user-manage security version

Function

The user-manage security version command sets the SSL version supported on the Web authentication page pushed by the FW.

The undo user-manage security version command restores the default value for the SSL version supported by the web authentication page pushed by the FW.

Format

user-manage security version { { tlsv1 | tlsv1.1 | tlsv1.2 } ^* | all }

undo user-manage security version

Parameters

Parameter	Description	Value
tlsv1	Indicates the TLS1.0 version.	-
tlsv1.1	Indicates the TLS1.1 version.	-
tlsv1.2	Indicates the TLS1.2 version.	-
all	Indicates all SSL versions, including TLS1.0, TLS1.1, and TLS1.2.	-

Views

System view

Default Level

3: Management level

Usage Guidelines

By default, the Web authentication page pushed by the FW supports TLS1.2.

The SSL versions supported by the FW and Web browser must match. If the Web browser of a user uses an outdated and insecure SSL version, the authentication page cannot be opened. A message is displayed, indicating that no security connection cannot be established.

TLS1.0 and TLS1.1 have security risks. TLS1.2 and higher versions are recommended.

Example

# Set the SSL version for user management to TLS1.2.

<sysname> system-view
[sysname] user-manage security version tlsv1.2