v-gateway ssl-renegotiation-attack defend enable

Function

The v-gateway ssl-renegotiation-attack defend enable command enables defense against SSL renegotiation attacks.

The undo v-gateway ssl-renegotiation-attack defend enable command disables defense against SSL renegotiation attacks.

By default, SSL renegotiation attack defense is enabled.

Format

v-gateway ssl-renegotiation-attack defend enable

undo v-gateway ssl-renegotiation-attack defend enable

Parameters

None

Views

System view

Default Level

2: Configuration level

Usage Guidelines

When the SSL VPN gateway is exposed to an SSL renegotiation attack, you need to run this command to enable defense against such an attack. This command takes effect for all virtual gateways.

Example

# Enable defense against SSL renegotiation attacks.

<sysname> system-view
[sysname] v-gateway ssl-renegotiation-attack defend enable