Cisco 6500 - Catalyst Series 10 Gigabit EN Interface Module... Installation manual

Corporate Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Catalyst 6500 Series Switch
SSL Services Module Command Reference
Release 3.1
Text Part Number: OL-9105-01

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL
STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT
WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT
SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE
OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB’s public
domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS” WITH
ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT
LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF
DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING,
WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO
OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
CCSP, CCVP, the Cisco Square Bridge logo, Follow Me Browsing, and StackWise are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn,
and iQuick Study are service marks of Cisco Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, Cisco, the Cisco
Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel,
EtherFast, EtherSwitch, Fast Step, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard,
LightStream, Linksys, MeetingPlace, MGX, the Networkers logo, Networking Academy, Network Registrar, Packet, PIX, Post-Routing, Pre-Routing, ProConnect,
RateMUX, ScriptShare, SlideCast, SMARTnet, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or
its affiliates in the United States and certain other countries.
All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship
between Cisco and any other company. (0601R)
Catalyst 6500 Series Switch SSL Services Module Command Reference
© 2006 Cisco Systems, Inc. All rights reserved.

iii
Catalyst 6500 Series Switch SSL Services Module Command Reference
OL-9105-01
CONTENTS
Preface vii
Audience vii
Organization vii
Related Documentation vii
Conventions viii
Obtaining Documentation ix
Cisco.com ix
Product Documentation DVD ix
Ordering Documentation x
Documentation Feedback x
Cisco Product Security Overview x
Reporting Security Problems in Cisco Products xi
Obtaining Technical Assistance xi
Cisco Technical Support & Documentation Website xi
Submitting a Service Request xii
Definitions of Service Request Severity xii
Obtaining Additional Publications and Information xiii
CHAPTER 1Command-Line Interface 1-1
Getting Help 1-1
How to Find Command Options 1-2
Understanding Command Modes 1-5
Cisco IOS User Interface 1-5
Using the No and Default Forms of Commands 1-6
Using the CLI String Search 1-7
Regular Expressions 1-7
Alternation 1-10
Anchoring 1-10
Parentheses for Recall 1-11

Contents
iv
Catalyst 6500 Series Switch SSL Services Module Command Reference
OL-9105-01
CHAPTER 2Commands for the Catalyst 6500 Series Switch SSL Services Module 2-1
clear ssl-proxy conn 2-2
clear ssl-proxy content 2-3
clear ssl-proxy session 2-4
clear ssl-proxy stats 2-5
crypto pki export pem 2-7
crypto pki import pem 2-9
crypto pki export pkcs12 2-11
crypto pki import pkcs12 2-13
crypto key decrypt rsa 2-15
crypto key encrypt rsa 2-16
crypto key export rsa pem 2-17
crypto key import rsa pem 2-19
crypto key lock rsa 2-21
crypto key unlock rsa 2-22
debug ssl-proxy 2-23
do 2-26
interface ssl-proxy 2-27
natpool 2-30
policy health-probe tcp 2-31
policy http-header 2-34
policy ssl 2-39
policy tcp 2-45
policy url-rewrite 2-49
pool ca 2-51
service 2-52
service client 2-56
show interfaces ssl-proxy 2-59
show ssl-proxy buffers 2-60
show ssl-proxy certificate-history 2-61
show ssl-proxy conn 2-64
show ssl-proxy context 2-67
show ssl-proxy crash-info 2-68
show ssl-proxy mac address 2-70
show ssl-proxy natpool 2-71

Contents
v
Catalyst 6500 Series Switch SSL Services Module Command Reference
OL-9105-01
show ssl-proxy policy 2-72
show ssl-proxy service 2-75
show ssl-proxy stats 2-77
show ssl-proxy status 2-82
show ssl-proxy version 2-84
show ssl-proxy vlan 2-85
snmp-server enable 2-86
ssl-proxy context 2-87
ssl-proxy crypto selftest 2-89
ssl-proxy mac address 2-90
ssl-proxy pki 2-91
ssl-proxy crypto key unlock rsa 2-93
ssl-proxy ip-frag-ttl 2-94
ssl-proxy ssl ratelimit 2-95
standby authentication 2-96
standby delay minimum reload 2-97
standby ip 2-99
standby mac-address 2-101
standby mac-refresh 2-103
standby name 2-104
standby preempt 2-105
standby priority 2-107
standby redirects 2-109
standby timers 2-111
standby track 2-113
standby use-bia 2-115
standby version 2-116
APPENDIX AAcronyms A-1
APPENDIX BAcknowledgments for Open-Source Software B-1
I NDEX

Contents
vi
Catalyst 6500 Series Switch SSL Services Module Command Reference
OL-9105-01

vii
Catalyst 6500 Series Switch SSL Services Module Command Reference
OL-9105-01
Preface
This preface describes the audience, organization, and conventions of this publication, and provides
information on how to obtain related documentation.
Audience
This publication is for experienced network administrators who are responsible for configuring and
maintaining Catalyst 6500 series switches.
Organization
This publication is organized as follows:
Related Documentation
The Catalyst 6500 series switch Cisco IOS documentation set includes these documents:
•Release Notes for Catalyst 6500 Series Switch SSL Services Module Release 3.x
•Catalyst 6500 Series Switch SSL Services Module Configuration Note
•Catalyst 6500 Series Switch SSL Services Module System Message Guide
•Catalyst 6500 Series Switch SSL Services Module Installation and Verification Note
•Catalyst 6500 Series Switch Cisco IOS Software Configuration Guide
Chapter Title Description
Chapter 1 Command-Line Interface Describes the Catalyst 6500 series switch
CLI.
Chapter 2 Commands for the Catalyst 6500
Series Switch SSL Services
Module
Lists alphabetically and provides detailed
information for commands specific to the
Catalyst 6500 series switch SSL Services
Module.
Appendix A Acronyms Defines the acronyms used in this
publication.

viii
Catalyst 6500 Series Switch SSL Services Module Command Reference
OL-9105-01
Preface
Conventions
The Cisco IOS documentation set includes these documents:
•Configuration Fundamentals Configuration Guide
•Command Reference
For information about MIBs, refer to this URL:
http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml
Conventions
This document uses the following conventions:
Convention Description
boldface font Commands, command options, and keywords are in boldface.
italic font Arguments for which you supply values are in italics.
[ ] Elements in square brackets are optional.
{ x | y | z } Alternative keywords are grouped in braces and separated by vertical
bars. Braces can also be used to group keywords and/or aguments; for
example, {interface interface type}.
[ x | y | z ] Optional alternative keywords are grouped in brackets and separated by
vertical bars.
string A nonquoted set of characters. Do not use quotation marks around the
string or the string will include the quotation marks.
screen font Terminal sessions and information the system displays are in screen font.
boldface screen
font
Information you must enter is in boldface screen font.
italic screen font Arguments for which you supply values are in italic screen font.
^ The symbol ^ represents the key labeled Control—for example, the key
combination ^D in a screen display means hold down the Control key
while you press the D key.
< > Nonprinting characters, such as passwords are in angle brackets.
[ ] Default responses to system prompts are in square brackets.
!, # An exclamation point (!) or a pound sign (#) at the beginning of a line of
code indicates a comment line.

ix
Catalyst 6500 Series Switch SSL Services Module Command Reference
OL-9105-01
Preface
Obtaining Documentation
Notes use the following conventions:
Note Means reader take note. Notes contain helpful suggestions or references to material not covered in
the publication.
Cautions use the following conventions:
Caution Means reader be careful. In this situation, you might do something that could result in equipment
damage or loss of data.
Obtaining Documentation
Cisco documentation and additional literature are available on Cisco.com. Cisco also provides several
ways to obtain technical assistance and other technical resources. These sections explain how to obtain
technical information from Cisco Systems.
Cisco.com
You can access the most current Cisco documentation at this URL:
http://www.cisco.com/techsupport
You can access the Cisco website at this URL:
http://www.cisco.com
You can access international Cisco websites at this URL:
http://www.cisco.com/public/countries_languages.shtml
Product Documentation DVD
Cisco documentation and additional literature are available in the Product Documentation DVD
package, which may have shipped with your product. The Product Documentation DVD is updated
regularly and may be more current than printed documentation.
The Product Documentation DVD is a comprehensive library of technical product documentation on
portable media. The DVD enables you to access multiple versions of hardware and software installation,
configuration, and command guides for Cisco products and to view technical documentation in HTML.
With the DVD, you have access to the same documentation that is found on the Cisco website without
being connected to the Internet. Certain products also have .pdf versions of the documentation available.
The Product Documentation DVD is available as a single unit or as a subscription. Registered Cisco.com
users (Cisco direct customers) can order a Product Documentation DVD (product number
DOC-DOCDVD=) from Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/

x
Catalyst 6500 Series Switch SSL Services Module Command Reference
OL-9105-01
Preface
Documentation Feedback
Ordering Documentation
Beginning June 30, 2005, registered Cisco.com users may order Cisco documentation at the Product
Documentation Store in the Cisco Marketplace at this URL:
http://www.cisco.com/go/marketplace/
Nonregistered Cisco.com users can order technical documentation from 8:00 a.m. to 5:00 p.m.
(0800 to 1700) PDT by calling 1 866 463-3487 in the United States and Canada, or elsewhere by
calling 011 408 519-5055. You can also order documentation by e-mail at
[e-mail] or by fax at 1 408 519-5001 in the United States and Canada,
or elsewhere at 011 408 519-5001.
Documentation Feedback
You can rate and provide feedback about Cisco technical documents by completing the online feedback
form that appears with the technical documents on Cisco.com.
You can send comments about Cisco documentation to [e-mail].
You can submit comments by using the response card (if present) behind the front cover of your
document or by writing to the following address:
Cisco Systems
Attn: Customer Document Ordering
170 West Tasman Drive
San Jose, CA 95134-9883
We appreciate your comments.
Cisco Product Security Overview
Cisco provides a free online Security Vulnerability Policy portal at this URL:
http://www.cisco.com/en/US/products/products_security_vulnerability_policy.html
From this site, you can perform these tasks:
•Report security vulnerabilities in Cisco products.
•Obtain assistance with security incidents that involve Cisco products.
•Register to receive security information from Cisco.
A current list of security advisories and notices for Cisco products is available at this URL:
http://www.cisco.com/go/psirt
If you prefer to see advisories and notices as they are updated in real time, you can access a Product
Security Incident Response Team Really Simple Syndication (PSIRT RSS) feed from this URL:
http://www.cisco.com/en/US/products/products_psirt_rss_feed.html