H3C MSR Series

723
ciphersuite
Use ciphersuite to specify the cipher suites supported by an SSL server policy.
Use undo ciphersuite to restore the default.
Syntax
In non-FIPS mode:
ciphersuite { dhe_rsa_aes_128_cbc_sha | dhe_rsa_aes_256_cbc_sha |
exp_rsa_des_cbc_sha | exp_rsa_rc2_md5 | exp_rsa_rc4_md5 | rsa_3des_ede_cbc_sha |
rsa_aes_128_cbc_sha | rsa_aes_256_cbc_sha | rsa_des_cbc_sha | rsa_rc4_128_md5 |
rsa_rc4_128_sha } *
undo ciphersuite
In FIPS mode:
ciphersuite { rsa_aes_128_cbc_sha | rsa_aes_256_cbc_sha } *
undo ciphersuite
Default
An SSL server policy supports all cipher suites.
Views
SSL server policy view
Predefined user roles
network-admin
Parameters
dhe_rsa_aes_128_cbc_sha: Specifies the cipher suite that uses key exchange algorithm DHE
RSA, data encryption algorithm 128-bit AES, and MAC algorithm SHA.
dhe_rsa_aes_256_cbc_sha: Specifies the cipher suite that uses key exchange algorithm DHE
RSA, data encryption algorithm 256-bit AES, and MAC algorithm SHA.
exp_rsa_des_cbc_sha: Specifies the export cipher suite that uses key exchange algorithm RSA,
data encryption algorithm DES_CBC, and MAC algorithm SHA.
exp_rsa_rc2_md5: Specifies the export cipher suite that uses key exchange algorithm RSA, data
encryption algorithm RC2, and MAC algorithm MD5.
exp_rsa_rc4_md5: Specifies the export cipher suite that uses key exchange algorithm RSA, data
encryption algorithm RC4, and MAC algorithm MD5.
rsa_3des_ede_cbc_sha: Specifies the cipher suite that uses key exchange algorithm RSA, data
encryption algorithm 3DES_EDE_CBC, and MAC algorithm SHA.
rsa_aes_128_cbc_sha: Specifies the cipher suite that uses key exchange algorithm RSA, data
encryption algorithm 128-bit AES_CBC, and MAC algorithm SHA.
rsa_aes_256_cbc_sha: Specifies the cipher suite that uses key exchange algorithm RSA, data
encryption algorithm 256-bit AES_CBC, and MAC algorithm SHA.
rsa_des_cbc_sha: Specifies the cipher suite that uses key exchange algorithm RSA, data
encryption algorithm DES_CBC, and MAC algorithm SHA.
rsa_rc4_128_md5: Specifies the cipher suite that uses key exchange algorithm RSA, data
encryption algorithm 128-bit RC4, and MAC algorithm MD5.
rsa_rc4_128_sha: Specifies the cipher suite that uses key exchange algorithm RSA, data
encryption algorithm 128-bit RC4, and MAC algorithm SHA.