SSL module (6500) certificates

[lyiangou]

I have to configure CSM/SSL modules for 3 VIP and 10 servers. I will be using Verisign certificates. Should my certificate requests (CSR) be specific for SSL modules? What kind of certificates should I request for SSL modules. What will be the best way to import them into SSL. Will the manual enrolment be the best way?

Thanks

Loizos

ylouis2@aol.com

[Gilles Dufour]

Verisign does not have a Cisco entry but one that does work with Cisco is 'Apache'.

Manual enrollment is the easiest - copy-paste.

No need for network connectivity or firewall permission.

Gilles.

[lyiangou]

Gilles,

Thank you for the reply.

Have you ever work with loadbalancing peoplesoft servers? Just looking for someone that is done it to compaire my configs before applying them. I mainly want to compaire timers (ex.tcp probes) and stickiness commands to see what works best with peoplesoft. I will appreciate any input, or sample configs. What will be the best monitoring commands (looking to find the equivalent CSM command for sho summary (CSS) to see the number of hits. Do you have any idea?

Thanks again.

Loizos

ylouis2@aol.com

[Gilles Dufour]

Loizos,

all I can answer is the monitoring command.

Use 'sho mod csm vserver' to see the current active connections.

To see hits, you need to play with the grep function of the ios.

The following commands should work

'show mod csm vserver detail | i v_index|conns'

Regards,

Gilles.