s5800交换机重协商攻击漏洞

如果设备涉及的配置只有restful https enable，如下操作就可以了 

ssl renegotiation disable 

undo restful https enable 

restful https enable 

可以 dis tcp 看下，现场启用了哪些端口，undo 的时候需要保证看不到如下这些端口，然后重新使能，规避措施才能生效

[H3C]dis tcp                                                                   

 *: TCP connection with authentication                                         

 Local Addr:port       Foreign Addr:port     State       Slot  PCB             

 0.0.0.0:80            0.0.0.0:0             LISTEN      1     0xffffffffffffffa                                                               // ip http enable、restful http enable、netconf soap  http enable

a                                                                              

 0.0.0.0:443           0.0.0.0:0             LISTEN      1     0xffffffffffffffa                                                              // ip http enable、ip https enable、restful https enable、

c                                                                               

 0.0.0.0:832           0.0.0.0:0             LISTEN      1     0xffffffffffffffa                                                              // netconf soap https enable

d