Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

SSL Termination & Cert Managament on CSS11501 / 11503

Hi there....I have successfully implemented an SSL terminated site on the CSS, and load balanced to backend servers using HTTP. It all works great. This is on an 11501 w/SSL Module.

My question is, how do I add another complete SSL terminated site on the same 11501? When I just tried to duplicate the config for the existing SSL server and modify the required fields, I got an error saying:

%% Can only have one active sslAccel type of service per slot.

It has different certs, different VIP, different services, etc...

Also, after I get this working in our test environment, I will be implementing it in prod on a pair of redundant 11503's w/ SSL Modules. Can the 11503 w/SSL Mod handle more certs and SSL servers etc?

Please advise

Thanks

Sandeep

2 ACCEPTED SOLUTIONS

Accepted Solutions
Cisco Employee

Re: SSL Termination & Cert Managament on CSS11501 / 11503

Sandeep,

you can have only one ssl-proxy-list as indicated by the message.

But inside the proxy-list you can configure multiple server.

So when you want to add a new "site" you need to add new servers to the proxy-list and reuse the proxy-list in the new content rule.

Gilles.

Cisco Employee

Re: SSL Termination & Cert Managament on CSS11501 / 11503

It's the same for all CSS1150x.

Gilles.

3 REPLIES
Cisco Employee

Re: SSL Termination & Cert Managament on CSS11501 / 11503

Sandeep,

you can have only one ssl-proxy-list as indicated by the message.

But inside the proxy-list you can configure multiple server.

So when you want to add a new "site" you need to add new servers to the proxy-list and reuse the proxy-list in the new content rule.

Gilles.

New Member

Re: SSL Termination & Cert Managament on CSS11501 / 11503

excellent....thanks! Is that the same case also for the 11503?

Sandeep

Cisco Employee

Re: SSL Termination & Cert Managament on CSS11501 / 11503

It's the same for all CSS1150x.

Gilles.

355
Views
0
Helpful
3
Replies