Configuring https login – H3C Technologies H3C S12500 Series Switches User Manual
Page 48
36
Step Command
Remarks
4.
Configure the HTTP service
port number.
ip http port port-number
Optional.
80 by default.
If you execute the command
multiple times, the most recent
configuration takes effect.
5.
Associate the HTTP service
with an ACL.
ip http acl acl-number
Optional.
By default, the HTTP service is not
associated with any ACL.
Associating the HTTP service with
an ACL enables the switch to allow
only clients permitted by the ACL to
access the switch.
6.
Create a local user and enter
local user view.
local-user user-name
By default, no local user is
configured.
7.
Configure a password for the
local user.
password { cipher | simple }
password
By default, no password is
configured for the local user.
8.
Specify the command level of
the local user.
authorization-attribute level level
No command level is configured
for the local user.
9.
Specify the Telnet service type
for the local user.
service-type web
By default, no service type is
configured for the local user.
10.
Exit to system view.
quit
N/A
11.
Create a VLAN interface and
enter its view.
interface vlan-interface
vlan-interface-id
If the VLAN interface already
exists, the command enters its
view.
12.
Assign an IP address and
subnet mask to the VLAN
interface.
ip address ip-address { mask |
mask-length }
By default, no IP address is
assigned to the VLAN interface.
Configuring HTTPS login
The switch supports the following HTTPS login modes:
•
Simplified mode—To make the switch operate in this mode, you only need to enable HTTPS service
on the switch. The switch will use a self-signed certificate (a certificate that is generated and signed
by itself, rather than a CA) and the default SSL settings. This mode is simple to configure but has
potential security risks.
•
Secure mode—To make the switch operate in this mode, you must enable HTTPS service on the
switch, specify an SSL server policy for the service, and configure PKI domain-related parameters.
This mode is more complicated to configure but provides higher security.
For more information about SSL and PKI, see Security Configuration Guide.
To configure HTTPS login: