Filter
Top Products
6: Basic Parameters
SLC™ 8000 Advanced Console Manager User Guide 73
localsubnet <one or more subnets in CIDR notation>
ikenegotation <main|aggressive>
ikeenc <any|3des|aes>
ikeauth <any|sha1|md5>
ikedhgroup <any|dh2|dh5>
espenc <any|3des|aes>
espauth <any|sha1|md5>
espdhgroup <any|dh2|dh5>
pfs <enable|disable>
modeconfig <enable|disable>
xauthclient <enable|disable>
xauthlogin <User Login>
2. Enter RSA public key or Pre-Shared Key of remote host: set vpn key
3. Enter XAUTH password: set vpn xauthpassword
4. Display all VPN settings and current status: show vpn [email <Email Address>]
5. Display detailed VPN status: show vpn status [email <Email Address>]
6. Display VPN logs: show vpn viewlog [numlines <Number of Lines][email
<Email Address>]
7. Dispplay RSA public key of the SLC: show vpn rsakey
Security
The SLC 8000 advanced console manager supports a security mode that complies with the FIPS
140-2 standard. FIPS (Federal Information Processing Standard) 140-2 is a security standard
developed by the United States federal government that defines rules, regulations and standards
for the use of encryption and cryptographic services. The National Institute of Standards and
Technology (NIST) maintains the documents related to FIPS at:
http://csrc.nist.gov/publications/PubsFIPS.html
FIPS 140-2 defines four security levels, Level 1 through Level 4. The SLC unit uses a FIPS
module certified at Level 1.
To enable FIPS mode, the Network -> Security -> FIPS Mode flag needs to be enabled and the
SLC unit rebooted. Each time the SLC unit is booted in FIPS mode, it will perform a power up self
test to verify the integrity of the SLC unit's cryptographic module. If there are any issues with the
integrity of the cryptographic module, FIPS mode will be disabled and the SLC unit will be
rebooted into non-FIPS mode.
When the SLC unit is running in FIPS mode, the following protocols will be supported: SSL v3.1/
TLS 1.0, TLS 1.1, TLS 1.2, and SSH v2.
For SSL and TLS, the SLC unit will support the following cipher suites:
AES128-SHA
AES128-SHA256
AES128-GCM-SHA256
AES256-SHA
AES256-SHA256
AES256-GCM-SHA384