D-Link 3312SR Reference Manual - Page 176

DGS-3312SR Layer 3 Gigabit Switch

170

Each command is listed, in detail, in the following sections.

enable ssl

Purpose

To enable the SSL function on the switch.

Syntax

enable ssl {ciphersuite {RSA_with_RC4_128_MD5 |

RSA_with_3DES_EDE_CBC_SHA |

DHE_DSS_with_3DES_EDE_CBC_SHA |

RSA_EXPORT_with_RC4_40_MD5}}

Description

This command will enable SSL on the switch by implementing any

one or combination of listed ciphersuites on the switch. Entering this

command without a parameter will enable the SSL status on the

switch. Enabling SSL will disable the web-manager on the switch.

Parameters

ciphersuite

- A security string that determines the exact

cryptographic parameters, specific encryption algorithms and key

sizes to be used for an authentication session. The user may choose

any combination of the following:

±

RSA_with_RC4_128_MD5

– This ciphersuite combines the

RSA key exchange, stream cipher RC4 encryption with 128-bit

keys and the MD5 Hash Algorithm.

±

RSA_with_3DES_EDE_CBC_SHA -

This ciphersuite

combines the RSA key exchange, CBC Block Cipher

3DES_EDE encryption and the SHA Hash Algorithm.

±

DHE_DSS_with_3DES_EDE_CBC_SHA -

This ciphersuite

combines the DSA Diffie Hellman key exchange, CBC Block

Cipher 3DES_EDE encryption and SHA Hash Algorithm.

±

RSA_EXPORT_with_RC4_40_MD5 -

This ciphersuite

combines the RSA Export key exchange, stream cipher RC4

encryption with 40-bit keys.

The ciphersuites are enabled by default on the switch, yet the SSL

status is disabled by default.

Restrictions

Only administrator-level users can issue this command.

Example usage:

To enable SSL on the switch for all ciphersuites:

DGS-3312SR:4#enable ssl

Command: enable ssl

Success.

DGS-3312SR:4#

NOTE:

Enabling the SSL function on the switch will disable the port for the

web manager (port 80). To log on to the web based manager, the entry of

your URL must begin with

https://

. (ex. https://10.90.90.90)

Section	Page
Introduction	7
	7
	7
Accessing the Switch via the Serial Port	7
Setting the Switch’s IP Address	8
Using the Console CLI	10
	10
	10
Connecting to the Switch	10
Command Syntax	16
Basic Switch Commands	18
Switch Port Commands	30
Port Security Commands	33
Network Management (SNMP) Commands	37
Switch Utility Commands	58
Network Monitoring Commands	62
Multiple Spanning Tree Protocol (MSTP) Commands	75
Forwarding Database Commands	88
Broadcast Storm Control Commands	95
QoS Commands	97
Port Mirroring Commands	105
VLAN Commands	110
Link Aggregation Commands	117
IP Commands (Including IP Multinetting)	123
IGMP Commands	128
IGMP Snooping Commands	131
MAC Notification Commands	139
Access Authentication Control Commands	143
SSH Commands	167
SSL Commands	175
802.1X Commands	180
Access Control List (ACL) Commands	192
Traffic Segmentation Commands	201
Stacking Commands	203
D-Link Single IP Management Commands	206
Time and SNTP Commands	216
ARP Commands	222
VRRP Commands	226
Routing Table Commands	233
Route Redistribution Commands	237
BOOTP Relay Commands	243
DNS Relay Commands	247
RIP Commands	251
DVMRP Commands	254
PIM Commands	259
IP Multicasting Commands	263
MD5 Configuration Commands	265
OSPF Configuration Commands	268
Command History List	288
Technical Specifications	290
	296
	296
	296
	296
	296
	296
	296
Copyright Statement: No part of this publication or documentation accompanying this product may be reproduced in any form or by any means or used to make any derivative such as translation, transformation, or adaptation without permission from D-Link Co	296

D-Link 3312SR Reference Manual - Page 176

enable ssl, DHE_DSS_with_3DES_EDE_CBC_SHA

Page 176 highlights