Configuration Examples; Example For Configuring The Router As An Https Server - Huawei AR1200-S Configuration Manual

Huawei AR1200-S Series Enterprise Routers
Configuration Guide - Security

2.4 Configuration Examples

This section provides an HTTPS configuration example.

2.4.1 Example for Configuring the Router as an HTTPS Server

This section describes how to configure an HTTPS server to allow the administrator of an
enterprise to remotely log in to a gateway.
Networking Environment
As shown in
department. The administrator needs to securely log in to the gateway of the R&D department
to manage the gateway.
To meet the preceding requirement, configure the HTTPS server function on the Router (the
gateway) so that:
l
l
To implement certificate authentication, you also need to configure a Certificate Authority (CA) server. The CA
server configuration is not mentioned here.
Figure 2-2 Networking diagram of HTTPS server configuration
R&D department
Configuration Roadmap
The configuration roadmap is as follows:
1.
2.
3.
Data Preparation
To complete the configuration, you need the following data:
Issue 02 (2012-03-30)
Figure 2-2, the administrator of enterprise A works in a different city than the R&D
The administrator establishes an HTTPS connection with the Router (the gateway) from a
host named Admin and manages the Router on web pages.
The administrator uses the SSL protocol's security mechanisms to authenticate the
Router, improving remote access security.
NOTE
Router
3.1.1.1/24
CA
PC
Enterprise A
Configure a public key infrastructure (PKI) entity and a PKI domain.
Configure a server SSL policy.
Configure the Router as an HTTPS server.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
1.1.1.1/24
Internet
Eth1/0/0
2.1.1.1/24
2 HTTPS Configuration
Admin
38