Enable Ssl - Allied Telesis AT-9724TS Reference Manual

enable ssl

Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To enable SSL on the Switch for all ciphersuites:
Note: Enabling SSL on the Switch will enable all ciphersuites, upon initial configuration.To utilize a particular ciphersuite, the user must eliminate
other ciphersuites by using the disable ssl command along with the appropriate ciphersuites.
Note: Enabling the SSL function on the Switch will disable the port for the web manager (port 80).To log on to the web based manager, the
entry of your URL must begin with https://. (ex. https://10.90.90.90).
Allied Telesyn AT-9724TS High-Density Layer 3 Stackable Gigabit Ethernet Switch • Command Line Interface Reference Manual
To enable the SSL function on the Switch.
enable ssl {ciphersuite {RSA_with_RC4_128_MD5 | RSA_with_3DES_EDE_CBC_SHA |
DHE_DSS_with_3DES_EDE_CBC_SHA | RSA_EXPORT_with_RC4_40_MD5}}
This command will enable SSL on the Switch by implementing any one or combination of listed ciphersuites on
the Switch. Entering this command without a parameter will enable the SSL status on the Switch. Enabling SSL
will disable the web-manager on the Switch.
ciphersuite – A security string that determines the exact cryptographic parameters, specific encryption
algorithms and key sizes to be used for an authentication session.The user may choose any combination of the
following:
RSA_with_RC4_128_MD5 – This ciphersuite combines the RSA key exchange, stream cipher
RC4 encryption with 128-bit keys and the MD5 Hash Algorithm.
RSA_with_3DES_EDE_CBC_SHA – This ciphersuite combines the RSA key exchange,
CBC Block Cipher 3DES_EDE encryption and the SHA Hash Algorithm.
DHE_DSS_with_3DES_EDE_CBC_SHA – This ciphersuite combines the DSA Diffie Hellman
key exchange, CBC Block Cipher 3DES_EDE encryption and SHA Hash Algorithm.
RSA_EXPORT_with_RC4_40_MD5 – This ciphersuite combines the RSA Export key exchange,
stream cipher RC4 encryption with 40-bit keys.
The ciphersuites are enabled by default on the Switch, yet the SSL status is disabled by default. Enabling SSL
with a ciphersuite will not enable the SSL status on the Switch.
Only administrator-level users can issue this command.
AT-9724TS:4# enable ssl
Command: enable SSL
N o t e : Web will be disabled if SSL is enabled.
S u c c e s s .
A T - 9 7 2 4 T S : 4 #
162