Security Policy Configuration Command Set; Crypto - Cisco CSS11501 - 100Mbps Ethernet Load Balancing Device Configuration Manual
11000 series secure content accelerator
Hide thumbs
Also See for CSS11501 - 100Mbps Ethernet Load Balancing Device:
- Hardware installation manual (184 pages) ,
- Datasheet (10 pages) ,
- Product support bulletin (3 pages)
Table of Contents
Advertisement
Appendix C
Command Summary
Security Policy Configuration Command Set
crypto
Syntax Description
Cryptographic Scheme
ARC4-MD5
ARC4-SHA
DES-CBC3-MD5
78-13124-05
Use Security Policy Configuration commands to set up and manage security policies.
Enter Security Policy Configuration mode by using the enable command in
Non-Privileged mode, the configure command in Privileged Mode, the ssl command
in Configuration mode, and secpolicy command in SSL Configuration mode. The
prompt changes to
<config-ssl-secpolicy[secpolicyname]>>
Creates a customized security policy for the current SSL device.
crypto <fips | strong | weak | all | ARC4-MD5 | ARC4-SHA |
DES-CBC3-MD5 | DES-CBC3-SHA | DES-CBC-MD5 |
DES-CBC-SHA | EXP-ARC2-MD5þ| EXP-ARC4-MD5 |
EXP-DES-CBC-SHA | EXP1024-ARC2-CBC-MD5þ|
EXP1024-ARC4-MD5þ| EXP1024-ARC4-SHA |
EXP1024-DES-CBC-SHAþ| NULL-MD5 | NULL-SHA >
no crypto < ARC4-MD5 | ARC4-SHA | DES-CBC3-MD5 |
DES-CBC3-SHA | DES-CBC-MD5 | DES-CBC-SHA |
EXP-ARC2-MD5þ| EXP-ARC4-MD5 | EXP-DES-CBC-SHA |
EXP1024-ARC2-CBC-MD5þ| EXP1024-ARC4-MD5þ|
EXP1024-ARC4-SHA | EXP1024-DES-CBC-SHAþ| NULL-MD5 |
NULL-SHA >
The following table shows the characteristics of each crytptographic algorithm.
Encryption
1
ARC4
(128)
1
ARC4
(128)
3DES (168)
Cisco 11000 Series Secure Content Accelerator Configuration Guide
Message
Key
Authentication
Exchange
MD5
RSA (1024)
SHA1
RSA (1024)
MD5
RSA (1024)
Configuration Command Set
.
Security
Policy
Assignments
strong, default, all
strong, default, all
strong, all
C-141
Advertisement
Table of Contents
Troubleshooting
