Nortel 3050 Command Reference Manual page 99

Table 24
SSL Settings Menu Options (/cfg/ssl/server/ssl) (cont'd.)
Command Syntax and Usage
ciphers <cipher list>
ena
dis
/cfg/ssl/server <id> /tcp TCP Settings Configuration
[TCP Settings Menu]
cwrite - Set client TCP write timeout
ckeep - Set client TCP keep alive timeout
skeep - Set socks client TCP keep alive heartbeat timeout
swrite - Set server TCP write timeout
sconnect - Set server TCP connect timeout
csendbuf - Set client TCP send buffer size
crecbuf - Set client TCP receive buffer size
ssendbuf - Set server TCP send buffer size
srecbuf - Set server TCP receive buffer size
Copyright © 2007 Nortel Networks
.
/cfg/ssl/server <id> /tcp TCP Settings Configuration 99
Specifies the level of client authentication to use when establishing an SSL
session. Valid options are:
•
none: No client certificate is required.
•
optional: A client certificate is requested, but the client need not present
one.
•
require: The client must present a valid certificate to establish a
session.
The default verify value is none.
Lets you change the default cipher preference list, which corresponds to
ALL@STRENGTH.
For more information about cipher lists, see the "Cipher List Formats"
section in Appendix A, Supported Ciphers, in the User's Guide.
Enables SSL on the current virtual SSL server. By default, SSL is enabled
on all virtual SSL servers.
Disables SSL on the current virtual SSL server.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007