D-Link dgs-1510-28 [538/702] 8 ssl service policy

D-Link dgs-1510-28 [538/702] 8 ssl service policy
DGS-1510 Series Gigabit Ethernet SmartPro Switch CLI Reference Guide
535
Switch# show ssl-service-policy
SSL Policy Name : policy1
Enabled CipherSuites :
RSA_WITH_RC4_128_MD5,
RSA_WITH_3DES_EDE_CBC_SHA,
RSA_EXPORT_WITH_RC4_40_MD5
Session Cache Timeout: 600
Secure Trustpoint : TP1
SSL Policy Name : policy2
Enabled CipherSuites :
RSA_WITH_RC4_128_MD5,
RSA_WITH_3DES_EDE_CBC_SHA,
RSA_EXPORT_WITH_RC4_40_MD5
Session Cache Timeout: 1200
Secure Trustpoint : TP2
Switch#
58-8 ssl-service-policy
This command is used to configure the SSL service policy.
ssl-service-policy POLICY-NAME [ciphersuite [dhe-dss-3des-ede-cbc-sha] [rsa-3des-ede-cbc-
sha] [rsa-rc4-128-sha] [rsa-rc4-128-md5] [rsa-export-rc4-40-md5] | secure-trustpoint
TRUSTPOINT | session-cache-timeout TIME-OUT]
no ssl-service-policy POLICY-NAME [ciphersuite [dhe-dss-3des-ede-cbc-sha] [rsa-3des-ede-
cbc-sha] [rsa-rc4-128-sha] [rsa-rc4-128-md5] [rsa-export-rc4-40-md5] | secure-trustpoint |
session-cache-timeout]
Parameters
POLICY-NAME
Specifies the name of the SSL service policy.
ciphersuite
(Optional) Specifies the cipher suites that should be used by the
secure service when negotiating a connection with a remote peer.
dhe-dss-3des-ede-cbc-sha - Use DH key exchange with 3DES-EDE-
CBC encryption and SHA for message digest.
rsa-3des-ede-cbc-sha - Use RSA key exchange with 3DES and DES-
EDE3-CBC for message encryption and the Secure Hash Algorithm
(SHA) for message digest.
rsa-rc4-128-sha - Use RSA key exchange with RC4 128-bit encryption
for message encryption and SHA for message digest.
rsa-rc4-128-md5 - Use RSA key exchange with RC4 128-bit
encryption for message encryption and Message Digest 5 (MD5) for
message digest.
rsa-export-rc4-40-md5 - Use RSA EXPORT key exchange with RC4
40 bits for message encryption and MD5 for message digest.
When the cipher suite is not configured, the SSL client and server will
negotiate the best cipher suite that they both support from the list of
available cipher suites. Multiple cipher suites can be specified to be

Содержание

Скачать