VN/UN564:1VN/UN5674
LgvUvtgco" N4" Ocpcigf" Uykvej" ENK" Iwkfg
87
Ejcrvgt"37" UUN"Eqoocpfu" "
SSL
(
Secure Sockets Layer
)
, a security protocol, is to provide a secure connection for the
application layer protocol(e.g. HTTP) based on TCP. Adopting asymmetrical encryption technology,
SSL uses key pair to encrypt/decrypt information. A key pair refers to a public key (contained in the
certificate) and its corresponding private key. By default the switch has a certificate (self-signed
certificate) and a corresponding private key. The Certificate/Key Download function enables the
user to replace the default key pair.
kr"jvvr"ugewtg/ugtxgt"
Fguetkrvkqp"
The
" kr" jvvr" ugewtg/ugtxgt"
command is used to enable the SSL function
globally on the switch. To disable the SSL function, please use
pq" kr" jvvr"
ugewtg/ugtxgt"
command. Only the SSL function is enabled, a secure HTTPS
connection can be established.
"
U{pvcz"
kr"jvvr"ugewtg/ugtxgt"
pq"kr"jvvr"ugewtg/ugtxgt"
Eqoocpf"Oqfg"
Global Configuration Mode
Gzcorng"
Enable the SSL function:
VN/UN564:*%kr"jvvr"ugewtg/ugtxgt"
kr"jvvr"ugewtg/ugtxgt"fqypnqcf"egtvkhkecvg
"
Fguetkrvkqp"
The
" kr" jvvr" ugewtg/ugtxgt
"
fqypnqcf" egtvkhkecvg"
command is used to
download a certificate to the switch from TFTP server.
U{pvcz"
kr"jvvr"ugewtg/ugtxgt"fqypnqcf"egtvkhkecvg
ssl-cert
kr/cfftguu
ip-addr