Table Of Contents
Cisco 11500 Series Content Services Switch
Secure Socket Layer Module Reference
The Cisco 11500 series CSS Secure Socket Layer (SSL) module, model CSS5-SSL-K9, or the SSL compression module (SSL-C), model CSS5-SSL-C-K9, operates as an SSL server by adding security services between the Web browsers (the client) and HTTP servers. The SSL module is responsible for all user authentication, public/private key generation, certificate management, and packet encryption and decryption functions between the client and the server. Each SSL module terminates SSL connections received from a client.
In addition to performing SSL functions, an SSL-C module provides HTTP data compression capability. You can use SSL-C modules in place of or along with existing SSL modules.
Figure 1 shows the SSL or SSL-C module.
Figure 1 SSL or SSL-C Module
Bicolor status LED (green or red)
Spring-loaded screws (one of two)
Amber status LED
Ejectors (one of two)
For information on SSL commands and functions, and configuring HTTP compression, refer to the Cisco Content Services Switch SSL Configuration Guide.
Note Before you remove or install a module, make sure you properly ground yourself prior to handling the module. For example, wear an antistatic wrist strap (included in the kit with the module) and stick the copper-tape end of the strap to an unpainted metal surface on the chassis. Make sure that the wrist strap makes good contact with your skin.
Removing a Module
Caution You must power down the CSS before you remove a module. If you remove a powered-on module from an operational CSS, the CSS terminates all communications and reboots.
To remove a module (see Figure 1):
1. Locate the failed module (its status LEDs are off). Use the show chassis command to verify that the module is powered off.
2. If necessary, power down the CSS.
3. Use a Phillips screwdriver to loosen the spring-loaded screws on the front of the module faceplate.
4. Extend both ejectors simultaneously to unseat the module connector from the backplane and slide the module out of the slot.
Installing a Module
To install a module (see Figure 1):
1. Ground yourself properly prior to handling the module, as noted on the previous page.
2. If you are upgrading the CSS by adding a module, locate an open slot in the chassis. SSL and SSL-C modules are restricted to slots 2 and 3 in a CSS 11503, and slots 2 through 6 in a CSS 11506. If necessary, remove a blank panel from the chassis to expose a slot for the module.
You can use SSL and SSL-C modules in the same CSS chassis. You can use an SSL-C modules in place of existing SSL modules.
3. Insert the module into the board guides at the left and right sides of the slot, and then slide the module into the chassis by pressing firmly at the left and right sides of the faceplate.
4. Close both ejectors simultaneously to seat the module connector into the backplane.
5. Use a Phillips screwdriver to tighten the spring-loaded screws on the front of the module faceplate.
6. Reboot the CSS.
Table 1 describes the LEDs on the SSL or SSL-C module and their possible states.
Related CLI Commands
To view the current state of the module and to verify that it is powered on, use the show chassis command.