web-manager security cipher-suit

Function

The web-manager security cipher-suit command specifies the encryption algorithms that the FW supports.

The undo web-manager security cipher-suit command restores the default setting.

Format

web-manager security cipher-suit { high-strength | all }

undo web-manager security cipher-suit

Parameters

Parameter	Description	Value
high-strength	Supports the high-strength encryption algorithms.	-
all	Supports both the high-strength and middle-strength encryption algorithms.	-

Views

System view

Default Level

3: Management level

Usage Guidelines

By default, a FW supports high strong encryption algorithms.

The FW (server) and a PC (client) must run the same SSL protocol and use the same encryption algorithm. An inconsistency causes an SSL negotiation failure. During SSL negotiation, the PC sends the first Hello packets carrying the names of all SSL protocols and encryption algorithms that the PC supports to the FW. Upon receipt, the FW selects an SSL protocol and an encryption algorithm that the FW supports.

You are advised to set the high-strength parameter instead.

Example

# Enable the FW to support strong encryption algorithms.

<sysname> system-view
[sysname] web-manager security cipher-suit high-strength