Cisco CSS11501 - 100Mbps Ethernet Load Balancing Device, Руководство по настройке

Страница: 350 / 432

Appendix C Command Summary
Configuration Command Set
C-158
Cisco 11000 Series Secure Content Accelerator Configuration Guide
78-13124-05
secpolicy
Creates an association between this server and the specified security policy.
secpolicy <polname|all|default|fips|noexport56|strong|weak>
Syntax Description
Usage Guidelines
Availability: Serial, Telnet; FIPS Mode (serial only)
Several default security policies are preloaded into the SSL device. To see a list
of all loaded default and user-defined security policies, use the show ssl secpolicy
command.
Related Commands
secpolicy (SSL Configuration Command Set)
show ssl secpolicy (Non-Privileged Command Set)
See the section “Security Policy Configuration Command Set”.
session-cache enable
Enables session caching.
polname The name of the configured security policy.
all All pre-loaded security policies.
default Default security policy set.
fips FIPS 104-2-compliant security policy set.
noexport56 Security policy set used to address potential problems
in non-US installations using Internet Explorer. While
this security policy disables the 56-bit cipher suite, it
does not compromise the strength or the integrity of
the encryption in any way.
strong Strong security policy set.
weak Weak security policy set.