Qtech QSW-8200-28F-AC-DC — настройка SSL: команды и примеры использования [75/114]

Превью страниц Страница 75 / 114

User Manual

Chapter 6. Commands for SSL Configuration 75

www.qtech.ru

Chapter 6 COMMANDS FOR SSL CONFIGURATION

6.1 ip http secure-server

 Command: ip http secure-server

 no ip http secure-server

 Function: Enable/disable SSL function.

 Parameter: None.

 Command Mode: Global Mode.

 Default: Disabled.

 Usage Guide: This command is used for enable and disable SSL function. After enable

SSL function, the users visit the switch through https client, switch and client use SSL

connect, can form safety SSL connect channel. After that, all the data which transmit of

the application layer will be encrypted, then ensure the privacy of the communication.

 Example: Enable SSL function.

 Switch(config)#ip http secure-server

6.2 ip http secure-port

 Command: ip http secure-port <port-number>

 no ip http secure-port

 Function: Configure/delete port number by SSL used.

 Parameter: <port-number> means configured port number, range between 1025 and

65535. 443 is for default.

 Command Mode: Global Mode.

 Default: Not configure.

 Usage Guide: If this command is used to configure the port number, then the

configured port number is used to monitor. If the port number for https is changed,

when users try to use https to connect, must use the changed one. For example:

https://device:port_number. SSL function must reboot after every change.

 Example: Configure the port number is 1028.

 Switch(config)#ip http secure-port 1028

6.3 ip http secure- ciphersuite

 Command: ip http secure-ciphersuite {des-cbc3-sha|rc4-128-sha| des-cbc-sha}

 no ip http secure-ciphersuite

 Function: Configure/delete secure cipher suite by SSL used.

 Parameter: des-cbc3-sha encrypted algorithm DES_CBC3, summary algorithm SHA.

 rc4-128-sha encrypted algorithm RC4_128, summary algorithm SHA.