PLANET XGS3-24040 - Manual (Page 793)

48-1
Chapter 48 Commands for SSL
Configuration
48.1 ip http secure-server
Command: ip http secure-server
no ip http secure-server
Function: Enable/disable SSL function.
Parameter: None.
Command Mode: Global Mode.
Default: Disabled.
Usage Guide: This command is used for enable and disable SSL function. After enable SSL function, the
users visit the switch through https client, switch and client use SSL connect, can form safety SSL
connect channel. After that, all the data which transmit of the application layer will be encrypted, then
ensure the privacy of the communication.
Example: Enable SSL function.
Switch(config)# ip http secure-server
48.2 ip http secure-port
Command: ip http secure-port <port-number>
no ip http secure-port
Function: Configure/delete port number by SSL used.
Parameter: <port-number> means configured port number, range between 1025 to 65535. 443 is for
default.
Command Mode: Global Mode.
Default: Not configure.
Usage Guide: If this command is used to configure the port number, then the configured port number is
used to monitor. If the port number for https is changed, when users try to use https to connect, must use
the changed one. For example: https://device:port_number. SSL function must reboot after every change.
Example: Configure the port number is 1028.
Switch(config)# ip http secure-port 1028
48.3 ip http secure- ciphersuite
Command: ip http secure-ciphersuite {des-cbc3-sha|rc4-128-sha| des-cbc-sha}
no ip http secure-ciphersuite
Function: Configure/delete secure cipher suite by SSL used.
Parameter: des-cbc3-sha encrypted algorithm DES_CBC3，summary algorithm SHA.
rc4-128-sha encrypted algorithm RC4_128，summary algorithm SHA.
des-cbc-sha encrypted algorithm DES_CBC，summary algorithm SHA.
default use is rc4-md5.
Command Mode: Global Mode.