Manualshelf

Users Guide

ManualsBrandsDell ManualsAccess PlatformsPowerSwitch S4248FB-ON /S4248FBL-ON
1171117211731174117511761177117811791180
Table Of Contents
Usage
Information
Before you use the crypto crl install command, copy a CRL to the home:// or usb://
directory. If you do not enter a CRL filename in the command, you can copy and paste it when prompted.
Use the show crypto crl command to view the CRLs that are already installed on the switch. In the
show output, the CRLs displayed under Manually installed CRLs are installed using the crypto
crl install command.
Example
OS10# copy scp:///tftpuser@10.11.178.103:/crl_example_file.pem home://
password:
OS10# crypto crl install home://
Network_Solutions_Certificate_Authority.0.crl.pem
OS10# show crypto crl
--------------------------------------
| Manually installed CRLs |
--------------------------------------
Network_Solutions_Certificate_Authority.0.crl.pem
--------------------------------------
| Downloaded CRLs |
--------------------------------------
Supported
Releases
10.5.0 or later
crypto fips enable
Enables FIPS mode.
Syntax
crypto fips enable
Parameters None
Default Not configured
Command mode EXEC
Usage
information
You can use OS10 in FIPS 140-2 compliant mode. In this mode, applications restrict their use of
cryptographic algorithms to those supported by the NIST FIPS 140-2 standard and certification process.
When you enable FIPS mode:
● The SSH service restarts. Existing SSH sessions are not affected. Only new SSH sessions operate in
the enabled FIPS mode.
● SSH host keys are regenerated.
● If SNMPv3 is configured with privacy settings, it operates in FIPS mode.
If you enable FIPS using the crypto fips enable command, RADIUS over TLS operates in FIPS
mode. In FIPS mode, RADIUS over TLS requires that a FIPS-compliant certificate and key pair are
installed on the switch.
Example
OS10# crypto fips enable
Supported
releases
10.4.3.0 or later
crypto security-profile
Creates an application-specific security profile.
Syntax
crypto security-profile profile-name
Parameters profile-name — Enter the name of the security profile; a maximum of 32 characters.
Default Not configured
Command mode CONFIGURATION
1180 Security