Chapter 2 Content Switching Module with SSL Commands

options (CAPP UDP submode)

options (CAPP UDP submode)

To assign session options to an IP address, use the options command in the CAPP UDP submode. To remove the options for the specified address from the configuration, use the no form of this command.

options ip_address encryption MD5 secret

 

 

no options ip_address

 

 

 

 

 

Syntax Description

 

ip_address

IP address that you want associate with this group of options.

 

 

 

 

 

 

encryption MD5

Specifies MD5 authentication.

 

 

 

 

 

 

secret

The string used in encryption and decryption of the MD5 hashing

 

 

 

method. Enter an unquoted text string with a maximum of 31

 

 

 

characters.

 

 

 

 

 

 

 

Defaults

 

This command has no default settings.

Command Modes

Command History

CSM CAPP UDP submode

Release

Modification

CSM release 2.2(1)

This command was introduced.

 

 

CSM-S release 1.1(1)

This command was introduced.

 

 

Usage Guidelines

Examples

The CSM applies encryption to packets sent to this destination address or when the CSM receives datagrams with a matching source IP address.

You can set the IP address to 0.0.0.0 to apply encryption to all incoming and outbound datagrams that are not specifically configured. The 0.0.0.0 IP address allows you to set a global security configuration that can be applied to an arbitrary number of peers.

This example shows the application of a specific option set to 10.6.3.21 and a global option set to all other IP addresses. The CSM encrypts datagrams received from 10.6.3.21 and transmitted to 10.6.3.21 with encryption code mySecret. All other datagrams, received or transmitted, are assigned to the default encryption secret anotherSecret.

Cat6k-2(config-slb-capp-udp)#options 10.6.3.21 encryption MD5 mySecret

Cat6k-2(config-slb-capp-udp)#options 0.0.0.0 encryption MD5 anotherSecret

Related Commands capp udp

Catalyst 6500 Series Switch Content Switching Module with SSL Command Reference

 

OL-7029-01

2-5

 

 

 

Page 27
Image 27
Cisco Systems OL-7029-01 manual Options Capp UDP submode, No options ipaddress, Encryption MD5, Usage Guidelines Examples