SSL Termination & Cert Managament on CSS11501 / 11503

Answered Question
Jan 13th, 2008
User Badges:

Hi there....I have successfully implemented an SSL terminated site on the CSS, and load balanced to backend servers using HTTP. It all works great. This is on an 11501 w/SSL Module.


My question is, how do I add another complete SSL terminated site on the same 11501? When I just tried to duplicate the config for the existing SSL server and modify the required fields, I got an error saying:


%% Can only have one active sslAccel type of service per slot.




It has different certs, different VIP, different services, etc...


Also, after I get this working in our test environment, I will be implementing it in prod on a pair of redundant 11503's w/ SSL Modules. Can the 11503 w/SSL Mod handle more certs and SSL servers etc?


Please advise


Thanks


Sandeep



Correct Answer by Gilles Dufour about 9 years 2 months ago

It's the same for all CSS1150x.


Gilles.

Correct Answer by Gilles Dufour about 9 years 2 months ago

Sandeep,


you can have only one ssl-proxy-list as indicated by the message.

But inside the proxy-list you can configure multiple server.

So when you want to add a new "site" you need to add new servers to the proxy-list and reuse the proxy-list in the new content rule.


Gilles.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (2 ratings)
Loading.
Correct Answer
Gilles Dufour Mon, 01/14/2008 - 01:06
User Badges:
  • Cisco Employee,

Sandeep,


you can have only one ssl-proxy-list as indicated by the message.

But inside the proxy-list you can configure multiple server.

So when you want to add a new "site" you need to add new servers to the proxy-list and reuse the proxy-list in the new content rule.


Gilles.

yycsandman007 Tue, 01/15/2008 - 08:20
User Badges:

excellent....thanks! Is that the same case also for the 11503?


Sandeep

Correct Answer
Gilles Dufour Wed, 01/16/2008 - 00:17
User Badges:
  • Cisco Employee,

It's the same for all CSS1150x.


Gilles.

Actions

This Discussion