Configuring Https Access To The Bbi - Lenovo CN4093 Application Manual

Configuring HTTPS Access to the BBI

1. Enable HTTPS.
2. Set the HTTPS server port number (optional).
3. Generate the HTTPS certificate.
4. Save the HTTPS certificate.
© Copyright Lenovo 2015
The BBI can also be accessed via a secure HTTPS connection.
By default, BBI access via HTTPS is enabled on the switch. To disable or re-enable
BBI access via HTTPS, use the following commands:
CN 4093(config)# no access https enable
-or-
CN 4093(config)# access https enable
The default HTTPS web server port to access the BBI is port 443. However, you can
change the default Web server port with the following command:
CN 4093(config)# access https port <x>
Accessing the BBI via HTTPS requires that you generate a certificate to be used
during the key exchange. A default certificate is created the first time HTTPS is
enabled, but you can create a new certificate defining the information you want to
be used in the various fields.
CN 4093(config)# access https generate-certificate
Country Name (2 letter code) []:
State or Province Name (full name) []:
Locality Name (eg, city) []:
Organization Name (eg, company) []:
Organizational Unit Name (eg, section) []:
Common Name (eg, YOUR name) []:
Email (eg, email address) []:
Confirm generating certificate? [y/n]: y
Generating certificate. Please wait (approx 30 seconds)
restarting SSL agent
The certificate is valid only until the switch is rebooted. To save the certificate so
that it is retained beyond reboot or power cycles, use the following command:
CN 4093(config)# access https save-certificate
When a client (such as a web browser) connects to the switch, the client is asked to
accept the certificate and verify that the fields match what is expected. Once BBI
access is granted to the client, the BBI can be used as described in the Lenovo N/OS
BBI Quick Guide.
(Disable HTTPS access)
(Enable HTTPS access)
<country code>
<state>
<city>
<company>
<org. unit>
<name>
<email address>
Chapter 1: Switch Administration
35