Cisco 6500 - Manual

vii Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Preface This preface describes the audience, organization, and conventions of this publication, and provides information on how to obtain related documentation. Audience This publication is for experienced network admin...

viii Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Preface Conventions The Cisco IOS documentation set includes these documents: • Configuration Fundamentals Configuration Guide • Command Reference For information about MIBs, refer to this URL: http://www.cisco.com/pub...

ix Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Preface Obtaining Documentation Notes use the following conventions: Note Means reader take note . Notes contain helpful suggestions or references to material not covered in the publication. Cautions use the following co...

x Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Preface Documentation Feedback Ordering Documentation Beginning June 30, 2005, registered Cisco.com users may order Cisco documentation at the Product Documentation Store in the Cisco Marketplace at this URL: http://www.c...

xi Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Preface Obtaining Technical Assistance Reporting Security Problems in Cisco Products Cisco is committed to delivering secure products. We test our products internally before we release them, and we strive to correct all ...

xii Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Preface Obtaining Technical Assistance Note Use the Cisco Product Identification (CPI) tool to locate your product serial number before submitting a web or phone request for service. You can access the CPI tool from the...

xiii Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Preface Obtaining Additional Publications and Information Obtaining Additional Publications and Information Information about Cisco products, technologies, and network solutions is available from various online and pri...

xiv Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Preface Obtaining Additional Publications and Information

C H A P T E R 1-1 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 1 Command-Line Interface This chapter provides information for understanding and using the Catalyst 6500 series switch SSL Services Module software using the command-line interface (CLI). The CLI for the C...

1-2 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 1 Command-Line Interface How to Find Command Options This example shows how to obtain a list of commands that begin with a particular character string or complete a partial command name: ssl-proxy# tu? tunnel si...

1-3 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 1 Command-Line Interface How to Find Command Options Table 1-2 shows examples of how you can use the question mark ( ? ) to assist you in entering commands. Table 1-2 How to Find Command Options Command Comment ...

1-5 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 1 Command-Line Interface Understanding Command Modes Understanding Command Modes This section contains descriptions of the command modes for the Cisco IOS user interface. Cisco IOS User Interface The Cisco IOS u...

1-6 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 1 Command-Line Interface Using the No and Default Forms of Commands For more information on command modes, refer to the “Using the Command Line Interface” chapter of the Configuration Fundamentals Configuration ...

1-7 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 1 Command-Line Interface Using the CLI String Search Using the CLI String Search The pattern in the command output is referred to as a string. The CLI string search feature allows you to search or filter any sho...

1-8 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 1 Command-Line Interface Using the CLI String Search To enter these special characters as single-character patterns, remove the special meaning by preceding each character with a backslash (\). These examples ar...

1-9 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 1 Command-Line Interface Using the CLI String Search Multiple-Character Patterns When creating regular expressions, you can also specify a pattern containing multiple characters. You create multiple-character re...

1-10 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 1 Command-Line Interface Using the CLI String Search To use multipliers with multiple-character patterns, you enclose the pattern in parentheses. In the following example, the pattern matches any number of the ...

1-11 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 1 Command-Line Interface Using the CLI String Search For example, _1300_ matches any string that has 1300 somewhere in the string. The string’s 1300 can be preceded by or end with a space, brace, comma, or unde...

2-3 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module clear ssl-proxy content clear ssl-proxy content To clear all TCP connections on the entire system, use the clear ssl-proxy conn command. clear ssl-prox...

2-4 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module clear ssl-proxy session clear ssl-proxy session To clear all entries from the session cache, use the clear ssl-proxy session command. clear ssl-proxy s...

2-5 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module clear ssl-proxy stats clear ssl-proxy stats To reset the statistics counters that are maintained in the different system components on the SSL Services...

2-6 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module clear ssl-proxy stats Command History Usage Guidelines To reset all the statistics counters that the SSL Services Module maintains, use the clear ssl-p...

2-7 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto pki export pem crypto pki export pem To export privacy-enhanced mail (PEM) files from the SSL Services Module, use the crypto pki export pem com...

2-8 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto pki export pem You can change the default file extensions when prompted. The default file extensions are as follows: • public key (.pub) • priva...

2-9 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto pki import pem crypto pki import pem To import a PEM-formatted file to the SSL Services Module, use the crypto pki import pem command. crypto pk...

2-10 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto pki import pem The crypto pki import pem command imports only the private key (.prv), the server certificate (.crt), and the issuer CA certific...

2-11 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto pki export pkcs12 crypto pki export pkcs12 To export a PKCS12 file from the SSL Services Module, use the crypto pki export pkcs12 command. cryp...

2-12 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto pki export pkcs12 Examples This example shows how to export a PKCS12 file using SCP: ssl-proxy(config)# crypto pki export TP1 pkcs12 scp: sky i...

2-13 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto pki import pkcs12 crypto pki import pkcs12 To import a PKCS12 file to the SSL Services Module, use the crypto pki import pkcs12 command. crypto...

2-14 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto pki import pkcs12 Examples This example shows how to import a PKCS12 file using SCP: ssl-proxy(config)# crypto pki import TP2 pkcs12 scp: sky i...

2-15 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto key decrypt rsa crypto key decrypt rsa To delete the encrypted key and leave only the unencrypted key, use the crypto key decrypt rsa command. ...

2-16 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto key encrypt rsa crypto key encrypt rsa To encrypt the RSA keys, use the crypto key encrypt rsa command. crypto key encrypt [ write ] rsa [ name...

2-17 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto key export rsa pem crypto key export rsa pem To export a PEM-formatted RSA key to the SSL Services Module, use the crypto key export rsa pem co...

2-18 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto key export rsa pem Examples This example shows how to export a key from the SSL Services Module: ssl-proxy(config)# crypto key export rsa test-...

2-19 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto key import rsa pem crypto key import rsa pem To import a PEM-formatted RSA key from an external system, use the crypto key import rsa pem comma...

2-21 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto key lock rsa crypto key lock rsa To lock the encrypted private key, use the crypto key lock rsa command. crypto key lock rsa [ name key-name ] ...

2-22 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module crypto key unlock rsa crypto key unlock rsa To unlock the encrypted private key, use the crypto key unlock rsa command. crypto key unlock rsa [ name k...

2-25 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module debug ssl-proxy Note Use the TCP debug commands only to troubleshoot basic connectivity issues under little or no load conditions (for instance, when ...

2-27 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module interface ssl-proxy interface ssl-proxy To enter the subinterface configuration submode, use the interface ssl-proxy command. In interface configurati...

2-28 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module interface ssl-proxy The valid values for configuring HSRP are as follows: • group-number —(Optional) Group number on the interface for which HSRP is b...

2-30 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module natpool natpool To define a pool of IP addresses, which the SSL Services Module uses for implementing the client NAT, use the natpool command. natpool...

2-31 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy health-probe tcp policy health-probe tcp To enter the TCP health probe configuration submode, use the policy health-probe command. In TCP healt...

2-32 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy health-probe tcp Examples This example shows how to configure TCP health probe to check whether service at port 80 is up and running on server ...

2-34 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy http-header policy http-header To enter the HTTP header insertion configuration submode, use the policy http-header command. policy http-header...

2-35 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy http-header • Client Certificate in PEM format—When you specify client-cert pem , the SSL module sends the entire client certificate in PEM for...

2-36 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy http-header • SSL Session—Session headers, including the session ID, are used to cache client certificates that are based on the session ID. Th...

2-37 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy http-header Examples This example shows how to enter the HTTP header insertion configuration submode: ssl-proxy(config)# ssl-proxy context s1 s...

2-39 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy ssl policy ssl To enter the SSL-policy configuration submode, use the policy ssl command. In the SSL-policy configuration submode, you can defi...

2-40 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy ssl Usage Guidelines Each SSL-policy configuration submode command is entered on its own line. Table 2-4 lists the commands available in SSL-po...

2-42 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy ssl When you enter the close-notify strict command, t he SSL Services Module sends a close-notify alert message to the SSL peer, and the SSL Se...

2-45 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy tcp policy tcp To enter the proxy policy TCP configuration submode, use the policy tcp command. In proxy-policy TCP configuration submode, you ...

2-46 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy tcp Usage Guidelines After you define the TCP policy, you can associate the TCP policy with a proxy server using the proxy-policy TCP configura...

2-47 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy tcp Usage Guidelines TCP commands that you enter on the SSL Services Module can apply either globally or to a particular proxy server. You can ...

2-48 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy tcp This example shows how to define the maximum size for the receive buffer configuration: ssl-proxy (config-ctx-tcp-policy)# buffer-share rx ...

2-49 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy url-rewrite policy url-rewrite To enter the URL rewrite configuration submode, use the policy url-rewrite command. In URL rewrite configuration...

2-50 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module policy url-rewrite clearport port-number —(Optional) Specifies the port portion of the URL link that is to be rewritten; valid values are from 1 to 65...

2-51 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module pool ca pool ca To enter the certificate authority pool configuration submode, use the pool ca command. In the certificate authority pool configuratio...

2-52 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module service service To enter the proxy-service configuration submode, use the service command. service ssl-proxy-name [ client ] Syntax Description Defaul...

2-54 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module service Both secured and bridge mode between the Content Switching Module (CSM) and the SSL Services Module is supported. Use the secondary keyword (o...

2-57 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module service client Table 2-9 lists the commands that are available in proxy-client configuration submode. Both secured mode and bridge mode between the Co...

2-59 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show interfaces ssl-proxy show interfaces ssl-proxy To display information about the configured subinterfaces, use the show interfaces ssl-proxy comma...

2-60 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy buffers show ssl-proxy buffers To display information about TCP buffer usage, use the show ssl-proxy buffers command. show ssl-proxy bu...

2-67 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy context show ssl-proxy context To display context information, use the show ssl-proxy context command. show ssl-proxy context [ name ] ...

2-68 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy crash-info show ssl-proxy crash-info To collect information about the software-forced reset from the SSL Services Module, use the show ...

2-70 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy mac address show ssl-proxy mac address To display the current MAC address, use the show ssl-proxy mac address command. show ssl-proxy m...

2-71 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy natpool show ssl-proxy natpool To display information about the NAT pool, use the show ssl-proxy natpool command. show ssl-proxy natpoo...

2-72 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy policy show ssl-proxy policy To display the configured SSL proxy policies, use the show ssl-proxy policy command. show ssl-proxy policy...

2-75 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy service show ssl-proxy service To display information about the configured SSL virtual service, use the show ssl-proxy service command....

2-79 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy stats This example shows how to display the TCP statistics: ssl-proxy# show ssl-proxy stats tcp TCP Statistics: Connection related : In...

2-80 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy stats Response timeout: 0 Response with error status: 0 Response with no request: 0 Response duplicated: 0 Message type error: 0 PKI Ac...

2-81 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy stats This example shows how to display content statistics: ssl-proxy# show ssl-proxy stats content Scan object statistics in CPU: SSL1...

2-82 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy status show ssl-proxy status To display information about the SSL Services Module proxy status, use the show ssl-proxy status command. ...

2-84 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module show ssl-proxy version show ssl-proxy version To display the current image version, use the show ssl-proxy version command. show ssl-proxy version Syn...

2-87 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module ssl-proxy context ssl-proxy context To enter the SSL context submode and define the virtual SSL context, use the ssl-proxy context command. Use the no...

2-89 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module ssl-proxy crypto selftest ssl-proxy crypto selftest To initiate a cryptographic self-test, use the ssl-proxy crypto selftest command. Use the no form ...

2-90 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module ssl-proxy mac address ssl-proxy mac address To configure a MAC address, use the ssl-proxy mac address command. ssl-proxy mac address mac-addr Syntax D...

2-93 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module ssl-proxy crypto key unlock rsa ssl-proxy crypto key unlock rsa To unlock the key automatically after a reload, use the ssl-proxy crypto key unlock rs...

2-94 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module ssl-proxy ip-frag-ttl ssl-proxy ip-frag-ttl To adjust the IP fragment reassembly timer, use the ssl-proxy ip-frag-ttl command. ssl-proxy ip-frag-ttl t...

2-95 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module ssl-proxy ssl ratelimit ssl-proxy ssl ratelimit To prohibit new connections during overload conditions, use the ssl-proxy ssl ratelimit command. Use t...

2-96 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby authentication standby authentication To configure an authentication string for HSRP, use the standby authentication command. Use the no form ...

2-97 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby delay minimum reload standby delay minimum reload To configure a delay before the HSRP groups are initialized, use the standby delay minimum r...

2-99 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby ip standby ip To activate HSRP, use the standby ip command. Use the no form of this command to disable HSRP. standby [ group-number ] ip [ ip-...

2-101 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby mac-address standby mac-address To specify a virtual MAC address for HSRP, use the standby mac-address command. Use the no form of this comma...

2-102 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby mac-address In an APPN network, an end node is typically configured with the MAC address of the adjacent network node. Use the standby mac-ad...

2-103 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby mac-refresh standby mac-refresh To change the interval at which packets are sent to refresh the MAC cache when HSRP is running over FDDI, use...

2-104 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby name standby name To configure the name of the standby group, use the standby name command. Use the no form of this command to disable the na...

2-105 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby preempt standby preempt To configure HSRP preemption and preemption delay, use the standby preempt command. Use the no form of this command t...

2-107 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby priority standby priority To configure the priority for HSRP, use the standby priority command. Use the no form of this command to restore th...

2-108 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby priority Examples This example shows how to change the router priority: ssl-proxy (config-subif)# standby priority 120 ssl-proxy (config-subi...

2-109 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby redirects standby redirects To enable HSRP filtering of Internet Control Message Protocol (ICMP) redirect messages, use the standby redirects...

2-110 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby redirects The no standby redirects command is the same as the standby redirects disable command. We do not recommend that you save the no for...

2-111 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby timers standby timers To configure the time between hello packets and the time before other routers declare the active hot standby or standby...

2-112 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby timers The standby timers command configures the time between standby hello packets and the time before other routers declare the active or s...

2-113 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby track standby track To configure HSRP to track an object and change the hot standby priority based on the state of the object, use the standb...

2-114 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby track When you use group number 0, no group number is written to NVRAM, providing backward compatibility. The standby track command syntax pr...

2-116 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Chapter 2 Commands for the Catalyst 6500 Series SSL Services Module standby version standby version To change the version of the Hot Standby Router Protocol (HSRP), use the standby version command: standby version { 1...

A-1 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 A P P E N D I X A Acronyms Table A-1 defines the acronyms that are used in this publication. Table A-1 List of Acronyms Acronym Expansion AAL ATM adaptation layer ACE access control entry ACL access control list ACNS Ap...

A-9 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 Appendix A Acronyms WRR weighted round-robin XNS Xerox Network System Table A-1 List of Acronyms (continued) Acronym Expansion

B-1 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 A P P E N D I X B Acknowledgments for Open-Source Software The Cisco IOS software on the Catalyst 6500 series switches software pipe command uses Henry Spencer’s regular expression library (regex). Henry Spencer’s regul...

IN-1 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 I N D E X Symbols # character (privileged EXEC mode prompt) 1-5 $ character 1-8, 1-10 * (asterisk) 1-7 + (plus sign) 1-7 . (period) 1-7 ? command 1-1 ^ (caret) 1-8, 1-10 _ (underscore) 1-8, 1-10 | (pipe or vertical bar...

Index IN-3 Catalyst 6500 Series Switch SSL Services Module Command Reference OL-9105-01 configuring secondary interface 2-99 initialization delay period 2-97 enabling 2-99 filtering of ICMP redirect messages 2-109 ICMP redirect messages disabling 2-109 enabling 2-109 MAC address configuring 2-101 pr...