DES-1210-52/ME L2 Metro Ethernet Switch CLI Reference Guide
356
51
SSL COMMANDS
The SSL commands in the Command Line Interface (CLI) are listed (along with the appropriate
parameters) in the following table.
{ciphersuite [DH-RSA-3DES-SHA1 | DH-RSA-DES-SHA1 | RSA-3DES-SHA1 |
RSA-DES-SHA1 | RSA-EXP1024-DES-SHA1 | RSA-NULL-MD5 | RSA-NULL-
SHA1]}
{ciphersuite [DH-RSA-3DES-SHA1 | DH-RSA-DES-SHA1 | RSA-3DES-SHA1 |
RSA-DES-SHA1 | RSA-EXP1024-DES-SHA1 | RSA-NULL-MD5 | RSA-NULL-
SHA1]}
[<ipaddr> | <ip6_addr>] certfilename <path_filename 64>
Each command is listed in detail, as follows:
To enable the SSL function on the Switch.
enable ssl {ciphersuite [DH-RSA-3DES-SHA1 | DH-RSA-DES-
SHA1 | RSA-3DES-SHA1 | RSA-DES-SHA1 | RSA-EXP1024-DES-
SHA1 | RSA-NULL-MD5 | RSA-NULL-SHA1]}
The enable ssl command enables SSL on the Switch by
implementing every combination of listed ciphersuites on the Switch.
Entering this command enables the SSL status on the Switch.
Enabling SSL disables the web-manager on the Switch.
ciphersuite - A security string that determines the exact
cryptographic parameters, specific encryption algorithms and key
sizes to be used for an authentication session. The user may choose
any combination of the following:
DH-RSA-3DES-SHA1
DH-RSA-DES-SHA1
RSA-3DES-SHA1
RSA-DES-SHA1
RSA-EXP1024-DES-SHA1
RSA-NULL-MD5
RSA-NULL-SHA1
The ciphersuites are enabled by default on the Switch, yet the SSL
status is disabled by default. Enabling SSL with a ciphersuite will not
enable the SSL status on the Switch.
Only administrator-level users can issue this command.
Example usage:
To enable SSL on the Switch for all ciphersuites: