- Preface
- New and Changed Information
- Security Overview
- Configuring FIPS
- Configuring User Accounts and RBAC
- Configuring Security Features on an External AAA Server
- Configuring IPv4 and IPv6 Access Control Lists
- Configuring Certificate Authorities and Digital Certificates
- Configuring SSH Services and Telnet
- Configuring IP Security
- Configuring FC-SP and DHCHAP
- Configuring Port Security
- Configuring Fibre Channel Common Transport Management Security
- Configuring Fabric Binding
- Configuring Cisco TrustSec Fibre Channel Link Encryption
- Configuring Secure Boot
- Index
New and Changed Information
Feature Name |
Description |
Release |
Where Documented |
---|---|---|---|
Encryption Character Limit |
Support to allow 256 bits for encryption key is added. The switch(config-sa)# encryption command has been introduced in configuration mode. |
9.4(3) | About Cisco TrustSec FC Link Encryption |
Custom SSH Cryptographic Algorithms |
You can configure support for SSH key exchange algorithms, message authentication codes (MACs), key types, and ciphers. | 9.4(1) | Customizing SSH Cryptographic Algorithms |
show ssl info |
Support for viewing the SSL version was added. |
8.4(2) |
|
Custom Roles |
Support for creating custom roles was added. The attribute-admin keyword was added for the rule command. |
8.3(1) |
|
LDAP Enhancements |
LDAP connections on port 636 automatically start securely with SSL or TLS. |
8.2(1) |