0

I would like to know the command on how I can disable the TLS v1.0 and v1.1 in the Cisco ISR4321/K9 and just retain TLS v1.2 ?

John

Improve this question
2
  • 3
    For which function/protocol? – Zac67 Jun 8 '20 at 14:40
  • Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can post and accept your own answer. – Ron Maupin♦ Dec 17 '20 at 17:55
1

The ability to specify TLS version was added in IOS-XE 16.4.1 so you will want to make sure you have that version or later.

To specify version you can use the following commands:

ip http server tls-version TLSv1.2

ip http client tls-version TLSv1.2

Reference document: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/https/configuration/xe-16-5/https-xe-16-5-book/nm-nginx-http-web-security.html

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.