...
Multiexcerpt include |
---|
MultiExcerptName | DTLS Crypto Suites |
---|
PageWithExcerpt | TLS for Signaling |
---|
|
To View
...
DTLS Profiles
On the SBC main screen, go to All > Profiles > Security > Dtls DTLS Profile.
The Dtls DTLS Profile window is displayedopens.
Caption |
---|
0 | Figure |
---|
1 | Security - Dtls DTLS Profile List Window |
---|
|
|
Image Modified |
...
To Edit Dtls Profile
To edit any of the Dtls Profile in the list, click the radio button next to the specific Dtls Profile name.
Caption |
---|
0 | Figure |
---|
1 | Security - Dtls Profile Highlighted |
---|
|
|
Image Removed
The Edit Selected Dtls Profile window is displayed below.
Caption |
---|
0 | Figure |
1 | Security - Dtls Profile Edit |
---|
|
Image Removed
Make the required changes and click Save at the right hand bottom of the panel to save the changes made.
...
To Create a DTLS Profile
To create a new Dtls Profile, click New Dtls Profile tab on the Dtls Profile List panel.
Caption |
---|
0 | Figure |
---|
1 | Security - Dtls Profile Fields |
---|
|
|
Image Removed
...
DTLS Profile:
Click New DTLS Profile. The Create New DTLS Profile window opens.
...
Create DTLS Profile Window |
|
Image Added |
- Use the following table to configure the options and then click Save.
Image Removed
...
Caption |
---|
0 | Table |
---|
1 | Dtls DTLS Profile Parameters |
---|
|
|
Parameter | Description |
---|
Name | Specifies the name of the Dtls Profile DTLS Profile created. The value ranges up to 23 characters. |
Handshake Timer | Specifies the time in which the Dtls handshake DTLS handshake must be completed. The timer starts when the TCP connection is established. Must be 1 - 60 seconds; default is 5. |
Session Resump Timer | Specifies the Dtls session DTLS session resumption period for which cached sessions are retained (in seconds). Dtls allows DTLS allows successive connections to be created within one Dtls session DTLS session and the resumption of a session after a Dtls connection DTLS connection is closed or after a server card failover, without repeating the entire authentication and other setup steps for each connection, except when the space must be reclaimed for a new session. Must be 0 - 86,400 seconds; default is 300. |
Cipher Suite1 | Use this parameter to specify the first Dtls Cipher DTLS Cipher Suite choice for this profile. nosuite
rsa-with-aes-128-cbc-sha (default) – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol.rsa-with-aes-128-cbc-sha-256 – Confidentiality – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with SHA-256 as the hash function.
rsa-with-aes-256-cbc-sha – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 256 encryption. rsa-with-aes-256-cbc-sha-256 * – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 256 encryption and SHA-256 as the hash function.
rsa-with-null-sha – – The integrity cipher used for the Dtls Record DTLS Record protocol.
tls_ecdh_ecdsa_with_aes_256_cbc_sha384 ** – Confidentiality cipher and mode for Dtls Record DTLS Record with AES256 GCM and SHA384 as hash function.tls_ecdh_ecdsa_with_aes_256_gcm_sha384 ** – Confidentiality cipher and mode for Dtls Record DTLS Record with AES256 CBC and SHA384 as hash function.
tls_ecdhe_rsa_with_aes_256_cbc_sha384 * – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange).
tls_ecdhe_rsa_with_aes_128_cbc_sha – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange) with AES128 CBC and SHA as hash function.tls_ecdhe_rsa_with_aes_128_gcm_sha256 – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange) with AES128 GCM and SHA as the hash function.
tls-ecdhe-rsa-with-aes-256-gcm-sha-384* – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange) with AES256 GCM and SHA384 as the hash function.
tls_rsa_with_aes_128_gcm_sha256 – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 128 GCM encryption and SHA-256 as the hash function.tls_rsa_with_aes_256_gcm_sha384 – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 256 GCM encryption and SHA-384 as the hash function.
* To use this cipher, Dtls DTLS version 1.2 must be enabled in the Dtls ProfileDTLS Profile. ** To use this cipher, Dtls DTLS version 1.2 must be enabled in the Dtls Profile DTLS Profile and SSL certificates must be created using ECC keys. Warning: When fips-140-2 mode is enabled, rsa-with-null-sha should not be used. Include Page |
---|
| _FIPS_Releases |
---|
| _FIPS_Releases |
---|
|
|
Cipher Suite2 | Use this parameter to specify the second Dtls Cipher DTLS Cipher Suite choice for this profile. nosuite (default)
rsa-with-aes-128-cbc-sha (default) – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol.rsa-with-aes-128-cbc-sha-256 – Confidentiality – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with SHA-256 as the hash function.
rsa-with-aes-256-cbc-sha – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 256 encryption. rsa-with-aes-256-cbc-sha-256 * – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 256 encryption and SHA-256 as the hash function.
rsa-with-null-sha – – The integrity cipher used for the Dtls Record DTLS Record protocol.
tls_ecdh_ecdsa_with_aes_256_cbc_sha384 ** – Confidentiality cipher and mode for Dtls Record DTLS Record with AES256 GCM and SHA384 as hash function.tls_ecdh_ecdsa_with_aes_256_gcm_sha384 ** – Confidentiality cipher and mode for Dtls Record DTLS Record with AES256 CBC and SHA384 as hash function.
tls_ecdhe_rsa_with_aes_256_cbc_sha384 * – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange).
tls_ecdhe_rsa_with_aes_128_cbc_sha – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange) with AES128 CBC and SHA as hash function. tls_ecdhe_rsa_with_aes_128_gcm_sha256 – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange) with AES128 GCM and SHA as the hash function.
tls-ecdhe-rsa-with-aes-256-gcm-sha-384* – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange) with AES256 GCM and SHA384 as the hash function.
tls_rsa_with_aes_128_gcm_sha256 – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 128 GCM encryption and SHA-256 as the hash function.tls_rsa_with_aes_256_gcm_sha384 – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 256 GCM encryption and SHA-384 as the hash function.
* To use this cipher, Dtls version DTLS version 1.2 must be enabled in the Dtls ProfileDTLS Profile. ** To use this cipher, Dtls version DTLS version 1.2 must be enabled in the Dtls Profile DTLS Profile and SSL certificates must be created using ECC keys. Warning: When fips-140-2 mode is enabled, rsa-with-null-sha should not be used. |
Cipher Suite3 | Use this parameter to specify the third Dtls Cipher DTLS Cipher Suite choice for this profile. nosuite (default)
rsa-with-aes-128-cbc-sha (default) – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol.rsa-with-aes-128-cbc-sha-256 – Confidentiality – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with SHA-256 as the hash functionfunction.
rsa-with-aes-256-cbc-sha – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 256 encryption. rsa-with-aes-256-cbc-sha-256 * – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 256 encryption and SHA-256 as the hash function.
rsa-with-null-sha – – The integrity cipher used for the Dtls Record DTLS Record protocol.
tls_ecdh_ecdsa_with_aes_256_cbc_sha384 ** – Confidentiality cipher and mode for Dtls Record DTLS Record with AES256 GCM and SHA384 as hash function.tls_ecdh_ecdsa_with_aes_256_gcm_sha384 ** – Confidentiality cipher and mode for Dtls Record DTLS Record with AES256 CBC and SHA384 as hash function.
tls_ecdhe_rsa_with_aes_256_cbc_sha384 * – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange).
tls_ecdhe_rsa_with_aes_128_cbc_sha – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange) with AES128 CBC and SHA as hash function.tls_ecdhe_rsa_with_aes_128_gcm_sha256 – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange) with AES128 GCM and SHA as the hash function.
tls-ecdhe-rsa-with-aes-256-gcm-sha-384* – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol using ECDHE (Elliptic Curve Diffie-Hellman key Exchange) with AES256 GCM and SHA384 as the hash function.
tls_rsa_with_aes_128_gcm_sha256 – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 128 GCM encryption and SHA-256 as the hash function.tls_rsa_with_aes_256_gcm_sha384 – Confidentiality cipher and mode for the Dtls Record DTLS Record protocol with AES 256 GCM encryption and SHA-384 as the hash function.
* To use this cipher, Dtls version DTLS version 1.2 must be enabled in the Dtls ProfileDTLS Profile. ** To use this cipher, Dtls version DTLS version 1.2 must be enabled in the Dtls Profile DTLS Profile and SSL certificates must be created using ECC keys. Warning: When fips-140-2 mode is enabled, rsa-with-null-sha should not be used. |
Dtls Role DTLS Role | Specifies the allowed DTLS roles of this DTLS profile. The options are: |
Hash Type | Specifies the allowed DTLS hash function for a specified DTLS profile. The options are: Md2 Md5 Sha1 (default)
Sha224 Sha256 Sha384 Sha512
|
Cert Name | Specifies the name of the certificate referred by a specified DTLS profile. The default value is defaultDtlsSBCCert . |
Cookie Exchange | Specifies the state that is, enabled or disabled cookie exchange. disabled enabled (default)
|
V1_0 | Dtls protocol DTLS protocol version 1.0. disabled enabled (default)
|
V1_1 | Dtls protocol DTLS protocol version 1.1. disabled (default)
enabled |
V1_2 | Dtls protocol DTLS protocol version 1.2. disabled (default) enabled
|
To Edit a DTLS Profile
To edit a DTLS Profile:
- Click the radio button next to the specific DTLS Profile name. The Edit DTLS Profile window opens.
- Make the required changes and click Save.
To Copy
...
a DTLS Profile
To copy any of the created Dtls Profile and to make any minor changes, click a DTLS Profile and make minor changes:
- Click the radio button next to the specific
...
Caption |
---|
0 | Figure |
---|
1 | Security - Dtls Profile Highlighted |
---|
|
|
Image Removed
Click Copy Dtls Profile tab on the Dtls Profile List panel.
Caption |
---|
0 | Figure |
---|
1 | Security - Dtls Profile Fields |
---|
|
|
Image Removed
The Copy Selected Dtls Profile window is displayed along with the field details which can be edited.
Caption |
---|
0 | Figure |
---|
1 | Security - Dtls Profile Copy |
---|
|
|
Image Removed
Make the required changes to the required fields and click Save to save the changes. The copied Dtls Profile is displayed at the bottom of the original Dtls Profile in the Dtls Profile List panel.
To Delete Dtls Profile
...
- DTLS Profile to copy.
- Click Copy DTLS Profile. The Copy DTLS Profile window opens.
- Make any required changes and click Save.
To Delete a DTLS Profile
To delete a DTLS Profile:
- Click the radio button next to the specific
...
- DTLS Profile that you want to delete.
...
Caption |
---|
0 | Figure |
---|
1 | Security - Dtls Profile Highlighted |
---|
|
|
...
- Click the Delete icon (X) at the end of the
...
- row.
...
-
- Confirm the deletion when prompted.
Caption |
---|
0 | Figure |
---|
1 | Security - Dtls Profile Delete Confirmation |
---|
|
|
Image Removed
Click Yes to remove the specific Dtls Profile from the list.