HP 830 Series Configuration Manual page 50

Step
2. Associate the HTTPS
service with an SSL server
policy.
3. Enable the HTTPS service.
4. Associate the HTTPS
service with a certificate
attribute-based access
control policy.
5. Specify the HTTPS service
port number.
Command
ip https ssl-server-policy
policy-name
ip https enable
ip https certificate
access-control-policy
policy-name
ip https port port-number
44
Remarks
By default, the HTTPS service is not
associated with any SSL server policy.
If you disable the HTTPS service, the
system automatically de-associates the
HTTPS service from the SSL service
policy. Before re-enabling the HTTPS
service, associate the HTTPS service with
an SSL server policy first.
If the HTTPS service has been enabled,
any changes to the SSL server policy
associated with it do not take effect.
By default, HTTPS is disabled.
Enabling the HTTPS service triggers an
SSL handshake negotiation process. If
the local certificate of the switching
engine exists, the SSL negotiation
succeeds and the HTTPS service can be
started. If no local certificate exists, the
SSL negotiation triggers a certificate
application process. The certificate
application process takes a long time
and might cause the SSL negotiation to
be timed out. If the SSL negotiation fails,
try to start the HTTPS service by
executing the ip https enable command
again.
Optional.
By default, the HTTPS service is not
associated with any certificate-based
attribute access control policy.
Associating the HTTPS service with a
certificate-based attribute access control
policy enables the device to control the
access rights of clients.
You must configure the client-verify
enable command in the associated SSL
server policy. Otherwise, no clients can
log in to the device.
The associated SSL server policy must
contain at least one permit rule.
Otherwise, no clients can log in to the
device.
For more information about certificate
attribute-based access control policies,
see Security Configuration Guide.
Optional.
The default HTTPS service port is 443.