Cisco CSS11501 - 100Mbps Ethernet Load Balancing Device, Руководство по настройке, Страница: 408 / 432

Appendix F SSL Introduction
Cisco SSL Configuration Components
F-8
Cisco 11000 Series Secure Content Accelerator Configuration Guide
78-13124-05
SSL devices are shipped without passwords. Setting passwords is important
because the device can be administered over a network. For more information
about passwords, see the commands password access and password enable in
Appendix C.
Access Lists
Access lists control which computers can attach to a specific device. No access
lists exist when you first install the Secure Content Accelerator. You can restrict
the computers allowed to manage the appliance by adding their IP addresses to
one or more access lists for each device. For more information about configuring
access lists, see the commands show access-list, access-list, snmp access-list,
telnet access-list, and web-mgmt access-list in Appendix C.
Factory Default Reset Password
If you have forgotten your access or enable password, you can use a factory-set
password during a serial configuration session. When prompted for a password,
enter FailSafe (case-sensitive). You are asked to confirm the action. The appliance
reboots (reloads) with factory default settings.
Caution All configuration is lost when using the factory default reset
password.
Cisco SSL Configuration Components
When you configure an appliance to perform SSL offloading you are actually
setting up one or more logical secure servers whose SSL-related configurations
reside in the appliance. Each logical secure server has several attributes:
• A unique IP address and TCP port for the real server providing content
•
An associated key specifying the public/private key pair to use
•
A single certificate or certificate group to use
•
A security policy specifying the cryptographic scheme(s) to use