Cisco Systems OL-7029-01 manual Ssl-proxy service ssl-proxy-nameclient

Chapter 3 Commands Specific to the Content Switching Module with SSL

ssl-proxy service

ssl-proxy service

To enter the proxy-service configuration submode, use the ssl-proxy-servicecommand.

ssl-proxy service ssl-proxy-name[client]

Syntax Description	ssl-proxy-name	SSL proxy name.
	client	(Optional) Allows you to configure the SSL-client proxy services. See the
		ssl-proxy service client command.

Defaults

Command Modes

Command History

Server NAT is enabled, and client NAT is disabled.

Global configuration

Release	Modification
Cisco IOS Release	Support for this command was introduced on the Catalyst 6500 series
12.1(13)E and	switches.
SSL Services Module
Release 1.1(1)
SSL Services Module	This command was changed to include the following keywords:
Release 2.1(1)	• authenticate—Configures the certificate verification method.
	• client—Configures the SSL-client proxy services.
	• policy urlrewrite—Applies a URL rewrite policy to a proxy server.
	• sslv2—Enables SSL version 2; see the server ipaddr ip-addr
	protocol protocol port portno subcommand.
	• trusted-caca-pool-name—Applies the trusted certificate authority
	configuration to a proxy server.
CSM-S release 1.1(1)	This command was introduced.

Usage Guidelines In proxy-service configuration submode, you can configure the virtual IP address and port that is associated with the proxy service and the associated target IP address and port. You can also define TCP and SSL policies for both the client side (beginning with the virtual keyword) and the server side of the proxy (beginning with the server keyword).

In client proxy-service configuration submode, you specify thattheproxy serviceacceptclear-texttraffic, encryptitinto SSL traffic,and forward itto theback-end SSL server.

Catalyst 6500 Series Switch Content Switching Module with SSL Command Reference

3-66 OL-7029-01