| Authentication Commands
C
24
HAPTER
Web Server
C
U
OMMAND
SAGE
◆
Both HTTP and HTTPS service can be enabled independently on the
switch. However, you cannot configure the HTTP and HTTPS servers to
use the same UDP port.
If you enable HTTPS, you must indicate this in the URL that you specify
◆
in your browser: https://device[:port_number]
When you start HTTPS, the connection is established in this way:
◆
The client authenticates the server using the server's digital
■
certificate.
The client and server negotiate a set of security protocols to use for
■
the connection.
The client and server generate session keys for encrypting and
■
decrypting data.
The client and server establish a secure encrypted connection.
◆
A padlock icon should appear in the status bar for Internet Explorer 6,
Mozilla Firefox 4, or Google Chrome 29, or more recent versions.
The following web browsers and operating systems currently support
HTTPS:
Table 81: HTTPS System Support
Web Browser
Internet Explorer 6.x or later
Mozilla Firefox 4 or later
Google Chrome 29 or later
To specify a secure-site certificate, see "Replacing the Default Secure-
◆
site Certificate" on page 346. Also refer to the
command.
Connection to the web interface is not supported for HTTPS using an
◆
IPv6 link local address.
E
XAMPLE
Console(config)#ip http secure-server
Console(config)#
R
C
ELATED
OMMANDS
ip http secure-port (823)
copy tftp https-certificate
show system (699)
– 824 –
Operating System
Windows 98,Windows NT (with service pack 6a),
Windows 2000, XP, Vista, 7, 8
Windows 2000, XP, Vista, 7, 8, Linux
Windows XP, Vista, 7, 8
(705)
copy tftp https-certificate