User manual

2
CLI Commands
2-81
config
Parameters This command has no parameters.
Command Example
Root> config security ssl resetKeys
config.security.ssl.setRenegotiationMB
Syntax setRenegotiationMB megabytes
Purpose This command sets the megabytes that can be transferred using SSL
before the SSL session is automatically re-negotiated. This
re-negotiation increases security by limiting the amount of data
encrypted with the same negotiated SSL parameters.
This command does not affect the SSL certificate or private key.
Instead, it indicates that a new SSL session should be re-negotiated
for the current SSL connection after the specified megabytes have
been transferred between the SSL client and the switch. The
re-negotiation is transparent to the user.
Parameters This command has one parameter:
Command Example
Root> config security ssl setRenegotiation 50
config.security.ssl.setWebState
Syntax setWebState sslEnabledState
Purpose This command enables the SSL for web interface. In order for a secure
(https://) connection to be accepted, the state must be set to enable;
otherwise, only http://" is accepted. The default WebState access is
non-secure.
If SSL is disabled, the https:// URL is rejected. If SSL is enabled, both
the http:// and https:// are accepted. However, the http:// URL
will immediately redirect the web browser to the https:// URL so
that all web communication is secure.
megabytes The number of megabytes transferred before the
SSL session is re-negotiated. Valid values are 50
(MB) to 1000 (1000 MB or 1 GB) or 0.