Hirschmann RS20 User Manual page 92

Assistance in the Protection from
Unauthorized Access
Certificate

An X.509/PEM Standard certificate (Public Key Infrastructure) is required
for the encryption. In the as-delivered state, a self-generated certificate is
already present on the device.
 You can create an X509/PEM certificate using the following CLI
command: # ip https certgen
 You can upload a new certificate using the following CLI command:
copy tftp://<server_ip>/<path_to_pem>
nvram:httpscert
 You can switch the HTTPS server off and on again using the following
CLI command sequence:
# no ip https server
# ip https server
Note: If you upload a new certificate, reboot the device or the HTTPS
server in order to activate the certificate.
HTTPS connection

Note: The standard port for HTTPS connection is 443. If you change the
number of the HTTPS port, reboot the device or the HTTPS server in
order to make the change effective.
 You can change the HTTPS port number using the following CLI-
command (where <port_no> is the number of the HTTPS port):
#ip https port <port_no>
Note: If you want to use HTTPS, switch on both HTTPS and HTTP. This
is required in order to load the applet. In the as-delivered state, HTTPS is
switched off.
 Open the Security:Telnet/Internet Access dialog.
 Tick the boxes Telnet Server active, Web Server(http)
and Web Server(https). In the HTTPS Port Number box, enter
the value 443.
 To access the device by HTTPS, enter HTTPS instead of HTTP in
your browser, followed by the IP address of the device.
92
6.2 Password for SNMP access
UM BasicConfig L2E
Release 8.0 05/2013