Ssl Certification Settings - D-Link xStack DGS-3120 Series Reference Manual

xStack® DGS-3120 Series Layer 3 Managed Gigabit Ethernet Switch Web UI Reference Guide
Click the Apply button to accept the changes made.
To set up the SSL cipher suite function on the Switch, configure the parameters in the SSL Cipher suite Settings
section described below:
Parameter
RSA with
RC4_128_MD5
RSA with 3DES EDE
CBC SHA
DHS DSS with 3DES
EDE CBC SHA
RSA EXPORT with RC4
40 MD5
Click the Apply button to accept the changes made.
To download SSL certificates, configure the parameters in the SSL Certificate Download section described below.
Parameter
Server IP Address
Certificate File Name
Key File Nam
Click the Download button to download the SSL certificate based on the information entered.
NOTE: Certain implementations concerning the function and configuration of SSL are not available on
the web-based management of this Switch and need to be configured using the command line
interface.
NOTE: Enabling the SSL command will disable the web-based switch management. To log on to the
Switch again, the header of the URL must begin with https://. Entering anything else into the
address field of the web browser will result in an error and no authentication will be granted.

SSL Certification Settings

This window is used to configure the SSL certification settings
To view this window, click Security > SSL > SSL Certification Settings as shown below:
Description
This cipher suite combines the RSA key exchange, stream cipher RC4 encryption
with 128-bit keys and the MD5 Hash Algorithm. Use the radio buttons to enable or
disable this cipher suite. This field is Enabled by default.
This cipher suite combines the RSA key exchange, CBC Block Cipher 3DES_EDE
encryption and the SHA Hash Algorithm. Use the radio buttons to enable or disable
this cipher suite. This field is Enabled by default.
This cipher suite combines the DSA Diffie Hellman key exchange, CBC Block
Cipher 3DES_EDE encryption and SHA Hash Algorithm. Use the radio buttons to
enable or disable this cipher suite. This field is Enabled by default.
This cipher suite combines the RSA Export key exchange and stream cipher RC4
encryption with 40-bit keys. Use the radio buttons to enable or disable this cipher
suite. This field is Enabled by default.
Description
Enter the IPv4 address of the TFTP server where the certificate files are located.
Enter the path and the filename of the certificate file to download. This file must
have a .der extension. (Ex. c:/cert.der)
Enter the path and the filename of the key file to download. This file must have
a .der extension (Ex. c:/pkey.der)
388