s5800交換機重協商攻擊漏洞

如果設備涉及的配置隻有restful https enable，如下操作就可以了 

ssl renegotiation disable 

undo restful https enable 

restful https enable 

可以 dis tcp 看下，現場啟用了哪些端口，undo 的時候需要保證看不到如下這些端口，然後重新使能，規避措施才能生效

[H3C]dis tcp                                                                   

 *: TCP connection with authentication                                         

 Local Addr:port       Foreign Addr:port     State       Slot  PCB             

 0.0.0.0:80            0.0.0.0:0             LISTEN      1     0xffffffffffffffa                                                               // ip http enable、restful http enable、netconf soap  http enable

a                                                                              

 0.0.0.0:443           0.0.0.0:0             LISTEN      1     0xffffffffffffffa                                                              // ip http enable、ip https enable、restful https enable、

c                                                                               

 0.0.0.0:832           0.0.0.0:0             LISTEN      1     0xffffffffffffffa                                                              // netconf soap https enable

d