HP A7533A HP StorageWorks Fabric OS 6.1.1 administrator guide (5697-0235, Dece - Page 94
Configuring for the SSL protocol
![]() |
UPC - 829160830858
View all HP A7533A manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 94 highlights
Example: ipfilter --save block_telnet_v4 5. Activate the new ipfilter policy by issuing the following command: ipfilter --activate where policyname is the name of the policy you created in step 2. Example: ipfilter --activate block_telnet_v4 Unblocking Telnet To unblock Telnet: 1. Connect to the switch through a means other than Telnet (for example, SSH) and log in as admin. 2. Issue in the following command: ipfilter -delete where telnet_policyname is the name of the Telnet policy. 3. To permanently delete the policy, issue the following command: ipfilter --save For more information on IP Filter policies, see "Configuring advanced security features" on page 107. Configuring for the SSL protocol Secure sockets layer (SSL) protocol provides a secure sockets layer (SSL) protocol, which provides secure access to a fabric through Web-based management tools like Web Tools. SSL support is a standard Fabric OS feature. Switches configured for SSL grant access to management tools through hypertext transfer protocol-secure links (which begin with https://) instead of standard links (which begin with http://). SSL uses Public Key Infrastructure (PKI) encryption to protect data transferred over SSL connections. PKI is based on digital certificates obtained from an Internet Certificate Authority (CA), which acts as the trusted key agent. Certificates are based on the switch IP address or fully qualified domain name (FQDN), depending on the issuing CA. If you change a switch IP address or FQDN after activating an associated certificate, you may have to obtain and install a new certificate. Check with the CA to verify this possibility, and plan these types of changes accordingly. Browser and Java support Fabric OS supports the following Web browsers for SSL connections: • Internet Explorer (Microsoft Windows) • Mozilla (Solaris and Red Hat Linux) In countries that allow the use of 128-bit encryption, you should use the latest version of your browser. For example, Internet Explorer 6.0 and later supports 128-bit encryption by default. You can display the encryption support (called "cipher strength") using the Internet Explorer Help:About menu option. If you are running an earlier version of Internet Explorer, you may be able to download an encryption patch from the Microsoft website at http://www.microsoft.com. You should upgrade to the Java 1.5.0_06 Plug-in on your management workstation. To find the Java version that is currently running, open the Java console and look at the first line of the window. For more details on levels of browser and Java support, see the Web Tools Administrator's Guide. 94 Configuring standard security features
![](/manual_guide/products/hewlettpackard-ae370a-hp-storageworks-fabric-os-611-administrator-guide-56970235-2009-a28315e/94.png)