Manuals / Intel / TV and Video / TV Mount

Intel A31032-001 manual Supported Ciphers, Cipher Strength

Models: A31032-001

1 196

Page 163

Supported Ciphers

The Intel® NetStructure™ 7110/7115 e-Commerce Accelerator supports only RSA key exchange and authentication. Diffie-Hellman (including Anonymous and Ephemeral) key exchange/authentication and DSS authentication are not supported.

Use the set cipher command to specify the cipher. The command prompts you for the cipher strength and SSL version level. Options for these values are:

Cipher Strength

•All - all supported ciphers (including export ciphers)

•High - all ciphers with 168-bit encryption (Triple-DES)

•Medium - all ciphers with 128-bit and higher encryption (including High)

•Low - all ciphers with 64-bit and higher encryption (including Medium and High)

•Export only - all export ciphers

Page 163

Image 163

Intel A31032-001 manual Supported Ciphers, Cipher Strength

Contents

Version Intel NetStructure 7110/7115 e-Commerce AcceleratorTrademarks CopyrightTable of Contents Theory of Operation Scenarios Remote Management Alarms and Monitoring Troubleshooting Appendix a Front Panel List of Figures Xii About this User Guide IntroductionRemote Management New in This ReleaseBefore You Begin Who Should Use this BookHow to Use this Book Glossary defines terms appearing in this User Guide Page Installation and Initial Configuration Rack Installation Installing the 7110/7115 Free- Standing or in a RackNetwork Connections Free-Standing InstallationInline LED Admin Terminal ConnectionStatus Check Network and Server LEDsHyperTerminal§ Paste Operations Continuing Configuration TroubleshootingServer and Network LEDs Security Theory of OperationSingle Server Acceleration Multiple Servers 7110/7115 in Single Server ConfigurationPositioning 7110/7115 between ITM Device and Client Network Working with Internet Traffic Management ITM DevicesScalability and Cascading Positioning 7110/7115 between ITM Device and ServerSpilling and Throttling Availability Keys and CertificatesCutting and Pasting with HyperTerminal§ Intel 7115 create sign ProcedureCreate a key Type the create key command at the prompt Create a Certificate Signing RequestIntel 7115 export sign mywebserver Certificate REQUEST----- linesAsciix Enter Enter Typically, the CSR will look something like thisExporting a Key/Certificate from a Server Save the configuration when the server has been mappedApache Interface to Open SSL§ modssl Apache SSL§ Importing into the 7110/7115 Stronghold§Intel 7115 import key mywebserver Save the configuration when the server has been mapped Intel 7115 create cert mywebserver Enter the create cert command with the keyIDCreating a new Key/Certificate on the 7110/7115 Create a key as followsOverview Global Site CertificatesExample Global Site Certificate Paste ProcedureIntel 7115 import cert keyID Intel 7115 set redirect A P T E R Redirection Clients and Unsupported CiphersIntel 7115 set redirect 2 none Intel 7115 show redirect Client AuthenticationTo disable a redirect URL for a mapping Intel 7115 show redirectIntel 7115 import clientca Next, import the client CA certificate for Map IDGenerate the client CA certificate Creating a Client CA Certificate using OpenSSL§Generate a certificate signing request Mapping SSL ProcessingAutomapping Manual mapping Automapping with user-specified key and certificateAutomapping with multiple port combinations Deleting automapping entriesCombining automapping and manual mapping Use the show block command to verifyAll IPs, Specific Port Subnet IP, Specific PortUse show block to verify Delete a Block Use the show block command to confirm the blockIntel 7115 delete block Failure Conditions, Fail-safe, and Fail-through Scenarios Syntax Manual Configuration Procedure for ScenarioScenario 1-Single Server Intel 7115delete map 1 Intel 7115list maps Scenario 2-Multiple Servers This scenario shows how to configure two or more serversID KeyID Assumptions Scenario 3-Multiple 7110/ 7115s, CascadedMultiple Cascaded 7110/7115s Intel 7115 export configIntel 7115 import config Save the configurationAfter verification y or refusal n, the prompt reappears Intel 7115set egressmac none To reverse this processOnline Help Command ReferenceAbbreviation to Uniqueness Command Line InterfaceUser Authentication Command Line PromptA P T E R Command Line Interface Command History Input Editing CommandsMoving the Insertion Point Cut and Paste Command Summary Nic Password Reboot Command Command Options ImportInline List Command Command Options Set Command Command Options Show Ttychar SetsnmpShowsnmp StatusHelp Commands Command ReferenceStatus Command Import key SSL CommandsCommand Description Create key Delete keyShow key Command Description Export keyList keys Export cert Command Description Create certDelete cert Import certSet ciphers Command Description Show certDisplay the expanded certificate including PEM format Displays all certificatesShow redirect Command Description Set redirectShow clientca Delete clientca Command Description Import clientcaCreate sign Export sign Command Description Delete signShow sign keyID Field Command Description Set defcertIssuer e-mail address. You can change all, some or none Display the default certificate creation informationShow clienttmo Command Description Set kstrengthShow kstrength Set clienttmoShow servertmo Command Description Set servertmoDisplays the currently specified server timeout value Client request is rejectedShow block Port Mapping CommandsCommand Definition Create block Delete blockDelete permit Command Definition Create permitShow permit List maps Command Definition Create mapDelete map mapID Show mapCommand Description Bypass Operational CommandsInline Show spill Command Description Set spillCommand Description Set ip Remote Management CommandsMaxremotesessions Show telnet Command Description Set telnetSet telnetport Set sshport Command Description Show telnetportSet ssh Show sshShowsnmp snmp Command Description Setsnmp snmpSetsnmp snmpinfo Snmpcommunity CommandDescriptionDelete Snmp community strings Trapcommunity Command Description Setsnmp trapauthenList trapcommunity Intel 7115 delete trapcommunity Delete trapcommunity Delete Snmp trap community stringsSet rscwindow Alarms and Monitoring CommandsCommand Description Set alarms Show alarmsSet utlwindow Command Description Show rscwindowSet utlhighwater Show utllowwater Command Description Set utllowwaterShow utlwindow Show utlhighwaterIntel 7115 show ovlwindow CommandDescription Show ovlwindowCommand Description Show config Configuration CommandsDisplay current volatile configuration settings Intel 7115 show config default Default configuration Config save Command Description Config compareConfig reset Config defaultImport a configuration file paste, xmodem, uudecode Command Description Export configConfiguration specifics are displayed Import configImport patch Command Description Import upgradeList system Returns to factory configuration settings Command Description FactorydefaultSet date Administration CommandsCommand Description Password Show infoSet idleto Command Description Set egressmacSet ether Show etherSet serial Command Description Set moreNic Set promptExit Logging CommandsCommand Description Show serial Command DescriptionList logs Command Description Delete logDelete saved log/trace files from /flash/logs All deletes all logsOverview Remote ManagementLimitations Remote Management CLI CommandsA P T E R Overview Local Serial Console Remote Telnet SessionsUnix-prompttelnet Remote Console, TelnetChanging the Telnet Port To display the Telnet portDisabling Telnet To verify Telnet disableEnable remote SSh sessions Remote SSh SessionsChanging the SSh Port Unix-promptssh -1 adminPasswordpassword Remote Console, SShTo display the SSh port To verify SSh disableIntel 7115 set ssh disable Disabling SShIntel MIB Tree Standards ComplianceCeo-header.my Where to find MIB FilesSupported MIBs Management Information Base-II MIB-II Intel Enterprise MIBsFollowing is a summary of the 7110/7115 private MIB Enterprise Private MIB SummaryPage Snmp ThrottlesPerSec Number of throttles per second Snmp Standard Snmp Traps Trap SummaryPrivate Traps in ssl-appliance-mib.my Intel 7115 setsnmp snmp disable Intel 7115 showsnmp snmp Intel 7115 setsnmp snmp enable Intel 7115 showsnmp snmpEnabling Snmp Intel 7115 showsnmp snmpinfo Specifying Snmp InformationIntel 7115 delete snmpcommunity Community StringTrap Community String Use CLI commands, setsnmp trapcommunity, listAccess Control Page Alarms Monitoring Set alarms All, esc, rsc, utl, ovl, nls None Show alarms CLI commands for alarm configuration areFor example Alarm TypesESC Encryption Status Change Alarm Alarm Modifiers and MessagesExtended Data RSC Alarm CLI CommandsTo set Overload Alarm time window RSC Refused SSL ConnectionsIntel 7115 set rscwindow Intel 7115 show rscwindow UTL Utilization Threshold AlarmTo display Overload Alarm time window This alarm monitors three utilization threshold valuesTo set Utilization Threshold Alarm low-water value UTL Alarm CLI commandsTo set Utilization Threshold Alarm time window To set Utilization Threshold Alarm high-water valueIntel 7115 set ovlwindow Intel 7115 show ovlwindow OVL Overload AlarmOVL Alarm CLI Commands Intel 7115 set ovlwindow seconds RangeNLS Network Link Status Alarm Alarm LoggingIntel 7115 status Respend Inline Ip 10.1.11.34 netmask Intel 7115 status alarms Example, status alarms commandMonitor report format Report ConfigurationMonitoring Monitoring ReportsIntel 7115 set monitoringfields Monitoring Reports CLI CommandsIntel 7115 show monitoringfields Intel 7115 set monitoring enable Intel 7115 show monitoringPage Software Updates Press y for yes at the Continue with upgrade? prompt Using Windows§ HyperTerminal§Intel 7115 import upgrade Connect the serial cable to the 7110/7115 auxiliary console Command import patchIntel 7115import upgrade To send the uuencoded file use the ~ commandIntel 7115import patch Page Troubleshooting Intel 7115 set clienttmo See Global Site Certificates Error message IntermediateDifferent media Error message ServerSettings Then use the nic command to forceLEDs Front PanelProcessing Buttons and SwitchesPress to physically force bypass mode bypass 7110/7115 Front Panel LEDsOverload See Appendix B, FailureConnectors Failure/Bypass Modes Enable 7110/7115 processingBypass Button Fail-through Switch Security LevelP E N D I X B Fail-through Switch Security Level Page Cipher Strength Supported CiphersSSL Version Level RC464 RC2 SSLv2RC2128 RC4-64 SSLv2Page Taiwan Class a EMI Statement Regulatory InformationFCC Part 15 Compliance Statement Vcci StatementCE Compliance Statement Canada Compliance Statement Industry CanadaVcci Class a Japan Australia Cispr 22 StatementAvertissement Warnung Advertencias Wichtige Sicherheitshinweise Wichtige Sicherheitshinweise Page END User Terms and Conditions of Sale and Software License Terms and Conditions and Software LicensePage P E N D I X E Page Year warranty Process of being installed Export Law Regulations Page Glossary Glossary-2 Glossary-3 Glossary-4 Japan only Support ServicesWorldwide Access to Technical Support North America onlySupport-2 Intel NetStructure 7110/7115 e-Commerce Accelerator User Support-4 Index D E Index-3 Index-4