Lenovo ThinkSystem NE2552E Application Manual page 52

52
NE2552E Application Guide for ENOS 8.4
 Only protocols/algorithms compliant with NIST SP 800‐131A specification are
used/enabled on the switch. Please see the NIST SP 800‐131A publication for
details. The following table lists the acceptable protocols and algorithms:
Table 4.
Acceptable Protocols and Algorithms
Protocol/Function Strict Mode Algorithm
BGP BGP does not comply with NIST SP
800-131A specification. When in strict
mode, BGP is disabled. However, it can
be enabled, if required.
Certificate RSA-2048
Generation SHA-256
Certificate RSA 2048 or higher
Acceptance SHA 224 or higher
HTTPS TLS 1.2 only
See
page
IKE
Key Exchange DH Group 24
Encryption 3DES, AES-128-CBC
Integrity HMAC-SHA1
IPSec
AH HMAC-SHA1
ESP 3DES, AES-128-CBC, HMAC-SHA1 3DES, AES-128-CBC,
LDAP LDAP does not comply with NIST SP
800-131A specification. When in strict
mode, LDAP is disabled. However, it
can be enabled, if required.
OSPF OSPF does not comply with NIST SP
800-131A specification. When in strict
mode, OSPF is disabled. However, it
can be enabled, if required.
RADIUS RADIUS does not comply with NIST
SP 800-131A specification. When in
strict mode, RADIUS is disabled. How-
ever, it can be enabled, if required.
Random Number NIST SP 800-90A AES CTR DRBG
Generator
Secure NTP Secure NTP does not comply with
NIST SP 800-131A specification.
When in strict mode, secure NTP is dis-
abled. However, it can be enabled, if
required.
SLP SHA-256 or higher
RSA/DSA 2048 or higher
"Acceptable Cipher Suites" on
54;
Compatibility Mode Algorithm
Acceptable
RSA 2048
SHA 256
RSA
SHA, SHA2
TLS 1.0, 1.1, 1.2
See "Acceptable Cipher Suites" on
page 54;
DH group 1, 2, 5, 14, 24
3DES, AES-128-CBC
HMAC-SHA1, HMAC-MD5
HMAC-SHA1, HMAC-MD5
HMAC-SHA1, HMAC-MD5
Acceptable
Acceptable
Acceptable
NIST SP 800-90A AES CTR DRBG
Acceptable