Cisco Systems 6500 SSL Services Module, This command was changed to add the following subcommands

Models: 6500

1 160
Download 160 pages 24.26 Kb
Page 66
Image 66
SSL Services Module

Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module

policy ssl

Release

Modification

SSL Services Module

This command was changed to add the following subcommands:

Release 2.1(5)

cert-req empty

 

 

tls-rollback [current any]

 

 

SSL Services Module

The policy ssl command (entered in context subcommand mode) replaces

Release 3.1(1)

the ssl-proxy policy ssl command (entered in global subcommand mode).

 

This command was changed to add the following submode commands:

 

cipher rsa-exp-with-des40-cbc-sha

 

cipher rsa-exp-with-rc4-40-md5

 

cipher rsa-exp1024-with-des-cbc-sha

 

cipher rsa-exp1024-with-rc4-56-md5

 

cipher rsa-exp1024-with-rc4-56-sha

 

cipher rsa-with-null-md5

 

renegotiation volume

 

renegotiation interval

 

renegotiation wait-time

 

renegotiation optional

 

 

 

Usage Guidelines Each SSL-policy configuration submode command is entered on its own line.

Table 2-4lists the commands available in SSL-policy configuration submode.

Table 2-4 SSL-Policy Configuration Submode Command Descriptions

 

Syntax

Description

 

 

 

 

 

 

cert-req empty

Allows you to specify that the SSL Services Module backend service always

 

 

 

 

returns the certificate associated with the trustpoint and does not look for a

 

 

 

 

CA-name match.

 

 

 

 

 

cipher-suite {all all-export all-strong

Allows you to configure a list of cipher-suites acceptable to the proxy-server.

 

rsa-exp-with-des40-cbc-sha

 

 

 

 

rsa-exp-with-rc4-40-md5

 

 

 

 

rsa-exp1024-with-des-cbc-sha

 

 

 

 

rsa-exp1024-with-rc4-56-md5

 

 

 

 

rsa-exp1024-with-rc4-56-sha

 

 

 

 

rsa-with-3des-ede-cbc-sha

 

 

 

 

rsa-with-des-cbc-sha rsa-with-null-md5

 

 

 

 

rsa-with-rc4-128-md5

 

 

 

 

rsa-with-rc4-128-sha}

 

 

 

 

 

 

 

 

[no] close-protocol {strict none}

Allows you to configure the SSL close-protocol behavior. Use the no form

 

 

 

 

of this command to disable close protocol.

 

 

 

 

 

default {cipher close-protocol

Sets a command to its default settings.

 

session-cache version}

 

 

 

 

 

 

 

 

exit

Exits from SSL-policy configuration submode.

 

 

 

 

 

 

 

 

 

Catalyst 6500 Series Switch SSL Services Module Command Reference

 

 

 

 

2-40

 

 

OL-9105-01

 

 

 

 

 

Page 66
Image 66
Cisco Systems 6500 SSL Services Module, This command was changed to add the following subcommands, Release, cert-req empty