Prefer-Cipher - H3C MSR 20-20 Command Reference Manual

View
Parameter
Description
Example

prefer-cipher

Syntax
View
Parameter
undo pki-domain
SSL server policy view/SSL client policy view
domain-name: Name of a PKI domain, a string of 1 to 15 characters.
Use the command to specify a PKI domain for an SSL server policy or
pki-domain
SSL client policy.
Use the
undo pki-domain
By default, no PKI domain is configured for an SSL server policy or SSL client policy
by default.
# Configure SSL server policy policy1 to use the PKI domain named server-domain.
<Sysname> system-view
[Sysname] ssl server-policy policy1
[Sysname-ssl-server-policy-policy1] pki-domain server-domain
# Configure SSL client policy policy1 to use the PKI domain named client-domain.
<Sysname> system-view
[Sysname] ssl client-policy policy1
[Sysname-ssl-client-policy-policy1] pki-domain client-domain
prefer-cipher { rsa_3des_ede_cbc_sha | rsa_aes_128_cbc_sha |
rsa_aes_256_cbc_sha | rsa_des_cbc_sha | rsa_rc4_128_md5 | rsa_rc4_128_sha }
undo prefer-cipher
SSL client policy view
rsa_3des_ede_cbc_sha: Specifies the key exchange algorithm of RSA, the data
encryption algorithm of 3DES_EDE_CBC, and the MAC algorithm of SHA. Support
for this keyword varies by device.
rsa_aes_128_cbc_sha: Specifies the key exchange algorithm of RSA, the data
encryption algorithm of 128-bit AES_CBC, and the MAC algorithm of SHA.
rsa_aes_256_cbc_sha: Specifies the key exchange algorithm of RSA, the data
encryption algorithm of 256-bit AES_CBC, and the MAC algorithm of SHA.
Support for this keyword varies by device.
rsa_des_cbc_sha: Specifies the key exchange algorithm of RSA, the data
encryption algorithm of DES_CBC, and the MAC algorithm of SHA.
rsa_rc4_128_md5: Specifies the key exchange algorithm of RSA, the data
encryption algorithm of 128-bit RC4, and the MAC algorithm of MD5.
command to restore the default.
2213