SSL Global Service Configuration Mode Commands


SSL global service lets you enable and configure basic SSL acceleration settings on your WAAS system. To configure global services on a WAAS device, use the crypto ssl services global-settings global configuration command. To delete a parameter use the no form of the command.

crypto ssl services global-settings

no crypto ssl services global-settings

Syntax Description

This command has no arguments or keywords.

Defaults

No default behavior or values.

Command Modes

global configuration

Device Modes

application-accelerator

central-manager

Usage Guidelines

Use the crypto ssl services global-settings command to configure basic SSL acceleration settings. The crypto ssl services global-settings command initiates SSL global service configuration mode, as indicated by the following prompt:

WAE(config-ssl-global)#
 
   

Within SSL global service configuration mode, you can use SSL global service configuration commands. To return to global configuration mode, enter exit at the SSL global service configuration mode prompt.

Examples

The following example shows how to enter SSL global service configuration mode:

WAE(config)# crypto ssl services global-settings
WAE(config-ssl-global)# exit
WAE(config)# 
 
   

Related Commands

(config-ssl-global) cipher-list

(config-ssl-global) machine-cert-key

(config-ssl-global) version

(config-ssl-global) cipher-list

To configure secure socket layer (SSL) encryption cipher lists on a WAAS device, use the cipher-list command. To delete a cipher list use the no form of the command.

cipher-list cipher-list-name

no cipher-list cipher-list-name

Syntax Description

cipher-list-name

Name of the cipher list you want to create or edit. The cipher list name may contain up to 64 characters.


Defaults

No default behavior or values.

Command Modes

SSL global service configuration

Device Modes

application-accelerator

central-manager

Usage Guidelines

A cipher list is customer list of cipher suites that you assign to an SSL connection. (See the SSL Cipher List Configuration Mode Commands chapter for more information.)

Examples

The following example shows how to enter SSL global service configuration mode, and then create or edit a cipher list called myciphers. If the cipher list is already established on the WAAS device, the cipher-list command edits it. If the cipher list does not exist, the cipher-list command creates it:

WAE(config)# crypto ssl services management-service
WAE(config-ssl-global)# cipher-list myciphers
 
   

Related Commands

(config) crypto ssl

(config-ssl-global) machine-cert-key

To configure a certificate and private key, use the machine-cert-key command.

machine-cert-key filename

Syntax Description

filename

Filename of the certificate and key. Must be in PKCS#12 and have a ".p12" extension.


Defaults

No default behavior or values.

Command Modes

SSL global service configuration

Device Modes

application-accelerator

central-manager

Examples

The following example shows how to enter SSL global service configuration mode, and then import a certificate and key:

WAE(config)# crypto ssl services global-settings
WAE(config-ssl-global)# machine-cert-key cert.p12
 
   

Related Commands

(config) crypto ssl

(config-ssl-global) version

To specify the type of SSL protocol to use for global services, use the version command.

version {all | ssl3 | tls1}

Syntax Description

version {all | ssl3 | tls1}

Specifies SSL3 for the SSL version 3 protocol, TLS1 for the Transport Layer Security version 1 protocol, or All to use both SSL3 and TLS1 SSL protocols.


Defaults

No default behavior or values.

Command Modes

SSL global service configuration

Device Modes

application-accelerator

central-manager

Examples

The following example shows how to enter SSL global service configuration mode, and then set the protocol to SSL version 3:

WAE(config)# crypto ssl global-settings
WAE(config-ssl-global)# version SSL3
 
   

Related Commands

(config) crypto ssl