xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual
NOTE:
Enabling the SSL function on the Switch will disable the port for
the web manager (port 80). To log on to the web based manager, the
entry of your URL must begin with
https://
. (ex. https://10.90.90.90)
disable ssl
Purpose
To disable the SSL function on the Switch.
Syntax
disable ssl {ciphersuite {RSA_with_RC4_128_MD5 |
RSA_with_3DES_EDE_CBC_SHA |
DHE_DSS_with_3DES_EDE_CBC_SHA |
RSA_EXPORT_with_RC4_40_MD5}}
Description
This command will disable SSL on the Switch and can be used to
disable any one or combination of listed ciphersuites on the Switch.
Parameters
ciphersuite
- A security string that determines the exact
cryptographic parameters, specific encryption algorithms and key
sizes to be used for an authentication session. The user may choose
any combination of the following:
Restrictions Only
administrator-level users can issue this command.
RSA_with_RC4_128_MD5
– This ciphersuite combines the
RSA key exchange, stream cipher RC4 encryption with 128-bit
keys and the MD5 Hash Algorithm.
RSA_with_3DES_EDE_CBC_SHA -
This ciphersuite
combines the RSA key exchange, CBC Block Cipher
3DES_EDE encryption and the SHA Hash Algorithm.
DHE_DSS_with_3DES_EDE_CBC_SHA -
This ciphersuite
combines the DSA Diffie Hellman key exchange, CBC Block
Cipher 3DES_EDE encryption and SHA Hash Algorithm.
RSA_EXPORT_with_RC4_40_MD5 -
This ciphersuite
combines the RSA Export key exchange, stream cipher RC4
encryption with 40-bit keys.
Example usage:
To disable the SSL status on the Switch:
DES-6500:4#disable ssl
Command: disable ssl
Success.
DES-6500:4#
To disable ciphersuite
RSA_EXPORT_with_RC4_40_MD5
only:
DES-6500:4#disable ssl
ciphersuite RSA_EXPORT_with_RC4_40_MD5
Command: disable ssl
ciphersuite RSA_EXPORT_with_RC4_40_MD5
Success.
DES-6500:4#
186
