D-Link DGS-3212SR, Справочное руководство по интерфейсу командной строки

Страница: 201 / 269

DGS-3212SR Layer 3 Gigabit Switch
NOTE: Enabling the SSL function on the switch will disable the port for the
web manager (port 80). To log on to the web based manager, the entry of
your URL must begin with
https:// . (ex. https://10.90.90.90)
disable ssl
To disable the SSL function on the switch.
disable ssl {ciphersuite {RSA_with_RC4_128_MD5 |
RSA_with_3DES_EDE_CBC_SHA |
DHE_DSS_with_3DES_EDE_CBC_SHA |
RSA_EXPORT_with_RC4_40_MD5}}
Description This command will disable SSL on the switch and can be used to
disable any one or combination of listed ciphersuites on the switch.
Parameters ciphersuite - A security string that determines the exact
cryptographic parameters, specific encryption algorithms and key
sizes to be used for an authentication session. The user may choose
any combination of the following:
Restrictions Only administrator-level users can issue this command.
Purpose
Syntax
RSA_with_RC4_128_MD5 – This ciphersuite combines the
RSA key exchange, stream cipher RC4 encryption with 128-bit
keys and the MD5 Hash Algorithm.
RSA_with_3DES_EDE_CBC_SHA - This ciphersuite
combines the RSA key exchange, CBC Block Cipher
3DES_EDE encryption and the SHA Hash Algorithm.
DHE_DSS_with_3DES_EDE_CBC_SHA - This ciphersuite
combines the DSA Diffie Hellman key exchange, CBC Block
Cipher 3DES_EDE encryption and SHA Hash Algorithm.
RSA_EXPORT_with_RC4_40_MD5 - This ciphersuite
combines the RSA Export key exchange, stream cipher RC4
encryption with 40-bit keys.
Example usage:
To disable the SSL status on the switch:
DGS-3212SR:4#disable ssl
Command: disable ssl
Success.
DGS-3212SR:4#
To disable ciphersuite RSA_EXPORT_with_RC4_40_MD5 only:
189