Kb

Manual 112 pages 18.84 Kb

Manual 262 pages 31.67 Kb