D-Link xStack Reference Manual page 172

®
xStack DGS-3200 Series Layer 2 Managed Gigabit Ethernet Switch Web UI Reference Guide
To view the following window, click Security > SSL > SSL Settings:
To set up the SSL function on the Switch, configure the parameters in the SSL Settings section described below and click Apply.
To set up the SSL ciphersuite function on the Switch, configure the parameters in the SSL Ciphersuite Settings section described
below and click Apply.
To download SSL certificates, configure the parameters in the SSL Certificate Download section described below and click
Download.
Parameter
SSL State
Cache Timeout (60-
86400)
RSA with RC4_128_MD5
RSA with 3DES EDE
CBC SHA
DHE DSS with 3DES EDE
CBC SHA
RSA EXPORT with RC4
40 MD5
Server IP Address
Certificate File Name
Key File Name
Figure 6 - 39. SSL Settings window
Description
Use the radio buttons to enable or disable the SSL status on the Switch. The default is
Disabled.
This field will set the time between a new key exchange between a client and a host using
the SSL function. A new SSL session is established every time the client and host go
through a key exchange. Specifying a longer timeout will allow the SSL session to reuse
the master key on future connections with that particular host, therefore speeding up the
negotiation process. The default setting is 600 seconds.
SSL Ciphersuite Settings
This ciphersuite combines the RSA key exchange, stream cipher RC4 encryption with 128-
bit keys and the MD5 Hash Algorithm. Use the radio buttons to enable or disable this
ciphersuite. This field is Enabled by default.
This ciphersuite combines the RSA key exchange, CBC Block Cipher 3DES_EDE
encryption and the SHA Hash Algorithm. Use the radio buttons to enable or disable this
ciphersuite. This field is Enabled by default.
This ciphersuite combines the DSA Diffie Hellman key exchange, CBC Block Cipher
3DES_EDE encryption and SHA Hash Algorithm. Use the radio buttons to enable or
disable this ciphersuite. This field is Enabled by default.
This ciphersuite combines the RSA Export key exchange and stream cipher RC4
encryption with 40-bit keys. Use the radio buttons to enable or disable this ciphersuite. This
field is Enabled by default.
SSL Certificate Download
Enter the IPv4 address of the TFTP server where the certificate files are located.
Enter the path and the filename of the certificate file to download. This file must have a .der
extension. (Ex. c:/cert.der)
Enter the path and the filename of the key file to download. This file must have a .der
extension (Ex. c:/pkey.der)
SSL Settings
158