H3C Technologies H3C SecBlade LB Cards - Manual (Page 52)

42
# Associate the HTTPS service with certificate attribute-based access control policy myacp.
[LB] ip https certificate access-control-policy myacp
# Enable the HTTPS service.
[LB] ip https enable
# Create a local user named usera, set the password to 123, specify the Web service type, and
specify the user privilege level 3. A level-3 user can perform all operations supported by the LB.
[LB] local-user usera
[LB-luser-usera] password simple 123
[LB-luser-usera] service-type web
[LB-luser-usera] authorization-attribute level 3
2. Configure the host (HTTPS client):
On the host, run the IE browser, and then enter http://10.1.2.2/certsrv in the address bar and
request a certificate for the host as prompted.
3. Verify the configuration:
Enter https://10.1.1.1 in the address bar, and select the certificate issued by new-ca. When the
Web login page of LB appears, enter the username usera and password 123 to log in to the Web
management page.
For more information about PKI configuration commands, SSL configuration commands, and the
public-key local create rsa command, see Security Command Reference.
Troubleshooting Web browser
Cannot access the device through the Web interface
Symptom
You can ping the device and log in to the device through Telnet. HTTP is enabled and the operating
system and browser version meet the Web interface requirements. However, you cannot access the Web
interface of the device.
Analysis
• If you use the Microsoft Internet Explorer, you can access the Web interface only when the following
functions are enabled: Run ActiveX controls and plug-ins, script ActiveX controls marked safe for
scripting and active scripting.
• If you use the Mozilla Firefox, you can access the Web interface only when JavaScript is enabled.
Configuring the Internet Explorer settings
1. Open the Internet Explorer, and select Tools > Internet Options.
2. Click the Security tab, and then select a Web content zone to specify its security settings.