xStack
®
DES-3810 Series Layer 3 Managed Ethernet Switch Web UI Reference Guide
349
The
SSL Settings
window located on the next page will allow the user to enable SSL on the Switch and implement
any one or combination of listed cipher suites on the Switch. A cipher suite is a security string that determines the
exact cryptographic parameters, specific encryption algorithms and key sizes to be used for an authentication session.
The Switch possesses four possible cipher suites for the SSL function, which are all enabled by default. To utilize a
particular cipher suite, disable the unwanted cipher suites, leaving the desired one for authentication.
When the SSL function has been enabled, the web will become disabled. To manage the Switch through the web
based management while utilizing the SSL function, the web browser must support SSL encryption and the header of
the URL must begin with https://. (Ex. https://xx.xx.xx.xx) Any other method will result in an error and no access can
be authorized for the web-based management.
Users can download a certificate file for the SSL function on the Switch from a TFTP server. The certificate file is a
data record used for authenticating devices on the network. It contains information on the owner, keys for
authentication and digital signatures. Both the server and the client must have consistent certificate files for optimal
use of the SSL function. The Switch only supports certificate files with .der file extensions. Currently, the Switch
comes with a certificate pre-loaded though the user may need to download more, depending on user circumstances.
To view the following window, click
Security > SSL Settings
, as shown below:
Figure 9-81 SSL Settings window
The fields that can be configured are described below:
Parameter
Description
SSL State
Use the radio buttons to enable or disable the SSL status on the Switch. The default is
Disabled.
Cache Timeout (60-
86400)
This field will set the time between a new key exchange between a client and a host using
the SSL function. A new SSL session is established every time the client and host go
through a key exchange. Specifying a longer timeout will allow the SSL session to reuse
the master key on future connections with that particular host, therefore speeding up the
negotiation process. The default setting is
600
seconds.
Click the
Apply
button to accept the changes made.
To set up the
SSL cipher suite function
on the Switch, configure the parameters in the SSL Cipher suite Settings
section described below:
Parameter
Description
RSA with
This cipher suite combines the RSA key exchange, stream cipher RC4 encryption with
Summary of Contents for xStack DES-3810
Page 1: ......