Configuring SSL Authentication on a GNE

After Secure Sockets Layer (SSL) authentication is configured on a GNE, the GNE can communicate with its interworking NMSs only when the exchanged packets are authenticated.

Prerequisites

Before configuring DCN SSL functions, configure an SSL policy and load a digital certificate. For detailed configuration procedure, see Configuring and Binding an SSL Policy.

Procedure

Run system-view
The system view is displayed.
Run dcn
The DCN view is displayed.
Run bind ssl-policy ssl-policy-name
An SSL policy is bound to DCN.

Load the certificate of the SSL policy to be bound to the NMSs and GNE, so DCN can use the certificate to implement SSL handshake authentication after the SSL policy is bound to DCN.
Run connect-mode { normal | security | both }
A connection mode is specified for the GNE to set up connections with NMSs.
- normal: indicates that SSL encryption is not applied to the TCP connection.
- security: indicates that SSL encryption is applied to the TCP connection.
- both: indicates that both normal and security are supported.
Run ssl verify-mode { single | dual }
The SSL authentication mode is configured.
- single: indicates that SSL authentication applies only to the GNE.
- dual: indicates that SSL authentication applies both to the GNE and NMS.
(Optional) Run ssl-auth-fail threshold-alarm report-times report-times
An alarm generation threshold is set for the number of SSL authentication failures within 60s.
Run commit
The configuration is committed.