Developer Documentation
ADC CLI Commands
Current Release 13.1 13.0 12.1

ssl-global

May 28, 2024
Contributed by: 
C

The following operations can be performed on “ssl-global”:

unbind bind show

unbind ssl global

Unbinds a globally bound SSL policy.

Synopsis

unbind ssl global [-policyName [-type ] [-priority ]]

Arguments

policyName Name of the SSL policy to unbind.

type Global bind point from which the policy is to be unbound.

Possible values: CONTROL_OVERRIDE, CONTROL_DEFAULT, DATA_OVERRIDE, DATA_DEFAULT, HTTPQUIC_CONTROL_OVERRIDE, HTTPQUIC_CONTROL_DEFAULT, HTTPQUIC_DATA_OVERRIDE, HTTPQUIC_DATA_DEFAULT

priority Priority of the NOPOLICY (built-in policy) to be unbound. Not required if you are unbinding a user-defined policy. Minimum value: 1 Maximum value: 2147483647

Example

unbind ssl global -policyName certInsert_pol

bind ssl global

Binds an SSL policy globally.

Synopsis

bind ssl global [-policyName ] [-priority ] [-gotoPriorityExpression ] [-type ] [-invoke ( ) ]

Arguments

policyName Name of the SSL policy.

priority Integer specifying the policy’s priority. The lower the number, the higher the priority. Minimum value: 1 Maximum value: 2147483647

gotoPriorityExpression Expression or other value specifying the next policy to be evaluated if the current policy evaluates to TRUE. Specify one of the following values:

  • NEXT - Evaluate the policy with the next higher priority number.
  • END - End policy evaluation.
  • USE_INVOCATION_RESULT - Applicable if this policy invokes another policy label. If the final goto in the invoked policy label has a value of END, the evaluation stops. If the final goto is anything other than END, the current policy label performs a NEXT.
  • An expression that evaluates to a number. If you specify an expression, the number to which it evaluates determines the next policy to evaluate, as follows:
  • If the expression evaluates to a higher numbered priority, the policy with that priority is evaluated next.
  • If the expression evaluates to the priority of the current policy, the policy with the next higher numbered priority is evaluated next.
  • If the expression evaluates to a number that is larger than the largest numbered priority, policy evaluation ends. An UNDEF event is triggered if:
  • The expression is invalid.
  • The expression evaluates to a priority number that is numerically lower than the current policy’s priority.
  • The expression evaluates to a priority number that is between the current policy’s priority number (say, 30) and the highest priority number (say, 100), but does not match any configured priority number (for example, the expression evaluates to the number 85). This example assumes that the priority number increments by 10 for every successive policy, and therefore a priority number of 85 does not exist in the policy label. Default value: “END”

type Global bind point to which to bind the policy. If CONTROL_OVERRIDE or DATA_OVERRIDE is selected, the global control or data policy overrides the control or data policy bound to the virtual server or service.

Possible values: CONTROL_OVERRIDE, CONTROL_DEFAULT, DATA_OVERRIDE, DATA_DEFAULT, HTTPQUIC_CONTROL_OVERRIDE, HTTPQUIC_CONTROL_DEFAULT, HTTPQUIC_DATA_OVERRIDE, HTTPQUIC_DATA_DEFAULT

invoke Invoke policies bound to a virtual server, service, or policy label. After the invoked policies are evaluated, the flow returns to the policy with the next priority.

labelType Type of policy label to invoke. Specify virtual server for a policy label associated with a virtual server, or policy label for a user-defined policy label.

Possible values: vserver, service, policylabel

labelName Name of the virtual server or user-defined policy label to invoke if the policy evaluates to TRUE.

Example

bind ssl global -policyName certInsert_pol -priority 100

show ssl global

Displays globally bound SSL policies.

Synopsis

show ssl global [-type ]

Arguments

type Global bind point to which the policy is bound.

Possible values: CONTROL_OVERRIDE, CONTROL_DEFAULT, DATA_OVERRIDE, DATA_DEFAULT, HTTPQUIC_CONTROL_OVERRIDE, HTTPQUIC_CONTROL_DEFAULT, HTTPQUIC_DATA_OVERRIDE, HTTPQUIC_DATA_DEFAULT

Output

stateflag policyName The name for the SSL policy.

priority The priority of the policy binding.

gotoPriorityExpression Expression specifying the priority of the next policy which will get evaluated if the current policy rule evaluates to TRUE

invoke Invoke flag. This attribute is relevant only for ADVANCED policies

labelType Type of policy label invocation.

labelName Name of the label to invoke if the current policy rule evaluates to TRUE.

numpol The number of policies bound to the bindpoint.

globalBindType devno count

Example

show ssl global 1 Globally Active SSL Policy: 1) Name: certInsert_pol Priority: 100

ssl-global
May 28, 2024
Contributed by: 
C
May 28, 2024
Contributed by: 
C

In this article

Site feedback | Your privacy choices footer linkYour Privacy Choices | Privacy and legal terms | Cookie preferences | Consent settings | docs.cloud.com
© 1999- Cloud Software Group, Inc. All rights reserved.