D-Link DWS-3160-24TC Reference Manual page 244

DWS-3160 Series Gigabit Ethernet Unified Switch Web UI Reference Guide
Users can download a certificate file for the SSL function on the Switch from a TFTP server. The certificate file is a
data record used for authenticating devices on the network. It contains information on the owner, keys for
authentication and digital signatures. Both the server and the client must have consistent certificate files for optimal
use of the SSL function. The Switch only supports certificate files with .der file extensions. Currently, the Switch
comes with a certificate pre-loaded though the user may need to download more, depending on user
circumstances.
To view this window, click Security > SSL Settings as shown below:
To set up the SSL function on the Switch, configure the parameters in the SSL Settings section described.
The fields that can be configured are described below:
Parameter
SSL Status
Cache Timeout (60-
86400)
Click the Apply button to accept the changes made.
To set up the SSL cipher suite function on the Switch, configure the parameters in the SSL Cipher suite Settings
section described below:
Parameter
RSA with
RC4_128_MD5
RSA with 3DES EDE
CBC SHA
DHS DSS with 3DES
EDE CBC SHA
RSA EXPORT with RC4
40 MD5
Figure 11-60 SSL Settings window
Description
Use the radio buttons to enable or disable the SSL status on the Switch. The default
is Disabled.
This field will set the time between a new key exchange between a client and a host
using the SSL function. A new SSL session is established every time the client and
host go through a key exchange. Specifying a longer timeout will allow the SSL
session to reuse the master key on future connections with that particular host,
therefore speeding up the negotiation process. The default setting is 600 seconds.
Description
This cipher suite combines the RSA key exchange, stream cipher RC4 encryption
with 128-bit keys and the MD5 Hash Algorithm. Use the radio buttons to enable or
disable this cipher suite. This field is Enabled by default.
This cipher suite combines the RSA key exchange, CBC Block Cipher 3DES_EDE
encryption and the SHA Hash Algorithm. Use the radio buttons to enable or disable
this cipher suite. This field is Enabled by default.
This cipher suite combines the DSA Diffie Hellman key exchange, CBC Block
Cipher 3DES_EDE encryption and SHA Hash Algorithm. Use the radio buttons to
enable or disable this cipher suite. This field is Enabled by default.
This cipher suite combines the RSA Export key exchange and stream cipher RC4
encryption with 40-bit keys. Use the radio buttons to enable or disable this cipher
239