Configuring SSL forwarding profiles


This section is located at the libraries ssl-forwarding-profiles level.

To create a forwarding profile, use the following command:

Admin@nodename# create libraries ssl-forwarding-profiles <parameter>

Specify the following parameters:

Parameter

Description

name

The name of the SSL forwarding profile.

description

Forwarding profile description.

type

Forwarding type:

  • l2. configured by specifying the device's MAC address and the name of the interface to which the copied traffic should be redirected.

  • l3. Copy of decrypted traffic is forwarded via a GRE tunnel. This option is configured by specifying the source and destination IP addresses for the GRE tunnel.

mac

Destination MAC address (specify when using L2 forwarding type).

iface

UserGate interface that will forward the traffic (specify when using L2 forwarding type).

source-ip

GRE IP address of the source (specify when using L3 forwarding type).

dest-ip

GRE IP address of the destination (specify when using L3 forwarding type).

To update forwarding profile parameters, use the following command:

Admin@nodename# set libraries ssl-forwarding-profiles <profile-name> <parameter>

To delete a profile, use the following command:

Admin@nodename# delete libraries ssl-forwarding-profiles <profile-name>

To display information about all or individual forwarding profiles, use the following commands:

Admin@nodename# show libraries ssl-forwarding-profiles Admin@nodename# show libraries ssl-forwarding-profiles <profile-name>