Huawei AR1200-S User Manual

By default, a maximum of 128 sessions can be saved, and the timeout period of a saved session
is 3600s.
Step 5 (Optional) Run:
ciphersuite { rsa_aes_128_cbc_sha | rsa_des_cbc_sha | rsa_rc4_128_md5 |
rsa_rc4_128_sha }
*
A cipher suite is specified.
By default, a server SSL policy supports all the cipher suites: rsa_aes_128_cbc_sha,
rsa_des_cbc_sha, rsa_rc4_128_md5, and rsa_rc4_128_sha.
----End
Example
# Run the display ssl policy policy-name command to view the configuration of the SSL policy
server-users.
<Huawei> display ssl policy server-users
------------------------------------------------------------------------------
Policy name : server-
users
Policy ID : 1
Policy type : Server
Cache number : 128
Time out(second) : 3600
Server certificate load status :
loaded
Bind number : 1
SSL connection number : 1
--------------------------------------------------------------------------
11.4 Configuring a Client SSL Policy
A client SSL policy defines the parameters that an SSL client uses in SSL handshakes, including
the PKI domain name, SSL protocol version, and cipher suite.
Prerequisites
The PKI domain has been configured.
Applicable Environment
The SSL protocol uses data encryption, identity authentication, and message integrity check to
ensure security of TCP-based application layer protocols. To use an AR1200-S as an SSL client,
configure a client SSL policy on the AR1200-S. A client SSL policy can be applied to application
layer protocols such as the CPE WAN Management Protocol (CWMP) to provide secure
connections.
Figure 11-3 AR1200-S functions as an SSL client
Internet
SSL server
SSL client
Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security 11 SSL Configuration
Issue 02 (2012-03-30) Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
222

Huawei AR1200-S Specifications

General

Brand	Huawei
Model	AR1200-S
Category	Network Router
Language	English