SNR S2989G-24TX-UPS — настройка функций безопасности и SSL на сетевых устройствах [338/553]

Превью страниц Страница 338 / 553

S2989G-24TX Operation Manual

Chapter 6 Security Function Configuration

6-65

ip http secure-ciphersuite

{des-cbc3-sha|rc4-128-sha|

des-cbc-sha}

no ip http secure-ciphersuite

Configure/delete secure cipher suite by

SSL used.

4. Maintenance and diagnose for the SSL function

Command

Explanation

Admin Mode or Configuration Mode

show ip http secure-server status

Show the configured SSL information.

debug ssl

no debug ssl

Open/close the DEBUG for SSL function.

6.7.3

SSL Typical Example

When the Web function is enabled on the switch, SSL can be configured for users to

access the web interface on the switch. If the SSL has been configured, communication

between the client and the switch will be encrypted through SSL for safety.

Firstly, SSL should be enabled on the switch. When the client tries to access the

switch through https method, a SSL session will be set up between the switch and the

client. When the SSL session has been set up, all the data transmission in the application

layer will be encrypted.

Web Server

Malicious Users

Date Acquisition

Fails

Web Browser https

SSLSession

Connected

PC Users

Configuration on the switch:

Switch(config)# ip http secure-server

Switch(config)# ip http secure-port 1025

Switch(config)# ip http secure-ciphersuite rc4-128-sha

6.7.4

SSL Troubleshooting