D-Link DGS-3130 Emulator - Page 752

DGS-3130 Layer 3 Stackable Managed Switch CLI Reference Guide Switch# show ssl-service-policy SSL Policy Name : policy1 Enabled CipherSuites : DHE_DSS_WITH_3DES_EDE_CBC_SHA, RSA_WITH_3DES_EDE_CBC_SHA, RSA_WITH_RC4_128_SHA, RSA_WITH_RC4_128_MD5, RSA_EXPORT_WITH_RC4_40_MD5 Session Cache Timeout: 600 Secure Trustpoint : TP1 SSL Policy Name : policy2 Enabled CipherSuites : RSA_WITH_3DES_EDE_CBC_SHA, RSA_WITH_RC4_128_MD5, RSA_EXPORT_WITH_RC4_40_MD5 Session Cache Timeout: 1200 Secure Trustpoint : TP2 Switch# 73-8 ssl-service-policy This command is used to configure the SSL service policy. ssl-service-policy POLICY-NAME [ciphersuite [dhe-dss-3des-ede-cbc-sha] [rsa-3des-ede-cbc-sha] [rsarc4-128-sha] [rsa-rc4-128-md5] [rsa-export-rc4-40-md5] | secure-trustpoint TRUSTPOINT | sessioncache-timeout TIME-OUT] no ssl-service-policy POLICY-NAME [ciphersuite [dhe-dss-3des-ede-cbc-sha] [rsa-3des-ede-cbc-sha] [rsa-rc4-128-sha] [rsa-rc4-128-md5] [rsa-export-rc4-40-md5] | secure-trustpoint | session-cache-timeout] Parameters POLICY-NAME ciphersuite secure-trustpoint TRUSTPOINT Specifies the name of the SSL service policy. (Optional) Specifies the cipher suites that should be used by the secure service when negotiating a connection with a remote peer. dhe-dss-3des-ede-cbc-sha - Use DH key exchange with 3DES-EDE-CBC encryption and SHA for message digest. rsa-3des-ede-cbc-sha - Use RSA key exchange with 3DES and DES-EDE3CBC for message encryption and the Secure Hash Algorithm (SHA) for message digest. rsa-rc4-128-sha - Use RSA key exchange with RC4 128-bit encryption for message encryption and SHA for message digest. rsa-rc4-128-md5 - Use RSA key exchange with RC4 128-bit encryption for message encryption and Message Digest 5 (MD5) for message digest. rsa-export-rc4-40-md5 - Use RSA EXPORT key exchange with RC4 40 bits for message encryption and MD5 for message digest. When the cipher suite is not configured, the SSL client and server will negotiate the best cipher suite that they both support from the list of available cipher suites. Multiple cipher suites can be specified to be used. Use the no form of this command to disable the selected cipher suites. (Optional) Specifies the name of the trust-point that should be used in SSL handshake. When this parameter is not specified, the trust-point which is specified as the primary will be used. If no primary trust-point is specified, the 748