xStack DES-6500 Modular Layer 3 Chassis Ethernet Switch CLI Manual

NOTE: Enabling the SSL function on the Switch will disable the port for the web manager (port 80). To log on to the web based manager, the entry of your URL must begin with https://. (ex. https://10.90.90.90)

disable ssl

Purpose

To disable the SSL function on the Switch.

Syntax

disable ssl {ciphersuite {RSA_with_RC4_128_MD5

 

RSA_with_3DES_EDE_CBC_SHA

 

DHE_DSS_with_3DES_EDE_CBC_SHA

 

RSA_EXPORT_with_RC4_40_MD5}}

Description

This command will disable SSL on the Switch and can be used to

 

disable any one or combination of listed ciphersuites on the Switch.

Parameters

ciphersuite - A security string that determines the exact

 

cryptographic parameters, specific encryption algorithms and key

 

sizes to be used for an authentication session. The user may choose

 

any combination of the following:

 

RSA_with_RC4_128_MD5 – This ciphersuite combines the

 

RSA key exchange, stream cipher RC4 encryption with 128-bit

 

keys and the MD5 Hash Algorithm.

 

RSA_with_3DES_EDE_CBC_SHA - This ciphersuite

 

combines the RSA key exchange, CBC Block Cipher

 

3DES_EDE encryption and the SHA Hash Algorithm.

 

DHE_DSS_with_3DES_EDE_CBC_SHA - This ciphersuite

 

combines the DSA Diffie Hellman key exchange, CBC Block

 

Cipher 3DES_EDE encryption and SHA Hash Algorithm.

 

RSA_EXPORT_with_RC4_40_MD5 - This ciphersuite

 

combines the RSA Export key exchange, stream cipher RC4

 

encryption with 40-bit keys.

Restrictions

Only administrator-level users can issue this command.

 

 

Example usage:

To disable the SSL status on the Switch:

DES-6500:4#disable ssl

Command: disable ssl

Success.

DES-6500:4#

To disable ciphersuite RSA_EXPORT_with_RC4_40_MD5 only:

DES-6500:4#disable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5

Command: disable ssl ciphersuite RSA_EXPORT_with_RC4_40_MD5

Success.

DES-6500:4#

186

Page 189
Image 189
D-Link TM DES-6500 manual Disable ssl ciphersuite RSAwithRC4128MD5, DES-65004#disable ssl Command disable ssl Success