HP ProCurve 3500yl Series User Manual

8
Configuring Secure Socket Layer (SSL)
Contents
Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2
Terminology . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-3
Prerequisite for Using SSL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-5
Steps for Configuring and Using SSL for Switch and Client
Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-5
General Operating Rules and Notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-6
Configuring the Switch for SSL Operation . . . . . . . . . . . . . . . . . . . . . . 8-7
1. Assigning a Local Login (Operator) and
Enable (Manager)Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-7
2. Generating the Switch’s Server Host Certificate . . . . . . . . . . . . . . . . 8-9
To Generate or Erase the Switch’s Server Certificate
with the CLI
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-10
Comments on certificate fields. . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-11
Generate a Self-Signed Host Certificate with the Web browser
interface
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-13
Generate a CA-Signed server host certificate with the
Web browser interface
. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-15
3. Enabling SSL on the Switch and Anticipating SSL
Browser Contact Behavior . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-17
Using the CLI interface to enable SSL . . . . . . . . . . . . . . . . . . . . . . 8-19
Using the web browser interface to enable SSL . . . . . . . . . . . . . 8-19
Common Errors in SSL setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-21
8-1

HP ProCurve 3500yl Series Specifications

General

Model	HP ProCurve 3500yl Series
Switching Capacity	176 Gbps
Layer	Layer 3
Input Voltage	100-240 VAC
PoE	Available on some models
Management	Web, CLI, SNMP
Routing Protocol	RIP, OSPF, BGP
Remote Management Protocol	Telnet
Features	VLAN
Power Consumption Operational	Varies by model
Memory	256 MB
Power Supply	Internal
Security Features	802.1X, RADIUS, TACACS+
Ports	24 or 48 x 10/100/1000Base-T ports