3Com MSR 50, MSR 30 manual Prefer-cipher, Undo pki-domain, Undo prefer-cipher, 2213

2213

undo pki-domain

View SSL server policy view/SSL client policy view

Parameter domain-name: Name of a PKI domain, a string of 1 to 15 characters.

Description Use the pki-domaincommand to specify a PKI domain for an SSL server policy or SSL client policy.

Use the undo pki-domaincommand to restore the default.

By default, no PKI domain is configured for an SSL server policy or SSL client policy by default.

Example # Configure SSL server policy policy1 to use the PKI domain named server-domain.

<Sysname> system-view

[Sysname] ssl server-policy policy1

[Sysname-ssl-server-policy-policy1] pki-domain server-domain

# Configure SSL client policy policy1 to use the PKI domain named client-domain.

<Sysname> system-view

[Sysname] ssl client-policy policy1

[Sysname-ssl-client-policy-policy1] pki-domain client-domain

prefer-cipher

Syntax prefer-cipher { rsa_3des_ede_cbc_sha rsa_aes_128_cbc_sha rsa_aes_256_cbc_sha rsa_des_cbc_sha rsa_rc4_128_md5 rsa_rc4_128_sha }

undo prefer-cipher

View SSL client policy view

Parameter rsa_3des_ede_cbc_sha: Specifies the key exchange algorithm of RSA, the data encryption algorithm of 3DES_EDE_CBC, and the MAC algorithm of SHA. Support for this keyword varies by device.

rsa_aes_128_cbc_sha: Specifies the key exchange algorithm of RSA, the data encryption algorithm of 128-bit AES_CBC, and the MAC algorithm of SHA.

rsa_aes_256_cbc_sha: Specifies the key exchange algorithm of RSA, the data encryption algorithm of 256-bit AES_CBC, and the MAC algorithm of SHA. Support for this keyword varies by device.

rsa_des_cbc_sha: Specifies the key exchange algorithm of RSA, the data encryption algorithm of DES_CBC, and the MAC algorithm of SHA.

rsa_rc4_128_md5: Specifies the key exchange algorithm of RSA, the data encryption algorithm of 128-bit RC4, and the MAC algorithm of MD5.