RADIUS TLS Cipher Support

Version 33.3.1 adds support for RADIUS TLS cipher configuration. Additionally, for ECDHA ciphers, the curves list is fixes as secp256r1, secp384r1, and secp521r1. The following ciphers are supported:

Default mode -

TLS_RSA_WITH_AES_128_CBC_SHA
TLS_RSA_WITH_AES_128_CBC_SHA256
TLS_RSA_WITH_AES_256_CBC_SHA256
TLS_DHE_RSA_WITH_AES_256_CBC_SHA256
TLS_DHE_RSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

FIPS mode -

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

Supported Platforms

All platforms.

New CLI Command

The following new CLI command supports this feature:

configure radius tls cipher [[ cipher | fips_cipher | all ] on | [ cipher | fips_cipher] off ]