< Home

user-manage security cipher-suit

Function

The user-manage security cipher-suit command specifies the encryption algorithms that the HTTPS Web authentication page pushed by the FW.

The undo user-manage security cipher-suit command restores the default setting.

Format

user-manage security cipher-suit { high-strength | all }

undo user-manage security cipher-suit

Parameters

Parameter Description Value

high-strength

Supports high-strength encryption algorithms.

-

all

Supports all encryption algorithms.

Supports both the high-strength and middle-strength encryption algorithms.

-

Views

System view

Default Level

3: Management level

Usage Guidelines

By default, a FW supports high strong encryption algorithms.

The FW (server) and a PC (client) must run the same SSL protocol and use the same encryption algorithm. An inconsistency causes an SSL negotiation failure. During SSL negotiation, the PC sends the first Hello packets carrying the names of all SSL protocols and encryption algorithms that the PC supports to the FW. Upon receipt, the FW selects an SSL protocol and an encryption algorithm that the FW supports.

You are advised to set the high-strength parameter instead.

Example

# Enable the FW to support strong encryption algorithms.

<sysname> system-view
[sysname] user-manage security cipher-suit high-strength
Copyright © Huawei Technologies Co., Ltd.
Copyright © Huawei Technologies Co., Ltd.
< Previous topic Next topic >