Cambium Networks PTP 820 Series, User Manual

Page: 1032 / 1149

Chapter 23: Access Management and Security (CLI) Blocking Telnet Access (CLI)
phn-3965_006v002
Page 23-19
Configuring HTTPS Cipher Hardening (CLI)
You can configure the PTP 820 to operate in HTTPS strong mode. In HTTPS strong mode, SSLv3, TLSv1.0, and
TLSv1.1 are disabled completely and only certain ciphers are supported in TLSv1.2.
For a list of supported HTTPS ciphers, including an indication of which ciphers are supported in HTTPS strong
mode,
To set HTTPS strong mode, enter the following command:
root> platform security https-ciphers-hardening-level-set level strong
To set HTTPS normal mode, enter the following command:
root> platform security https-ciphers-hardening-level-set level normal
Note: The default HTTP cipher mode is normal.
To display the current HTTPS cipher mode, enter the following command:
root> platform security https-ciphers-hardening-level-show
Blocking Telnet Access (CLI)
You can block telnet access to the unit. By default, telnet access is not blocked.
To block telnet access, enter the following command:
root> platform security protocols-control telnet admin set disable
To unblock telnet access, enter the following command:
root> platform security protocols-control telnet admin set enable
To display whether telnet is currently allowed (enable) or blocked (disable), enter the following command:
root> platform security protocols-control telnet show
Note: When you block telnet, any current telnet sessions are immediately disconnected.