v-gateway public ssl ciphersuit

Function

The v-gateway public ssl ciphersuit command configures the SSL cipher suite shared by virtual gateways.

The undo v-gateway public ssl ciphersuit command restores the default value of the SSL cipher suite.

Format

v-gateway public ssl ciphersuit allciphersuit

v-gateway public ssl ciphersuit custom { aes256-sha | non-aes256-sha } { aes128-sha | non-aes128-sha }

undo v-gateway public ssl ciphersuit

Parameters

Parameter	Description	Value
allciphersuit	Supports four types of common encryption suites.	-
custom	Indicates the customized encryption suite.	-
aes256-sha	Indicates the encryption suite of the AES256 encryption algorithm and SHA hash algorithm.	-
non-aes256-sha	Indicates that the encryption suite of the AES256 encryption algorithm and SHA hash algorithm is not used.	-
aes128-sha	Indicates the encryption suite of the AES128 encryption algorithm and SHA hash algorithm.	-
non-aes128-sha	Indicates that the encryption suite of the AES128 encryption algorithm and SHA hash algorithm is not used.	-

Views

System view

Default Level

2: Configuration level

Usage Guidelines

This command is configured only when virtual gateways of multiple virtual systems share a public IP address. This command can be configured only by the administrator of the root system.

By default, the virtual gateway supports two encryption suites: aes256-sha and aes128-sha.

An encryption suite is the combination of the encryption and hash algorithms.

Differences between encryption algorithms lie in:

The data block-based AES algorithm can be used independently or combined with the authentication algorithm.
The RSA, an asymmetric encryption algorithm, is usually used for key exchange or identity authentication.

The device supports two hash algorithms: SHA-1 and SHA-256. The client and device negotiates to determine a hash algorithm.

SHA-1 (160-bit digest) is more secure than the MD5 algorithm (128-bit digest).
SHA-256 (256-bit digest, which belongs to SHA-2) is more secure than SHA-1.

Example

# Set the public cipher suite of the virtual gateways to any of four types of commonly-used cipher suites.

<sysname> system-view
[sysname] v-gateway public ssl ciphersuit allciphersuit