User's Manual 120 Document #: LTRT-10466
Mediant 500L MSBR
Parameter Description
Web: Ciphers Server
CLI: ciphers-server
[TLSContexts_ServerCipherString]
Defines the supported cipher suite for the TLS server (in
OpenSSL cipher list format).
For valid values, refer to URL
http://www.openssl.org/docs/apps/ciphers.html. The
default is "AES:RC4".
For example, use "ALL" for all ciphers suites (e.g., for
ARIA encryption for TLS). The only ciphers available are
RC4 and DES, and the cipher bit strength is limited to 56
bits.
Notes:
If the installed Software License Key includes the
Strong Encryption feature, the default of this parameter
is changed to RC4:EXP, enabling RC-128-bit
encryption.
The value "ALL" can be used only if the installed
Software License Key includes the Strong Encryption
feature.
Web: Ciphers Client
CLI: ciphers-client
[TLSContexts_ClientCipherString]
Defines the supported cipher suite for TLS clients.
The valid value is up to 255 strings (e.g., "EXP"). The
default is "ALL:!ADH".
For possible values and additional details, refer to
http://www.openssl.org/docs/apps/ciphers.html.
Web: Ocsp Server
CLI: ocsp-server
[TLSContexts_OcspEnable]
Enables or disables certificate checking using OCSP.
[0] Disable (default)
Enable
Web: Ocsp Server Primary
CLI: ocsp-server-primary
[TLSContexts_OcspServerPrimary]
Defines the IP address (in dotted-decimal notation) of the
primary OCSP server.
The default IP address is 0.0.0.0.
Web: Ocsp Server Secondary
CLI: ocsp-server-secondary
[TLSContexts_OcspServerSecondary]
Defines the IP address (in dotted-decimal notation) of the
secondary OCSP server (optional).
The default IP address is 0.0.0.0.
Web: Ocsp Port
CLI: ocsp-port
[TLSContexts_OcspServerPort]
Defines the OCSP server's TCP port number.
The default port number is 2560.
Web: Ocsp Default Response
CLI: ocsp-default-response
[TLSContexts_OcspDefaultResponse]
Determines whether the device allows or rejects peer
certificates if it cannot connect to the OCSP server.
[0] Reject (default)
[1] Allow
To Next Page
Loading...
