!************************* INTERFACE *************************
interface e2
  bridge vlan 10 

!************************** CIRCUIT **************************
circuit VLAN1

  ip address 10.10.50.2 255.255.255.0 
    ip virtual-router 1 priority 110 preempt 
    ip redundant-interface 1 10.10.50.1 
    ip redundant-vip 1 10.10.50.10 

circuit VLAN10

  ip address 10.10.10.253 255.255.255.0 
    ip virtual-router 2 priority 110 preempt 
    ip redundant-interface 2 10.10.10.254 

!*********************** SSL PROXY LIST ***********************
ssl-proxy-list ssl-list1 
  ssl-server 20 
  ssl-server 20 vip address 10.10.50.10 
  ssl-server 20 rsacert tradency-cert 
  ssl-server 20 rsakey tradencyprivatekey 
  ssl-server 20 cipher rsa-with-rc4-128-md5 10.10.10.10 80 
  active 

!************************** SERVICE **************************
service ssl-server 
  type ssl-accel 
  slot 2 
  keepalive type none 
  add ssl-proxy-list ssl-list1 
  active 

service www-server1 
  ip address 10.10.10.1 
  string 1 
  keepalive type tcp 
  keepalive port 80 
  active 

service www-server2 
  ip address 10.10.10.2 
  string 2 
  keepalive type tcp 
  keepalive port 80 
  active 

service www-server3 
  ip address 10.10.10.3 
  string 3 
  keepalive type tcp 
  keepalive port 80 
  active 

service www-server4 
  ip address 10.10.10.4 
  string 4 
  keepalive type tcp 
  keepalive port 80 
  active 

service www-server5 
  ip address 10.10.10.5 
  string 5 
  keepalive type tcp 
  keepalive port 80 
  active 

service www-server6 
  ip address 10.10.10.6 
  string 6 
  keepalive type tcp 
  keepalive port 80 
  active 
         
!*************************** OWNER ***************************
owner ssl_owner 

  content decrypted_WWW 
    vip address 10.10.10.10 
    add service www-server1 
    add service www-server2 
    add service www-server3 
    add service www-server4 
    add service www-server5 
    add service www-server6 
    string prefix "W" 
    balance leastconn 
    protocol tcp 
    port 80 
    url "/*" 
    advanced-balance sticky-srcip 
    active 

  content ssl_rule1 
    vip address 10.10.50.10 
    protocol tcp 
    port 443 
    add service ssl-server 
    active 
    
    content www-servers 
    vip address 10.10.50.10 
    add service www-server1 
    add service www-server2 
    add service www-server3 
    add service www-server4 
    add service www-server5 
    add service www-server6 
    string prefix "W" 
    protocol tcp 
    port 80 
    url "/*" 
    advanced-balance sticky-srcip 
    active 
_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

Reply via email to