xStack® DGS-3120 Series Layer 3 Managed Gigabit Ethernet Switch Web UI Reference Guide
387
without the presence and implementation of the certificate file and can be downloaded to the Switch by utilizing a
TFTP server. The Switch supports SSLv3. Other versions of SSL may not be compatible with this Switch and may
cause problems upon authentication and transfer of messages from client to host.
The SSL Settings window located on the next page will allow the user to enable SSL on the Switch and implement
any one or combination of listed cipher suites on the Switch. A cipher suite is a security string that determines the
exact cryptographic parameters, specific encryption algorithms and key sizes to be used for an authentication
session. The Switch possesses four possible cipher suites for the SSL function, which are all enabled by default.
To utilize a particular cipher suite, disable the unwanted cipher suites, leaving the desired one for authentication.
When the SSL function has been enabled, the web will become disabled. To manage the Switch through the web
based management while utilizing the SSL function, the web browser must support SSL encryption and the header
of the URL must begin with https://. (Ex. https://xx.xx.xx.xx) Any other method will result in an error and no access
can be authorized for the web-based management.
Users can download a certificate file for the SSL function on the Switch from a TFTP server. The certificate file is a
data record used for authenticating devices on the network. It contains information on the owner, keys for
authentication and digital signatures. Both the server and the client must have consistent certificate files for optimal
use of the SSL function. The Switch only supports certificate files with .der file extensions. Currently, the Switch
comes with a certificate pre-loaded though the user may need to download more, depending on user
circumstances.
SSL Settings
This window is used to configure the SSL settings.
To view this window, click
Security > SSL > SSL Settings
as shown below:
Figure 8-84 SSL Settings window
To set up the SSL function on the Switch, configure the parameters in the SSL Settings section described.
The fields that can be configured are described below:
Parameter
Description
SSL Status
Use the radio buttons to enable or disable the SSL status on the Switch. The default
is Disabled.
Cache Timeout (60-
86400)
This field will set the time between a new key exchange between a client and a host
using the SSL function. A new SSL session is established every time the client and
host go through a key exchange. Specifying a longer timeout will allow the SSL
session to reuse the master key on future connections with that particular host,
therefore speeding up the negotiation process. The default setting is
600
seconds.
Summary of Contents for xStack DGS-3120 Series
Page 1: ......
