Specifying an SSL policy
Specifying an SSL client policy enables the LB device (SSL client) to send encrypted traffic to an SSL server.
Specifying an SSL server policy enables the LB device (SSL server) to send encrypted traffic to an SSL client.
You must disable and then enable a virtual server for a modified SSL policy to take effect.
To specify an SSL policy:
Step | Command | Remarks |
|---|---|---|
1. Enter system view. | system-view | N/A |
2. Enter HTTP virtual server view. | virtual-server virtual-server-name | N/A |
3. Specify an SSL client policy for the virtual server. | ssl-client-policy policy-name | By default, the virtual server does not reference any SSL client policies. The virtual servers of the fast HTTP type do not support this command. |
4. Specify an SSL server policy for the virtual server. | ssl-server-policy policy-name | By default, the virtual server does not reference any SSL server policies. The virtual servers of the fast HTTP type do not support this command. |