WAC-380-30AC控制器有CVE-2016-2183和ssl若弱加密算法等漏洞

前两个可以参照如下配置，

1.CVE-2015-2808/CVE-2013-2566规避方案：

配置非RC4的算法

[H3C-ssl-server-policy-fxm]ciphersuite ?                                

  dhe_rsa_aes_128_cbc_sha  Cipher suite that uses DHE RSA, 128-bit AES_CBC, and SHA

  dhe_rsa_aes_256_cbc_sha  Cipher suite that uses DHE RSA, 256-bit AES_CBC, and SHA

  exp_rsa_des_cbc_sha      Export cipher suite that uses RSA, DES_CBC, and SHA

  exp_rsa_rc2_md5          Export cipher suite that uses RSA, RC2, and MD5

  exp_rsa_rc4_md5          Export cipher suite that uses RSA, RC4, and MD5

  rsa_3des_ede_cbc_sha     Cipher suite that uses RSA, 3DES_EDE_CBC, and SHA

  rsa_aes_128_cbc_sha      Cipher suite that uses RSA, 128-bit AES_CBC, and SHA

  rsa_aes_256_cbc_sha      Cipher suite that uses RSA, 256-bit AES_CBC, and SHA

  rsa_des_cbc_sha          Cipher suite that uses RSA, DES_CBC, and SHA

  rsa_rc4_128_md5          Cipher suite that uses RSA, 128-bit RC4, and MD5

  rsa_rc4_128_sha          Cipher suite that uses RSA, 128-bit RC4, and SHA

重启https服务。

undo ip https enable

ip https enable

2.CVE-2016-2183规避方案：

配置非DES，3DES的算法  

[H3C-ssl-server-policy-fxm]ciphersuite ?

  dhe_rsa_aes_128_cbc_sha Cipher suite that uses DHE RSA, 128-bit AES_CBC, and SHA

  dhe_rsa_aes_256_cbc_sha Cipher suite that uses DHE RSA, 256-bit AES_CBC, and SHA

  exp_rsa_des_cbc_sha Export cipher suite that uses RSA, DES_CBC, and SHA

  exp_rsa_rc2_md5 Export cipher suite that uses RSA, RC2, and MD5

  exp_rsa_rc4_md5 Export cipher suite that uses RSA, RC4, and MD5

  rsa_3des_ede_cbc_sha Cipher suite that uses RSA, 3DES_EDE_CBC, and SHA

  rsa_aes_128_cbc_sha Cipher suite that uses RSA, 128-bit AES_CBC, and SHA

  rsa_aes_256_cbc_sha Cipher suite that uses RSA, 256-bit AES_CBC, and SHA

  rsa_des_cbc_sha Cipher suite that uses RSA, DES_CBC, and SHA

  rsa_rc4_128_md5 Cipher suite that uses RSA, 128-bit RC4, and MD5

  rsa_rc4_128_sha Cipher suite that uses RSA, 128-bit RC4, and SHA

重启https服务。

undo ip https enable

ip https enable