Nortel 3050 Command Reference Manual page 290

290 Command Reference
/cfg/vpn <id> /server/adv/sslconnect SSL Connection
Configuration
[SSL Connect Settings Menu]
protocol - Set protocol version
cert - Set client certificate
ciphers - Set accepted ciphers for ssl connect
verify - Verify server menu
The SSL Connect Settings menu is used for configuring the SSL protocol,
the preferred cipher list, and client authentication for SSL connections
between the VPN Gateway(s) and the backend servers.
Table 103
SSL Connect Settings Menu Options (/cfg/vpn/server/adv/sslconnect)
Command Syntax and Usage
protocol ssl2|ssl3|ssl23|tls1
cert <client certificate by index number>
Copyright © 2007 Nortel Networks
.
Specifies the protocol the virtual SSL server should propose when
establishing an SSL session with an SSL-enabled backend server.
Valid options are:
•
ssl2: Propose using only SSL 2.0.
•
ssl3: Propose using SSL 3.0 or TLS 1.0.
•
ssl23: Propose using any of SSL 2.0, SSL 3.0, or TLS 1.0.
•
tls1: Propose using only TLS 1.0.
The default protocol value is ssl3.
Specifies which client certificate the selected virtual SSL server should
present to the backend servers, in case the SSL software on the
backend servers is configured to require a client certificate. Client
authentication is typically very seldom used for SSL connections
between the VPN Gateways and the backend servers, as the client is
known in these circumstances.
To view basic information about available certificates, use the
/info/certs command. To generate a client certificate, see the
"Generating Client Certificates" section in the "Certificates and Client
Authentication" chapter in the User's Guide.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007