secure-peering peer-tls-1.2
Enables support for the transport layer security (TLS) v1.1/1.2 encryption protocol on the secure inner channel between peer SteelHeads.
Syntax
[no] secure-peering peer-tls-1.2
Parameters
None
Usage
When you enable a secure inner channel, all data between the client-side and the server-side SteelHead appliances is sent over the secure inner channel. You configure the peer SteelHead appliances as SSL peers so that they are trusted entities. The SteelHead appliances authenticate each other by exchanging certificates as part of the encrypted inner-channel setup.
You can restrict the cipher list but you must have a common set of ciphers between peer SteelHeads so that peers can negotiate.
The TLS connection is v1.2 only when the TLS protocol is enabled on both the server-side and client-side SteelHeads. If the TLS version is mismatched between peers, the lower protocol version TLS v1.1 is used.
This command is enabled by default. Use the show secure-peering command to determine whether or not it is enabled.
Example
amnesiac (config) # secure-peering peer-tls-1.2
Product
SteelHead CX, SteelHead EX, SteelHead-v, SteelHead-c
Related Commands