Brocade Communications Systems ServerIron ADX 12.4.00a - Manual (Page 199)

ServerIron ADX Security Guide 185
53-1002440-03
Configuration Examples for SSL Termination and Proxy Modes
6
ServerIronADX(config)# server real rs1
ServerIronADX(config-rs-rs1)# port pop3
ServerIronADX(config-rs-rs1)# port imap4
ServerIronADX(config-rs-rs1)# port ldap
ServerIronADX(config-rs-rs1)# exit
ServerIronADX(config)#
ServerIronADX(config)# server real rs2
ServerIronADX(config-rs-rs2)# port pop3
ServerIronADX(config-rs-rs2)# port imap4
ServerIronADX(config-rs-rs2)# port ldap
ServerIronADX(config-rs-rs2)# exit
ServerIronADX(config)#
ServerIronADX(config)# server virtual-name-or-ip vip1
ServerIronADX(config-vs-vip1)# port pop3s
ServerIronADX(config-vs-vip1)# port pop3s ssl-terminate sslprof
ServerIronADX(config-vs-vip1)# bind pop3s rs1 pop3 rs2 pop3
ServerIronADX(config-vs-vip1)# exit
ServerIronADX(config)#
ServerIronADX(config)# server virtual-name-or-ip vip1
ServerIronADX(config-vs-vip1)# port imaps
ServerIronADX(config-vs-vip1)# port imaps ssl-terminate sslprof
ServerIronADX(config-vs-vip1)# bind imaps rs1 imap4 rs2 imap4
ServerIronADX(config-vs-vip1)#
ServerIronADX(config-vs-vip1)# port ldaps
ServerIronADX(config-vs-vip1)# port ldaps ssl-terminate sslprof
ServerIronADX(config-vs-vip1)# bind ldaps rs1 ldap rs2 ldap
ServerIronADX(config-vs-vip1)# exit
ServerIronADX(config)#
Configuring the system max values
This section describes how to configure the following system max values on a ServerIron ADX:
• SSLv2 connection rate
• Memory limit for SSL hardware buffers
• Number of SSL profiles
• Maximum number of SSL concurrent connections
NOTE
Setting all of the system-max values to their maximum value is not advisable as it consumes a large
amount of system memory. Please set these values only if necessary.
Configuring SSLv2 connection rate
You can configure the maximum connection rate for SSLv2, as shown in the following example.
ServerIronADX(config)# ssl-v2-rate <num-conn-per-sec>
Syntax: ssl-v2-rate <num-conn-per-sec>
The <num-conn-per-sec> variable sets the maximum connections for SSLv2 allowed per second.
Valid range: 16 to 256
Default: 100