Ciphersuite - D-Link DES-3526 Manual

Parameter
Certificate Type
Server IP
Certificate File Name
Key File Name

Ciphersuite

This window will allow the user to enable SSL on the Switch and implement any one or combination
of listed ciphersuites on the Switch. A ciphersuite is a security string that determines the exact
cryptographic parameters, specific encryption algorithms and key sizes to be used for an
authentication session. The Switch possesses four possible ciphersuites for the SSL function, which
are all enabled by default. To utilize a particular ciphersuite, disable the unwanted ciphersuites,
leaving the desired one for authentication.
When the SSL function has been enabled, the web will become disabled. To manage the Switch
through the web based management while utilizing the SSL function, the web browser must support
SSL encryption and the header of the URL must begin with https://. (Ex. https://10.90.90.90) Any
other method will result in an error and no access can be authorized for the web-based management.
To view the following window, click Configuration > Secure Socket Layer (SSL) > Configuration:
To set up the SSL function on the Switch, configure the following parameters and click Apply.
Parameter
RSA with RC4 128
MD5
RSA with 3DES EDE
CBC SHA
DHS DSS with 3DES
DES-3526 / DES-3526DC Fast Ethernet Layer 2 Switch
Description
Enter the type of certificate to be downloaded. This type refers to the server
responsible for issuing certificates. This field has been limited to local for this firmware
release.
Enter the IP address of the TFTP server where the certificate files are located.
Enter the path and the filename of the certificate file to download. This file must have
a .der extension. (Ex. c:/cert.der)
Enter the path and the filename of the key file to download. This file must have a .der
extension (Ex. c:/pkey.der)
Figure 7- 21. Ciphersuite window
Description
This ciphersuite combines the RSA key exchange, stream cipher RC4 encryption with
128-bit keys and the MD5 Hash Algorithm. Use the pull-down menu to enable or
disable this ciphersuite. This field is Enabled by default.
This ciphersuite combines the RSA key exchange, CBC Block Cipher 3DES_EDE
encryption and the SHA Hash Algorithm. Use the pull-down menu to enable or disable
this ciphersuite. This field is Enabled by default.
This ciphersuite combines the DSA Diffie Hellman key exchange, CBC Block Cipher
135