Manuals / Cisco Systems / Computer Equipment / Switch

Cisco Systems OL-7029-01 manual Real static NAT submode static, 136

Models: OL-7029-01

1 342

Download 342 pages 1.49 Kb

Page 158

Image 158

Chapter 2 Content Switching Module with SSL Commands

show module csm static server

Related Commands module csm

real (static NAT submode) static

	Catalyst 6500 Series Switch Content Switching Module with SSL Command Reference
2-136	OL-7029-01

Page 158

Image 158

Cisco Systems OL-7029-01 manual Real static NAT submode static, 136

Contents

Corporate Headquarters Text Part Number OL-7029-01Page N T E N T S IiiHw-module csm standby config-sync2-21 Ip slb mode Map cookie Real Script file Show module csm static server ViiVlan virtual server submode ViiiSsl-proxy policy url-rewrite Acronyms A-1 Chapter Title Description AudienceOrganization Boldface font ConventionsConvention Description BoldfaceXiii Related DocumentationObtaining Documentation Cisco Ordering tool Cisco Marketplace Documentation FeedbackCisco Product Security Overview XivObtaining Technical Assistance An emergency, you can also reach Psirt by telephone 877 408Submitting a Service Request XviObtaining Additional Publications and Information XviiXviii Using Content Switching Module Commands Command TaskCommand Modes # prompt is displayedExpression Meaning Submodes When you are in a submode, the prompt changes toRegular Expressions Zero or more charactersForm-feed Ascii Alert AsciiBackspace Ascii Newline AsciiContent Switching Module with SSL Commands Vlan id Defaults Command Modes Command HistoryArp Release ModificationCapp udp Syntax Description DefaultsCommand Modes Command History Capp udp No capp udpRelated Commands port Capp UDP submode No options ipaddress Related Commands capp udpOptions Capp UDP submode Encryption MD5Port portnum no port This example shows how to set the port for Capp connectionsPort Capp UDP submode Capp udpSecure Capp UDP submode Secure No secureClear module csm Dfp No dfp password passwordPassword Related Commands show module csm dfp Manager DFP submode Show module csm dfp Agent DFP submodeDfp Manager port No manager Syntax Description Defaults Command ModesManager DFP submode Agent DFP submodeExit ExitFt group group-id vlan vlan number Module CSM configuration submodeFt group No ft groupPreempt fault tolerant submode Failover fault tolerant submodeHeartbeat-time fault tolerant submode Priority fault tolerant submodeNo failover Failover fault tolerant submodeFailover failover-time Ft groupFt group Heartbeat-time fault tolerant submodeHeartbeat-time heartbeat-timeno heartbeat-time Show module csm ftPreempt No preempt Preempt fault tolerant submodeRelated Commands ft group CSM Priority fault tolerant submodePriority value alt value No priority Alt ValueTrack fault tolerant submode Preempt fault tolerant submodeSyntax Description Defaults Command Modes Command History Hw-module csm standby config-syncHw-module csm slot standby config-sync Ip address Vlan submode priority fault tolerant submodeOn the Catalyst 6500 series switch Ip slb modeIp slb mode csm rp no ip slb mode Csm Keyword to select the route processor Cisco IOS SLB modeShow ip slb mode Module csmCookie-map policy submode Map cookieCookie Match protocol http cookie cookie map submodeMap cookie Show module csm map Match protocol http cookie cookie map submodeCookie-value Map dns DNS domains can be configured to a mapThis example shows how to group DNS domains Match protocol dns domain DNS map submodeMatch protocol dns domain DNS map submode SLB DNS map configuration submodeThis example shows how to add domains to a DNS map Name Names the DNS domain being mappedHeader-map policy submode Map headerMap name header no map name Insert protocol http header header map submodeHeader-map policy submode map header Show module csm map Insert protocol http header header map submodeHeader-value value Header-value expression SLB header map configuration submodeMatch protocol http header header map submode Must be matchedMap retcode Keyword to enter the return error code map submodeThis command has no default settings CSM module submode Map name retcode No map nameAction count Map retcode SLB policy configuration submodeMatch protocol http retcode return code map submode Action logUrl-map-name Map urlMap url-map-name url no map url-map-name Match protocol http url URL map submodeMatch protocol http url URL map submode SLB URL map configuration submodeUsage Guidelines Examples Related Commands Map url Show module csm map url-map policy submodeModule csm Slot-number Slot number where the CSM residesIp slb mode Module csm slot-number No module csm slot-numberNat client serverfarm submode Natpool module CSM submodeNetmask netmask Show module csm natpoolVariable name value no variable name Name Default Valid Values DescriptionVariable module CSM submode Switchoverrpaction AggregatebackupsfstatetovNoresetunidirectionalflows AdvertiserhifreqShow module csm variable Billing-info owner submode OwnerOwner name no owner Contact-info owner submode Maxconns owner submodeNo billing-info Billing-info owner submodeBilling-infobilling-address-information Contact-info owner submodeString Owner’s information Contact-info owner submodeContact-info string no contact-info Number Number of maximum connections to the owner object Maxconns owner submodeMaxconns number no maxconns Accept further connectionsPolicy policy-name no policy policy-name All policies should be configured with a server farmPolicy Show module csm ownerNo client-group Ip access-list standardClient-group policy submode Policy Show module csm ownerNo cookie-map Cookie-map policy submodeCookie-mapcookie-map-name Map cookieHeader-map name No header-map Specified in the map header commandHeader-map policy submode Map headerStatic Nat client policy submodeNo nat client Natpool module CSM submodeServerfarm policy submode Policy Serverfarm virtual server submodeSet ip dscp dscp-valueno set ip dscp Default is that the CSM does not store Dscp valuesSet ip dscp policy submode Dscp-value Range is from 0 toSticky-group group-id No sticky-group This example shows how to configure a sticky groupSticky-group policy submode Show module csm owner Show module csm sticky StickyUrl-mapurl-map-name no url-map Default is no URL mapUrl-map policy submode Map urlProbe Probe Show module csm probeRouted Address probe submodeNo address ip-address ProbeThis command is for Http probes Credentials username passwordSLB Http probe configuration submode Credentials probe submodeLine Description text Description serverfarm submodeDescription line No description Enter the no expect status 34 99 command Expect status probe submodeRelated Commands probe Failed probe submode Default value for the failed interval is 300 secondsThis command is used for all probe types Failed failed-interval no failedNo header field-name Header probe submodeHeader field-name field-value Probe Show module csm probeInterval probe submode Interval seconds no intervalName domain-name no name SLB DNS probe configuration submodeName probe submode SLB HTTP/TCP/FTP/Telnet/SMTP probe configuration submode Open open-timeout no openDefault value for the open timeout is 10 seconds Open probe submodePort port-number no port Default value for the port number isPort probe submode Port-number Sets the port numberThis command is available for all probe types except TCP Receive receive-timeout no receiveDefault value for a receive timeout is 10 seconds Receive probe submodeDefault value is Recover probe submodeRecover recovervalue no recover This command is available for all probe typesMethod head Request probe submodeMethod get Url pathRetries retry-count no retries Default value for retries isRetries probe submode Scriptname Specifies a probe script Script probe submodeScript scriptname Failed probe submodeReal Default is no port translation for the real serverSLB serverfarm configuration submode Real ip-address port local No real ip-address portCat6k-2config-slb-sfarm# real Cat6k-2config-slb-real# Name name Backup real real server submodeBackup real ip name name port no backup real Failaction serverfarm submodeNo health probe Health probe real server submodeHealth probe probe-nametag string TagCommand History Release Modification Inservice real server submodeInservice standby No inservice Standby Real Show module csm realReal server falls below Minconns Maxconns real server submodeMaxconns max-conns no maxconns Minconns real server submodeMinconns min-consno minconns Default value is the set minumum number of connectionsMinconns real server submode Maxconns real server submode real Show module csm realTraffic is not redirected to the server Redirect-vserver real server submodeRedirect-vserver name no redirect-vserver Weighting value default is Weight real server submodeWeight weighting-value no weight Predictor serverfarm submodeRedirect-vserver name no redirect-vserver name This example shows how to name the virtual serverRedirect-vserver Active Advertise redirect virtual server submodeAdvertise active no advertise Advertise virtual server submodeExclude SLB redirect virtual server configuration submodeClient redirect virtual server submode Optional Specifies that the IP address is disallowedNo idle Idle redirect virtual server submodeIdle duration Redirect-vserver real server submodeRedirect-vserver Show module csm vserver redirect Inservice redirect virtual server submodeInservice No inservice Vserver Replicate csrp redirect virtual server submodeReplicate csrp No replicate csrp Https Ssl redirect virtual server submodeNo ssl FtpRedirect-vserver real server submode Virtual redirect virtual server submodeNo virtual vipaddress Show module csm vserver redirectSticky Sticky-group policy submode Vlan redirect virtual server submodeShow module csm sticky 301 Webhost backup redirect virtual server submodeWebhost backup backup-string301 No webhost backup 302Webhost relocation redirect virtual server submode Sticky Sticky-group policy submode Reverse-stickyReverse-sticky group-idno reverse-sticky Script file No script fileRelated Commands show module csm script Script name Script task100 Show module csm scriptServerfarm Serverfarm serverfarm-name No serverfarm serverfarm-nameBindid bind-idno bindid SLB serverfarm configuration submodeBindid serverfarm submode DfpCat6k-2config-slb-sfarm#description Backup Server Farm CSM release This command was introducedThis example shows how to add a description Failaction purge reassign No failaction purge reassign Backup real real server submodeFailaction serverfarm submode Purge100 Health serverfarm submodeDfp Script task Show module csm serverfarm 101 Nat client serverfarm submodeNat client client-pool-name static Source-mac Nat server serverfarm submodeNat server source-macno nat server 102Predictor serverfarm submode 103104 105 Probe serverfarm submode 106Map retcode Retcode-map serverfarm submodeRetcode-mapretcodemapname no retcode-map Script task Show module csm serverfarmReal static NAT submode This example shows how to display static dataShow module csm StaticShow module csm arp Mode rp onlyRelated Commands arp Show module csm slot arpSyntax Description Show module csm cappShow module csm capp udp details 110111 112 Show module csm connsState Explanation Reqwait Related Commands module csmSynsrv 113Agent WeightsShow module csm dfp Manager115 Show module csm slot ft detail Mode rp onlyShow module csm ft 116Header Show module csm mapUrl NameMap header map url module csm This example shows how to display return code mapsRelated Commands map cookie 118Parse-length virtual server submode Show module csm memoryShow module csm slot memory vserver vserver-name detail 119Show module csm slot natpool name pool-name detail Ip slb mode rp onlyShow module csm natpool Natpool module CSM submodeOwner virtual server submode Show module csm ownerShow module csm slot owner name owner-name detail 121Show module csm slot policy name policy-name Slb mode rp onlyShow module csm policy 122Show module csm probe 123Probe serverfarm submode 124Probe serverfarm submode script probe submode Show module csm probe scriptShow module csm slot probe script name probe-name detail 125126 Show module csm pvlanShow module csm slot pvlan Cat6k-2#show module csm 4 pvlanSfarm Show module csm realShow module csm slot real sfarm sfarm-name detail This example shows Cisco IOS SLB real server dataField Description 128129 Show module csm real retcodeShow module csm slot real retcode sfarm sfarm-name detail Cat6k-2#show module csm 5 real retcodeCode Show module csm scriptShow module csm slot script name fullfileURL code 130Show module csm slot script task index script-index detail This example shows how to display a running scriptShow module csm script task IndexShow module csm slot serverfarm name serverfarm-name detail For ip slb mode rp onlyShow module csm serverfarm 132133 FieldRedirect Bind id Cat6k-2#show mod csm 5 serverfarm detailNat Show module csm staticDrop Virtual135 Show module csm static serverPass-through Real static NAT submode static 136Show module csm slot stats This example shows how to display SLB statisticsShow module csm stats Statistics counters are 32-bit3describes the fields in the display 138Show module csm slot status This example shows how to display CSM statusShow module csm status 139Groups Show module csm stickyShow module csm slot sticky groups client ipaddress 140141 4describes the fields in the displaySticky Sticky virtual server submode 142 Show module csm tech-scriptShow module csm slot tech-script Cat6k-2#show module csm 4 tech-scriptShow module csm tech-support 143144 Cat6k-2#show module csm 4 tech-support processor145 Show module csm slot variable name name detail Variable commandShow module csm variable 146Cat6k-2#show module csm 5 variable detail Csm slot variable detail command147 Server Show module csm vlanClient Vlan-idRelated Commands vlan virtual server submode 149Show module csm vserver redirect Redirect for ip slb mode rp onlyThis example shows how to display the CSM virtual servers Show module csm slot vserver redirect151 Show module csm xml stats This example shows how to display the CSM XML statisticsRelated Commands xml-config Show module csm xml statsActive after detecting a failure in its fault tolerant peer Snmp enable traps slb ftSnmp enable traps slb ft no snmp enable traps slb ft This example shows how to enable fault tolerant trapsShow module csm static StaticNat client serverfarm submode 154Show module csm static SLB static NAT configuration submodeReal static NAT submode StaticSticky 156157 Cat6k-2config-module-csm#sticky 5 header headername timeoutRouterconfig-module-csm#variable Notimeoutipstickyentries Offset offset Cookie offset sticky submodeNo cookie offset Length lengthCookie secondary name no cookie secondary This example shows how to specify a secondary sticky entryCookie secondary sticky submode Name Specifies a cookie nameOffset value Header sticky submodeHeader offset value length value Length valueStatic sticky submode 161Vserver 162Redirect-vserver Advertise virtual server submodeServer as host route 163164 Ip access-list standardClient virtual server submode Description virtual server submode Related Commands vserverCat6k-2config-slb-vserver#description Backup Server Farm 165166 This example shows how to set a domain nameDomain virtual server submode 167 This example shows how to specify an idle timer durationIdle virtual server submode 168 Inservice virtual server submodeVirtual server is not in service Maxconns Owner virtual server submodeNo owner maxconns Advertise virtual server submodeParse-length bytes No parse-length Default is SLB virtual server configuration submodeParse-length virtual server submode Bytes Number of bytes the range is from 1 toPending virtual server submode Pending timeout no pendingDefault pending timeout is 30 seconds 171Persistent rebalance No persistent rebalance This example shows how to enable the Http 1.1 persistencePersistent rebalance virtual server submode 172Connection Replicate csrp virtual server submodeSticky 173174 Reverse-sticky virtual server submodeReverse-sticky group-id No reverse-sticky Serverfarm command BackupThreshold outservice realvalue inservice realvalue options Serverfarm virtual server submode176 CommandServerfarm policy submode No slb-policy policy-name Slb-policy virtual server submodeSlb-policypolicy-name priority priorityvalue 177Offset Ssl-sticky virtual server submodeSsl-sticky offset X length Y No ssl-sticky LengthVservername Identifies the dependent virtual server Status-tracking virtual server submodeStatus-tracking vservername 179Sticky virtual server submode 180181 For connection couplingReverse-sticky virtual server submode Related Commands show module csm vserver redirect No default unidirectionalDefault Unidirectional virtual server submode183 Url-hash virtual server submodePredictor serverfarm submode Virtual virtual server submode 184185 186 Show module csm vlan Vlan virtual server submode Vlan virtual server submodeNo vlan 187Client server VlanVlan vlan-numberclient server No vlan 188Vlan Alias Vlan submodeAlias ip-address netmask No alias ip-address netmask NetmaskRelated Commands show module csm vlan vlan XML submode 190191 Ip address Vlan submode SLB Vlan configuration submodeDescription Vlan submode Show module csm vlan Vlan virtual server submode Gateway Vlan submodeGateway ip-addressno gateway ip-address 192Alt Ip address Vlan submodeNo ip address 193Gw-ip-address Route Vlan submodeGateway 194Client-group XML submode Xml-configXml-config no xml-config Credentials XML submode Vlan XML submodeClient-group 1-99name Xml-configClient-group XML submode 196No credentials user-name Credentials user-name passwordCredentials XML submode Client-group XML submodeThis example shows how to enable XML Inservice XML submodeDefaults Command Modes Xml-configNo port Port XML submodePort port-number Port-number Sets the CSM portVlan name Vlan XML submodeVlan id no vlan All VLANs are acceptedCommands Specific to the Content Switching Module with SSL Service module Commands Submode Commands Ssl-proxy service Ssl-proxy vlanSsl-proxy connection command without options Clear ssl-proxy conn service nameService name Clear ssl-proxy connClear ssl-proxy session service name Clear ssl-proxy sessionClear ssl-proxy stats Des Crypto ca export pemTerminal 3desImporting CA certificate Usage-keys Crypto ca import pemExportable Crypto ca export pem Pkcs12filename Crypto ca export pkcs12Tftp Page Crypto ca import pkcs12 Crypto This example shows how to import a PKCS12 file using SCPFilename TP2? /users/admin-1/pkcs12/TP2.p12 Optional Specifies that the key can be exported Crypto key export rsa pemKeylabel Name of the key Key nametest-keys UsageGeneral Purpose Key Null-Imports from the null file system Crypto key import rsa pemInstead of one general-purpose key pair System-Imports from the system file systemExamples Debug ssl-proxy This example shows how to turn on IPC debugging This example shows how to turn on App debuggingThis example shows how to turn on FDU debugging This example shows how to turn on PKI debuggingSsl-proxy#debug ssl-proxy tcp This example shows how to turn on TCP debuggingThis example shows how to turn off TCP debugging Ssl-proxy#no debug ssl-proxy tcpConfiguration mode Do commandCommand EXEC-level command to be executed Ssl-proxy#show ssl-proxy admin-info Show ssl-proxy admin-infoShow ssl-proxy admin-info Show ssl-proxy buffers This command has no default settingsShow ssl-proxy buffers Ssl-proxy#show ssl-proxy buffersOptionally for a specific proxy service Show ssl-proxy certificate-history service nameService name Show ssl-proxy certificate-historySsl-proxy# show ssl-proxy certificate-history Record 1, Timestamp000051, 163634 UTC Oct 31Related Commands ssl-proxy service 4tuple Show ssl-proxy conn service nameShow ssl-proxy conn RemoteSsl-proxy#show ssl-proxy conn 200.200.1438814 58796 Brief Show ssl-proxy crash-infoShow ssl-proxy crash-info brief details Limited to processor registersStack top Printing 1024 bytes from stack top Ssl-proxy#show ssl-proxy crash-info briefModule with SSL Show ssl-proxy mac addressShow ssl-proxy mac address Ssl-proxy#show ssl-proxy mac addressName Optional NAT pool name Show ssl-proxy natpoolShow ssl-proxy natpool name Ssl-proxy#show ssl-proxy natpool NP1Http-header Show ssl-proxy policyShow ssl-proxy policy http-header ssl tcp url-rewrite name Url-rewriteMSS Name Optional Service name Show ssl-proxy serviceShow ssl-proxy service name Ssl-proxy#show ssl-proxy serviceProxy status No Client VLAN, No Server Vlan Ssl-proxy# Stats Show ssl-proxy statsShow ssl-proxy stats type This example shows how to display the PKI statistics Ssl-proxy#show ssl-proxy stats pki PKI Memory Usage CountersThis example shows how to display the FDU statistics Ssl-proxy# show ssl-prox stats fduShow ssl-proxy status Show ssl-proxy statusShow ssl-proxy status SSL cpu is alive Ssl-proxy#show ssl-proxy version Show ssl-proxy versionShow ssl-proxy version Debug Show ssl-proxy vlanShow ssl-proxy vlan vlan-iddebug Optional Displays debug informationSsl-proxy#show ssl-proxy vlan This command has no default settings Exec modeShow ssl-proxy vts Snmp-server enable Defaults Command Modes Command History ExamplesSsl-proxy crypto selftest Seconds Global configurationThis example shows how to start a cryptographic self-test Time-intervalSsl-proxy mac address mac-addr Related Commands show ssl-proxy mac addressSsl-proxy mac address Ssl-proxy natpool This example shows how to define a pool of IP addressesRelated Commands show ssl-proxy natpool Ssl-proxy pki Related Commands show ssl-proxy stats This example shows how to specify the cache sizeThis example shows how to enable PKI event-history Http-header-policy-name Http header policy name Ssl-proxy policy http-headerSsl-proxy policy http-header http-header-policy-name Custom custom-string Ssl-proxy policy ssl ssl-policy-name Timeout session timeout absoluteSsl-proxy policy ssl Ssl-policy-name SSL policy nameNo session-cache enable RSAWITHRC4128SHA all No close-protocol enableDefault cipher close-protocol Timeout handshake timeoutSsl-proxy config# ssl-proxy policy ssl sslpl1 This example shows how to enable session-cacheThis example shows how to disable session-cache Ssl-proxyconfig-ssl-policy#cipher RSAWITH3DESEDECBCSHAThis example shows how to print out a help Ssl-proxy policy tcp Defaults are as followsTimeout reassembly is 60 seconds Ssl-proxy policy tcp tcp-policy-nameNo buffer-share rx buffer-limit-in-bytes No timeout syn timeout-in-secondsNo timeout reassembly time No buffer-share tx buffer-limit-in-bytesRelated Commands show ssl-proxy policy Ssl-proxy policy url-rewrite Ssl-proxy policy url-rewrite url-rewrite-policy-nameSsl-proxy config# ssl-proxy policy url-rewrite test1 Ssl-proxyconfig-url-rewrite-policy#Ssl-proxy pool ca-pool-name This command has no arguments or keywordsSsl-proxy pool ca Ca-pool-name Certificate authority pool nameSsl-proxy service client command Ssl-proxy serviceSsl-proxy service ssl-proxy-nameclient Protocol protocol port portno subcommandInservice Authenticate verify all signature-onlyDefault certificate inservice nat server Certificate rsa general-purpose trustpointSsl-proxy config-ssl-proxy# Related Commands show ssl-proxy service Declares a proxy client as administratively up Ssl-proxy service clientExits from proxy-client configuration submode Applies a URL rewrite policy to the proxy server Sslv2 keyword enables SSL versionSsl-proxy config# ssl-proxy service S7 client Ssl-proxy config-ssl-proxy# server policy tcp tcppl1 Ssl-proxy ssl ratelimit Ssl-proxy config# ssl-proxy ssl ratelimitSsl-proxy config# no ssl-proxy ssl ratelimit Ssl-proxyy ssl ratelimitSsl-proxy vlan vlan AdminSsl-proxy vlan Gateway prefix drop forward1Standby ip Standby authenticationStandby delay minimum reload Standby mac-addressSsl-proxyconfig-vlan#ipaddr 10.1.0.20 Ssl-proxyconfig-vlan#ipaddr 208.59.100.18Ssl-proxyconfig-vlan#route 210.0.207.0 255.0.0.0 gateway Related Commands show ssl-proxy vlan Standby authentication Group-number is String is ciscoStandby delay minimum reload Min-delay is 1 second Reload-delay is 5 secondsShow standby delay Ssl-proxyconfig-vlan#standby delay minimum 30 reloadStandby ip Hsrp is disabled by defaultProxy-VLAN configuration submode SecondaryUsed by the hot standby group is learned using Hsrp No standby group-numbermac-address Standby mac-addressStandby group-numbermac-addressmac-address Mac-address MAC addressShow standby Ssl-proxyconfig-vlan#standby 1 mac-addressThat is used in the end nodes Standby mac-refresh Standby mac-refresh seconds no standby mac-refreshStandby name group-name No standby name group-name Hsrp is disabledStandby name Group-name Specifies the name of the standby groupReload delay DelayMinimum delay Sync delaySsl-proxyconfig-vlan#standby preempt delay minimum Operation returns to the default behaviorLeaves any synchronization delay if it was configured ClientsStandby group-numberpriority priority This example shows how to change the router priorityStandby priority No standby group-numberpriority priorityStandby track Timers EnableDisable Standby redirectsShow standby redirect Related Commands show standbySsl-proxyconfig-vlan#standby redirects timers 90 Standby timers MsecInterface ethernet Decrement priority Command commands and take action when the object changesStandby track Back upRelated Commands standby preempt Router a ConfigurationRouter B Configuration Standby priorityScope interface Standby use-biaStandby use-bia scope interface No standby use-bia OL-7029-01 Acronym Expansion CDP CbacCCA CEFDscp DramDsap DspuIDB ICDIcmp IDPMdss MD5Mdix MFDOspf OSIOSM PAERommon RmonROM RPCSVI STPSVC TACACS+XNS Weighted round-robinWRR Xerox Network SystemOL-7029-01 Capp Capp UDPHttp IN-1IN-2 NATXML IN-3 Gslb See FTPFTP IN-4Secondary interface IN-5IN-6 ConfigurationPool addresses Gslb Http IN-7Real server Backup Enabling IN-8Smtp IN-9IN-10 TCPURL IN-11 Credentials Enabling Port Statistics display Vlan IN-12

Related Commands module csm

real (static NAT submode) static

2-136