Intel A31032-001 manual Client Authentication, To disable a redirect URL for a mapping

Models: A31032-001

1 196
Download 196 pages 18.6 Kb
Page 40
Image 40

C H A P T E R 3 Intel® NetStructure™ 7110/7115 e-Commerce Accelerator User Guide

Intel 7115> list map

 

 

 

 

Map

 

Net

Ser

Cipher

Re-

Client

ID

KeyID Server IP

Port

Port

Suites

direct Auth

==

===== =========

====

====

======

=====

====

1

default Any

443

80

all(v2+v3) n

n

2

sample 10.1.2.5

443

80

med(v2+v3) y

n

Intel 7115> show redirect 2

Redirect URL for map 2 is set: http://www.e- comm_site.com/cipher_info.html

To disable a redirect URL for a mapping:

Intel 7115> set redirect 2 none

Intel 7115> show redirect 2

Redirect URL for map 2 is not set

Client Authentication

NOTE: The 7110/7115 supports only one root CA certificate per mapping. However, multiple intermediate CA certificates per single mapping are supported.

By default, the 7110/7115 does not authenticate client identities, however specific map IDs can be configured to request client certificates for the purpose of verifying identities. When this feature is enabled, the 7110/7115 verifies that client certificates are signed by a known CA. This feature is controlled by the import client_ca command.

Example:

First, use the list map command to display the current map IDs and their configurations including, in the last column, Client Authentication, enabled (y) or disabled (n).

Intel 7115> list map

 

 

 

 

Map

 

Net

Ser

Cipher

Re-

Client

ID KeyID Server IP Port Port

Suites

direct Auth

== ===== ========= ==== ====

======

=====

====

1

default

Any

443

80

all(v2+v3) n

n

2

sample

10.1.2.57 443

80

med(v2+v3) n

n

3-18

Page 40
Image 40
Intel A31032-001 manual Client Authentication, To disable a redirect URL for a mapping, Intel 7115 show redirect