xStack DES-3800 Series Layer 3 Stackable Fast Ethernet Managed Switch CLI Manual
291
Command Parameters
show ssl
show ssl certificate
show ssl cachetimeout
download certificate_fromTFTP
<ipaddr> certfilename <path_filename 64> keyfilename
<path_filename 64>
Each command is listed, in detail, in the following sections.
enable ssl
Purpose
To enable the SSL function on the Switch.
Syntax
enable ssl {ciphersuite {RSA_with_RC4_128_MD5 |
RSA_with_3DES_EDE_CBC_SHA |
DHE_DSS_with_3DES_EDE_CBC_SHA |
RSA_EXPORT_with_RC4_40_MD5}}
Description
This command will enable SSL on the Switch by implementing any
one or combination of listed ciphersuites on the Switch. Entering this
command without a parameter will enable the SSL status on the
Switch. Enabling SSL will disable the web-manager on the Switch.
Parameters
ciphersuite
- A security string that determines the exact
cryptographic parameters, specific encryption algorithms and key
sizes to be used for an authentication session. The user may choose
any combination of the following:
RSA_with_RC4_128_MD5
– This ciphersuite combines the
RSA key exchange, stream cipher RC4 encryption with 128-bit
keys and the MD5 Hash Algorithm.
RSA_with_3DES_EDE_CBC_SHA
- This ciphersuite
combines the RSA key exchange, CBC Block Cipher
3DES_EDE encryption and the SHA Hash Algorithm.
DHE_DSS_with_3DES_EDE_CBC_SHA
- This ciphersuite
combines the DSA Diffie Hellman key exchange, CBC Block
Cipher 3DES_EDE encryption and SHA Hash Algorithm.
RSA_EXPORT_with_RC4_40_MD5
- This ciphersuite
combines the RSA Export key exchange, stream cipher RC4
encryption with 40-bit keys.
The ciphersuites are enabled by default on the Switch,
yet the SSL status is disabled by default. Enabling SSL
with a cipersuite will not enable the SSL status on the
Switch.
Restrictions Only
administrator-level users can issue this command.
Example usage:
To enable SSL on the Switch for all ciphersuites:
DES-3800:4#enable ssl
Command:enable ssl
