Specifications
Table Of Contents
- Table of Contents
- Preface Template Formats
- Web-based (GUI) Configuration
- Configuration
- Device Information
- System Information
- Serial Port Settings
- IP Address Settings
- IPv6 Address Settings
- IPv6 Route Settings
- IPv6 Neighbor Settings
- Port Configuration Folder
- Static ARP Settings
- User Accounts
- System Log Configuration Folder
- DHCP Relay Folder
- MAC Address Aging Time
- Web Settings
- Telnet Settings
- CLI Paging Settings
- Firmware Information
- SNTP Settings Folder
- SMTP Settings Folder
- SNMP Settings Folder
- Layer 2 Features
- Jumbo Frame
- VLANs
- 802.1Q Static VLAN
- Q-in-Q Folder
- 802.1v Protocol VLAN Folder
- GVRP Settings
- Asymmetric VLAN Settings
- MAC-based VLAN Settings
- PVID Auto Assign Settings
- Port Trunking
- LACP Port Settings
- Traffic Segmentation
- IGMP Snooping Folder
- MLD Snooping Settings
- Port Mirror
- Loopback Detection Settings Page
- Spanning Tree Folder
- Forwarding & Filtering Folder
- LLDP Folder
- Quality of Service (QoS)
- Security
- Access Control List (ACL)
- Monitoring
- Save and Tools
- System Log Entries
- Trap List
Chapter 5: Security
Extreme Networks EAS 100-24t Switch Software Manual
116
Download Certificate
This window is used to download a certificate file for the SSL function on the Switch from a TFTP
server. The certificate file is a data record used for authenticating devices on the network. It contains
information on the owner, keys for authentication and digital signatures. Both the server and the client
must have consistent certificate files for optimal use of the SSL function. The Switch only supports
certificate files with .der file extensions. The Switch is shipped with a certificate pre-loaded though the
user may need to download more, depending on user circumstances.
Ciphersuite
This window will allow the user to enable SSL on the Switch and implement any one or combination of
listed ciphersuites on the Switch. A ciphersuite is a security string that determines the exact
cryptographic parameters, specific encryption algorithms and key sizes to be used for an authentication
session. The Switch possesses four possible ciphersuites for the SSL function, which are all enabled by
default. To utilize a particular ciphersuite, disable the unwanted ciphersuites, leaving the desired one
for authentication.
When the SSL function has been enabled, the web will become disabled. To manage the Switch through
the web based management while utilizing the SSL function, the web browser must support SSL
encryption and the header of the URL must begin with https://. (Ex. https://10.1.1.1) Any other
method will result in an error and no access can be authorized for the web-based management.
To view this window, click Security > SSL Settings:
In this window, the following parameters can be configured:
Parameters Description
SSL Settings
SSL Status Enable or Disable the SSL status on the switch. The default is disabled.
Cache Timeout
(60-86400)
This field will set the time between a new key exchange between a client and
a host using the SSL function. A new SSL session is established every time
the client and host go through a key exchange. Specifying a longer timeout
will allow the SSL session to reuse the master key on future connections with
that particular host, therefore speeding up the negotiation process. The default
setting is 600 seconds.