No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search

Reminder

To have a better experience, please upgrade your IE browser.

upgrade

Web-based Configuration Guide

AR650, AR1600, and AR6100 V300R003

This document describes how to configure and maintain your routers using the web platform.
Rate and give feedback:
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
SSL

SSL

Context

A router supports server Secure Sockets Layer (SSL) policies and client SSL policies.

  • To use a router as an SSL server, configure a server SSL policy on the router. During an SSL handshake, the router uses SSL parameters in the server SSL policy to negotiate session parameters with an SSL client. After the handshake is complete, the router establishes a session with the client.

  • To use a router as an SSL client, configure a client SSL policy on the router. During an SSL handshake, the router uses SSL parameters in the client SSL policy to negotiate session parameters with the SSL server. After the handshake is complete, the router establishes a session with the server.

Procedure

  • Creating an SSL policy

    • Creating a server SSL policy
      1. Access the SSL tab page.

        Log in to the web platform and choose Security > SSL. As show in Figure 14-44.

        Figure 14-44   SSL

      2. Click Create and set parameters in the Create SSL Policy dialog box that is displayed. Set SSL policy type to Server. Table 14-20 describes other parameters. As show in Figure 14-45.

      3. Click OK. A server SSL policy is added to the SSL policy list.

      Figure 14-45   Create SSL Policy

      Table 14-20  Server SSL policy parameters

      Parameter

      Description

      SSL policy name

      Name of an SSL policy. The value is a string of case-sensitive characters without spaces.

      SSL policy type

      Choose SSL policy type, the type is Server.

      PKI domain

      Name of a PKI domain. For details about the PKI domain configuration, see PKI.

      Maximum session count

      Maximum number of sessions that can be saved on the SSL server.

      Session timeout interval(s)

      Timeout period of a saved session. The value is an integer, in seconds.

      Supported cipher suite

      Cipher suite supported by the server SSL policy.

    • Creating a client SSL policy
      1. Access the SSL tab page.

        Log in to the web platform and choose Security > SSL.

      2. Click Create and set parameters in the Create SSL Policy dialog box that is displayed. Set SSL policy type to Client. Table 14-21 describes other parameters. As show in Figure 14-46.

      3. Click OK. A client SSL policy is added to the SSL policy list.

      Figure 14-46   Create SSL Policy

      Table 14-21  Client SSL policy parameters

      Parameter

      Description

      SSL policy name

      Name of an SSL policy. The value is a string of case-sensitive characters without spaces.

      SSL policy type

      Choose SSL policy type, the type is Client.

      SSL server identity authentication

      Whether to enable SSL server identity authentication.

      PKI domain

      Name of a PKI domain. For details about the PKI domain configuration, see PKI.

      SSL version

      SSL protocol version.

      Preferred cipher suite

      Cipher suite used by the client SSL policy.

  • Modifying an SSL policy
    1. Access the SSL tab page.

      Log in to the web platform and choose Security > SSL.

    2. Click of an SSL policy in the SSL Configuration List area.
    3. In the Modify SSL Policy dialog box that is displayed, modify parameters listed in Table 14-20 or Table 14-21. The parameter SSL policy name and SSL policy type cannot be modified. The parameters are the same as those in Figure 14-46
    4. Click OK.
  • Deleting an SSL policy
    1. Access the SSL tab page.

      Log in to the web platform and choose Security > SSL.

    2. Select an SSL policy and click Delete. In the Information dialog box that is displayed, click OK.
Download
Updated: 2019-04-12

Document ID: EDOC1100041803

Views: 31246

Downloads: 71

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Share
Previous Next