beautypg.com

Configuration example, Configuring the real servers for ssl, Adjusting the age timer – Brocade Virtual ADX Server Load Balancing Guide (Supporting ADX v03.1.00) User Manual

Page 317

background image

Brocade Virtual ADX Server Load Balancing Guide

301

53-1003247-01

Setting up SSL session ID switching

5

Configuration Example

Configuring the real servers for SSL

To configure the real servers for SSL shown in

Figure 34

, enter commands such as the following.

Virtual ADX(config)#server real-name rs10 10.157.22.10

Virtual ADX(config-rs-rs10)#port ssl

Virtual ADX(config-rs-rs10)#exit

Virtual ADX(config)#server real-name rs20 10.157.22.20

Virtual ADX(config-rs-rs20)#port ssl

Virtual ADX(config-rs-rs20)#exit

Syntax: server real-name real-server-name ip-addr

Syntax: port ssl

The server real-name command defines the names and IP addresses of the real servers.

The port ssl command adds port 443 (SSL) to the real servers.

Configuring the virtual server for SSL session ID switching

The following commands enable SSL Session ID switching on a virtual server called sslVIP.

Virtual ADX(config)#server virtual-name-or-ip sslVIP 10.157.22.241

Virtual ADX(config-vs-sslVIP)#port ssl session-id-switching

Virtual ADX(config-vs-sslVIP)#bind ssl rs10 ssl

Virtual ADX(config-vs-sslVIP)#bind ssl rs20 ssl

Syntax: port ssl session-id-switching

Syntax: port port-number session-id-switching

Syntax: bind ssl real-server-name ssl

The port ssl session-id-switching command enables SSL Session ID switching on this virtual server.

The bind ssl ssl command binds the virtual server to SSL services on the real servers. In this
example, the commands associate real servers rs10 and rs20 with the virtual server.

NOTE

For clarity, the bindings in the example are shown as two separate entries. Alternatively, you can
enter all the binding information as one command: for example, bind ssl rs10 ssl rs20 ssl.

Adjusting the age timer

By default, the Brocade Virtual ADX keeps the entry associating a session_id with a real server in
its database for 30 minutes. After 30 minutes, the entry ages out of the database. You can change
the length of time the Brocade Virtual ADX keeps the entry in the database,

To change the aging period from its default of 30 minutes to 10 minutes, enter a command such as
the following.

Virtual ADX(config)#server session-id-age 10

Syntax: [no] server session-id-age minutes

The minutes variable is defined in minutes within the range from 2 through 60.