https-server-security-level

Configure the security level for HTTPS on networking devices.
Syntax
https-server-security-level
Command Default

The HTTPS server is not enabled and sytem will not accept HTTPS connections. However, if the HTTPS server is enabled but the https-server-security-level is not executed then the system uses the default security level.

Parameters
https-server-security-level
Displays and configures the security level for HTTPS on networking devices.
Modes

Global Configuration Mode

Usage Guidelines

This command is supported on the SmartZone controllers only.

Examples

The following example displays and configures the HTTPS on networking device.

device(config)# https-server-security-level
    Level    Description
   -------   ----------------------------------------------------------------------

    * 1      Ciphers    : TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
                          TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384,
                          TLS_DHE_RSA_WITH_AES_128_CBC_SHA256,
                          TLS_DHE_RSA_WITH_AES_256_CBC_SHA256,
                          TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
                          TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_AES_128_GCM_SHA256,
                          TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
                          TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_AES_256_GCM_SHA384
             Signatures : rsa_pkcs1_sha512, rsa_pkcs1_sha384, rsa_pkcs1_sha256, DSA+SHA512,
                          DSA+SHA384, DSA+SHA256, ecdsa_secp521r1_sha512,
                          ecdsa_secp384r1_sha384, ecdsa_secp256r1_sha256,
                          rsa_pss_rsae_sha512, rsa_pss_rsae_sha384, rsa_pss_rsae_sha256,
                          rsa_pss_pss_sha512, rsa_pss_pss_sha384, rsa_pss_pss_sha256

      2      Ciphers    : TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,
                          TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256, TLS_AES_128_GCM_SHA256,
                          TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,
                          TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384, TLS_AES_256_GCM_SHA384
             Signatures : rsa_pkcs1_sha512, rsa_pkcs1_sha384, rsa_pkcs1_sha256,
                          DSA+SHA512, DSA+SHA384, DSA+SHA256, ecdsa_secp521r1_sha512,
                          ecdsa_secp384r1_sha384, ecdsa_secp256r1_sha256,
                          rsa_pss_rsae_sha512, rsa_pss_rsae_sha384, rsa_pss_rsae_sha256,
                          rsa_pss_pss_sha512, rsa_pss_pss_sha384, rsa_pss_pss_sha256

Please select HTTPS server security level or 'No' to cancel: 2

Successful operation - https server security level [2]
% This configuration will take effect in 5 minutes.
History
Release version Command history
7.1.0 This command was introduced.
Parent topic: Commands G through I