secure-peering version
Set the TLS version. Options are to allow TLS version 1.3 only, TLS version 1.2 only, or prefer version 1.3 but allow both 1.3 and 1.2. The default setting is tls12_only, which allows TLS version 1.2 only.
Syntax
secure-peering version <version>
Parameters
<version> | Specifies the TLS version: • tls13_only—Only allow TLS v1.3. • tls12_only—Only allow TLS v1.2. • tls12_min—Prefer TLS v1.3 but allow TLS v1.2. |
Example
amnesiac (config) # secure-peering version tls13_only
Product
SteelHead, SteelHead-v, SteelHead-c
Related Commands
FIPS commands
This section describes the Federal Information Processing Standard (FIPS) support commands.
FIPS is a publicly announced set of validation standards developed by the United States National Institute of Standards and Technology (NIST) for use by government agencies and by government contractors.
FIPS 140-2 details the U.S. and Canadian Government requirements for cryptographic modules. Protection of a cryptographic module within a security system is necessary to maintain the confidentiality and integrity of the information protected by the module. For more information on the FIPS implementation, see the FIPS Administrator’s Guide.
It is not possible to enable FIPS mode in RiOS software version 9.14.1. A new FIPS certified capability is expected in version 9.14.2.