Digi IX10 User Manual page 263

Services
To limit access based on firewall zones:
n
a. Click Zones.
b. For Add Zone, click .
c. For Zone, select the appropriate firewall zone from the dropdown.
d. Click  again to allow access through additional firewall zones.
6. Multicast DNS (mDNS) is enabled by default. mDNS is a protocol that resolves host names in
small networks that do not have a DNS server. To disable mDNS, or enable it if it has been
disabled, click Enable mDNS.
7. For SSL certificate, if you have your own signed SSL certificate, paste the certificate and
private key. If SSL certificate is blank, the device will use an automatically-generated, self-
signed certificate.
The SSL certificate and private key must be in PEM format.
n
The private key can use one of the following algorithms:
n
l
l
l
l
Example:
a. Generate the SSL certificate and private key, for example:
# openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 365 -
out certificate.pem
b. Paste the contents of certificate.pem and key.pem into the SSL certificate field. The
contents of the certificate.pem must be first. For example:
8. For Allow legacy encryption protocols, enable this option to allow clients to connect to the
HTTPS session by using encryption protocols older than TLS 1.2, in addition to TLS 1.2 and later
IX10 User Guide
See Firewall configuration
RSA
DSA
ECDSA
ECDH
Note Password-protected certificate keys are not supported.
Configure the web administration service
for information about firewall zones.
263