D-Link xStack DGS-3600 Series Cli Manual page 395
D-link xstack dgs-3600 series layer 3 gigabit ethernet managed switch
Hide thumbs
Also See for xStack DGS-3600 Series:
- User manual (433 pages) ,
- Hardware installation manual (66 pages) ,
- Reference manual (546 pages)
Table of Contents
Advertisement
xStack DGS-3600 Series Layer 3 Gigabit Ethernet Managed Switch CLI Manual
disable ssl
Purpose
Syntax
Description
Parameters
Restrictions
Example usage:
To disable the SSL status on the Switch:
DGS-3627:5#disable ssl
Command: disable ssl
Success.
DGS-3627:5#
To disable ciphersuite RSA_EXPORT_with_RC4_40_MD5 only:
DGS-3627:5#disable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
Command: disable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5
Success.
DGS-3627:5#
config ssl cachetimeout timeout
Purpose
Syntax
Description
To disable the SSL function on the Switch.
disable ssl {ciphersuite {RSA_with_RC4_128_MD5 |
RSA_with_3DES_EDE_CBC_SHA |
DHE_DSS_with_3DES_EDE_CBC_SHA |
RSA_EXPORT_with_RC4_40_MD5}}
This command will disable SSL on the Switch and can be used to
disable any one or combination of listed ciphersuites on the Switch.
ciphersuite - A security string that determines the exact cryptographic
parameters, specific encryption algorithms and key sizes to be used for
an authentication session. The user may choose any combination of the
following:
•
RSA_with_RC4_128_MD5 – This ciphersuite combines the
RSA key exchange, stream cipher RC4 encryption with 128-bit
keys and the MD5 Hash Algorithm.
•
RSA_with_3DES_EDE_CBC_SHA - This ciphersuite combines
the RSA key exchange, CBC Block Cipher 3DES_EDE
encryption and the SHA Hash Algorithm.
•
DHE_DSS_with_3DES_EDE_CBC_SHA - This ciphersuite
combines the DSA Diffie Hellman key exchange, CBC Block
Cipher 3DES_EDE encryption and SHA Hash Algorithm.
•
RSA_EXPORT_with_RC4_40_MD5 - This ciphersuite
combines the RSA Export key exchange, stream cipher RC4
encryption with 40-bit keys.
Only administrator-level and operator-level users can issue this
command.
Used to configure the SSL cache timeout.
config ssl cachetimeout <value 60-86400>
This command will set the time between a new key exchange between a
client and a host using the SSL function. A new SSL session is established
every time the client and host go through a key exchange. Specifying a
longer timeout will allow the SSL session to reuse the master key on future
connections with that particular host, therefore speeding up the negotiation
392
Advertisement
Table of Contents
