RADIUS TLS Cipher ConfigurationNEW!

Version 33.3.1 adds support for RADIUS TLS cipher configuration. Additionally, for ECDHA ciphers, the curves list is fixes as secp256r1, secp384r1, and secp521r1. The following ciphers are supported:

Default mode -

• TLS_RSA_WITH_AES_128_CBC_SHA
• TLS_RSA_WITH_AES_128_CBC_SHA256
• TLS_RSA_WITH_AES_256_CBC_SHA256
• TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
• TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

FIPS mode -

• TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
• TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

To configure RADIUS TLS ciphers, use the following command:

configure radius tls cipher [[ cipher | fips_cipher | all ] on | [ cipher | fips_cipher] off ].

Use the show radius command to show RADIUS TLS Cipher information.