DGS-3700-12/DGS-3700-12G Series Layer 2 Gigabit Ethernet User Manual
242
Figure 8- 54 SSL Settings window
To set up the SSL function on the Switch, configure the following parameters and click Apply.
Parameter Description
SSL Settings
SSL Status
Enable or disable the SSL status on the switch. The default is disabled.
Cache Timeout
(60-86400)
This field will set the time between a new key exchange between a client and a host using
the SSL function. A new SSL session is established every time the client and host go
through a key exchange. Specifying a longer timeout will allow the SSL session to reuse the
master key on future connections with that particular host, therefore speeding up the
negotiation process. The default setting is 600 seconds.
SSL Ciphersuite Settings
RSA with
RC4_128_MD5
This ciphersuite combines the RSA key exchange, stream cipher RC4 encryption with 128-
bit keys and the MD5 Hash Algorithm. Use the pull-down menu to enable or disable this
ciphersuite. This field is enabled by default.
RSA with 3DES EDE
CBC SHA
This ciphersuite combines the RSA key exchange, CBC Block Cipher 3DES_EDE
encryption and the SHA Hash Algorithm. Use the pull-down menu to enable or disable this
ciphersuite. This field is enabled by default.
DHE DSS with 3DES
EDE CBC SHA
This ciphersuite combines the DSA Diffie Hellman key exchange, CBC Block Cipher
3DES_EDE encryption and SHA Hash Algorithm. Use the pull-down menu to enable or
disable this ciphersuite. This field is enabled by default.
RSA EXPORT with
RC4 40 MD5
This ciphersuite combines the RSA Export key exchange and stream cipher RC4 encryption
with 40-bit keys. Use the pull-down menu to enable or disable this ciphersuite. This field is
enabled by default.
SSL Certificate Download
Server IP Address
Enter the IP address of the TFTP server where the certificate files are located.
Certificate File Name
Enter the path and the filename of the certificate file to download. This file must have a .der
extension. (Ex. c:/cert.der)
Key File Name
Enter the path and the filename of the key file to download. This file must have a .der
extension (Ex. c:/pkey.der)
To Next Page
Loading...
