Cisco Systems 6500 Policy ssl policy-name, Policy tcp policy-name, Policy url-rewrite policy-name

Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module

ssl-proxy context

Table 2-10 Context Submode Commands (continued)

Command	Purpose and Guidelines	Defaults
policy http-header policy-name	Configures the HTTP header insertion policy. See
	the “policy http-header” section on page 2-34.
policy ssl policy-name	Configures the SSL policy. See the“policy ssl”
	section on page 2-39.
policy tcp policy-name	Configures the TCP policy. See the “policy tcp”
	section on page 2-45.
policy url-rewrite policy-name	Configures the URL rewrite policy. See the “policy
	url-rewrite” section on page 2-49.
pool ca name	Configures a pool of resources. See the “pool ca”
	section on page 2-51.
service service_name	Enters SSL proxy service subcommand mode and
	lets you configure the SSL client or server proxy
	service. See the “service” section on page 2-52for
	information about SSL proxy services.
vrf-name name	Configures the VRF associated with this context.

Examples	This example shows how to configure the context “hubble”:
	ssl-proxy#configure terminal
	Enter configuration commands, one per line. End with CNTL/Z.
	ssl-proxy(config)#ssl-proxy context hubble

ssl-proxy(config-context)# vrf-name hubble ssl-proxy(config-context)# service hubble

ssl-proxy(config-ctx-ssl-proxy)#virtual ipaddr 3.100.100.108 protocol tcp port 443 ssl-proxy(config-ctx-ssl-proxy)#server ipaddr 5.100.100.41 protocol tcp port 80 ssl-proxy(config-ctx-ssl-proxy)#certificate rsa general-purpose trustpoint shuttle ssl-proxy(config-ctx-ssl-proxy)#nat client hubble ssl-proxy(config-ctx-ssl-proxy)#inservice ssl-proxy(config-ctx-ssl-proxy)#exit

ssl-proxy(config-context)#natpool hubble 5.100.100.20 5.100.100.27 netmask 255.255.255.0 ssl-proxy(config-context)#policy health-probe tcp probe1 ssl-proxy(config-ctx-tcp-probe)#port 80

ssl-proxy(config-ctx-tcp-probe)# exit ssl-proxy(config-context)# ssl-proxy(config-context)# description Example context ssl-proxy(config-context)# end

ssl-proxy#

Catalyst 6500 Series Switch SSL Services Module Command Reference

2-88 OL-9105-01