H3C s3100 series Command Manual page 1143

web-authentication protocol
Syntax
web-authentication protocol { http | https server-policy policy-name }
undo web-authentication protocol
View
System view
Parameters
http: Specifies that clients use HTTP to access the authentication pages. Authentication information is
not encrypted in this mode.
https: Specifies that clients use HTTPS to access the authentication pages. Authentication information
is encrypted in this mode.
policy-name: Specifies the SSL server policy by its name, a string of 1 to 16 characters.
Description
Use the web-authentication protocol command to specify the access protocol for Web authentication.
If you specify the access protocol as HTTPS, authentication information exchanged between the switch
and its clients will be in ciphertext.
Use the undo web-authentication protocol command to restore the default.
By default, HTTP is used between the switch and its clients.
Note that:
You must configure this command before enabling Web authentication. That is, after enabling Web
authentication, you cannot change the access protocol for Web authentication.
Before configuring HTTPS access for Web authentication, be sure to configure the SSL server
policy and request a certificate for the PKI domain of the SSL server policy.
After modifying the used SSL server policy, you need to disable Web authentication and then
enable it again in system view to make the changes take effect.
Only SSL 3.0 and TLS 1.0 are supported. SSL 2.0 is not supported.
With HTTPS access for Web authentication configured on the switch, clients need to use HTTP 1.1
to log in. Otherwise, the speed of opening the authentication page will be very low.
Examples
# Configure HTTPS access for Web authentication, specifying to use SSL server policy pt_ssl.
<Sysname> system-view
[Sysname] web-authentication protocol https server-policy pt_ssl
web-authentication select method
Syntax
web-authentication select method { shared | designated }
undo web-authentication select
1-9