交换机被安全设备扫除漏洞了

漏洞规避措施：

[H3C]ssl server-policy fxm

[H3C-ssl-server-policy-fxm]ci

[H3C-ssl-server-policy-fxm]ciphersuite ? //选个非EDS，3EDS的算法

  dhe_rsa_aes_128_cbc_sha Cipher suite that uses DHE RSA, 128-bit AES_CBC, and

                           SHA

  dhe_rsa_aes_256_cbc_sha Cipher suite that uses DHE RSA, 256-bit AES_CBC, and

                           SHA

  exp_rsa_des_cbc_sha Export cipher suite that uses RSA, DES_CBC, and SHA

  exp_rsa_rc2_md5 Export cipher suite that uses RSA, RC2, and MD5

  exp_rsa_rc4_md5 Export cipher suite that uses RSA, RC4, and MD5

  rsa_3des_ede_cbc_sha Cipher suite that uses RSA, 3DES_EDE_CBC, and SHA

  rsa_aes_128_cbc_sha Cipher suite that uses RSA, 128-bit AES_CBC, and SHA

  rsa_aes_256_cbc_sha Cipher suite that uses RSA, 256-bit AES_CBC, and SHA

  rsa_des_cbc_sha Cipher suite that uses RSA, DES_CBC, and SHA

  rsa_rc4_128_md5 Cipher suite that uses RSA, 128-bit RC4, and MD5

  rsa_rc4_128_sha Cipher suite that uses RSA, 128-bit RC4, and SHA

重启https服务。

undo ip https enable

ip https enable