Configuration changes in FIPS mode

After you enable the FIPS mode and reboot the switch, the switch operates in FIPS mode after it starts up and the following changes occur:

• FTP/TFTP is disabled.

• Telnet is disabled.

• The HTTP server is disabled.

• Cluster management is disabled.

• SNMPv1 and SNMPv2c are disabled. Only SNMPv3 is available.

• The SSL server only supports TLS1.0.

• The SSH server does not support SSHv1 clients.

• SSH only supports RSA.

• The generated RSA key pairs must have a modulus length of 2048 bits. The generated DSA key pair must have a modulus of at least 1024 bits.

• SSH, SNMPv3, IPsec, and SSL do not support DES, 3DES, RC4, or MD5.