F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Command Reference-6PW100

1100
Default command level
2: System level
Examples
# Enable certificate-based SSL server authentication.
<Sysname> system-view
[Sysname] ssl client-policy policy1
[Sysname-ssl-client-policy-policy1] server-verify enable
Related commands
display ssl client-policy
session
Use session to set the maximum number of cached sessions and the caching timeout time.
Use undo session to restore the default.
Syntax
session { cachesize size | timeout time } *
undo session { cachesize | timeout } *
Default
The maximum number of cached sessions is 500 and the caching timeout time is 3600 seconds.
Views
SSL server policy view
Default command level
2: System level
Parameters
cachesize size: Specifies the maximum number of cached sessions. The range is 100 to 1000.
timeout time: Specifies the caching timeout time in seconds. The range is 1800 to 72000.
Usage guidelines
It is a complicated process to use the SSL handshake protocol to negotiate session parameters and
establish sessions. To simplify the process, SSL allows reusing negotiated session parameters to establish
sessions. This feature requires that the SSL server maintain information about existing sessions.
The number of cached sessions and the session information caching time are limited:
• If the number of sessions in the cache reaches the maximum, SSL rejects to cache new sessions.
• If a session has been cached for a period equal to the caching timeout time, SSL removes the
information of the session.
Examples
# Set the caching timeout time to 4000 seconds and the maximum number of cached sessions to 600.
<Sysname> system-view
[Sysname] ssl server-policy policy1
[Sysname-ssl-server-policy-policy1] session timeout 4000 cachesize 600