Allied Telesis IE340-20GP - secure cipher (ldap-server)

C613-50631-01 Rev A Command Reference for IE340 Series 2418
AlliedWare Plus™ Operating System - Version 5.5.3-0.x
LIGHTWEIGHT DIRECTORY ACCESS PROTOCOL (LDAP) COMMANDS
SECURE
CIPHER (LDAP-SERVER)
secure cipher (ldap-server)
Overview Use this command to configure the OpenSSL ciphers used in LDAP secure mode.
You can choose groups of ciphers from a number of Mozilla TLS configs, or specify
multiple individual ciphers in OpenSSL format.
Use the no variant of this command to remove the configured ciphers on a server.
Syntax
secure cipher {old|intermediate|modern}
secure cipher <cipher-list>
no secure cipher
Default Not set
Mode LDAP Server Configuration
Example To use the Intermediate Mozilla cipher suite on the LDAP server called Server1, use
the commands:
awplus# configure terminal
awplus(config)# ldap-server Server1
awplus(config-ldap-server)# secure cipher intermediate
Parameter Description
old Ciphers in Mozilla's old TLS config. Alongside the modern and intermediate ciphers, this
includes the following ciphers:
DHE-RSA-CHACHA20-POLY1305,ECDHE-ECDSA-AES128SHA256,
ECDHE-RSA-AES128-SHA256,ECDHE-ECDSA-AES128-SHA,
ECDHE-RSA-AES128-SHA,ECDHE-ECDSA-AES256-SHA384,
ECDHE-RSA-AES256-SHA384, ECDHE-ECDSA-AES256-SHA,
ECDHE-RSA-AES256-SHA,DHE-RSA-AES128-SHA256, DHE-RSA-AES256-SHA256,
AES128-GCM-SHA256, AES256-GCM-SHA384,AES128-SHA256, AES256-SHA256,
AES128-SHA, AES256-SHA, DES-CBC3-SHA
intermediate Ciphers in Mozilla's intermediate TLS config. Alongside the modern ciphers, this includes
the following ciphers:
ECDHE-ECDSA-AES128-GCM-SHA256,ECDHE-RSA-AES128-CM-SHA256,
ECDHE-ECDSA-AES256-GCM-SHA384,ECDHE-RSA-AES256-CM-SHA384,
ECDHE-ECDSA-CHACHA20-POLY1305,ECDHE-RSA-CHACHA20-POLY1305,
DHE-RSA-AES128-GCM-SHA256,DHE-RSA-AES256-GCM-SHA384
modern Ciphers in Mozilla's modern TLS config. Includes the following ciphers:
TLS_AES_128_GCM_SHA256, TLS_AES_256_GCM_SHA384,
TLS_CHACHA20_POLY1305_SHA256
<cipher-list> The name (or names) of a cipher in OpenSSL format. This is a space separated list of
cipher names, for example:
DHE-DSS-AES256-GCM-SHA384 TLS_AES_256_GCM_SHA384