Consolidated Platform Configuration Guide, Cisco Ios Release 15.2(4)E (Catalyst 2960-X Switches - Cisco Catalyst 2960 series Configuration Manual

Information About Secure Socket Layer HTTP
DETAILED STEPS
Command or Action
Step 1
show ip http server status
Example:
Switch# show ip http server status
Step 2
configure terminal
Example:
Switch# configure terminal
Step 3 ip http secure-server
Example:
Switch(config)# ip http secure-server
Step 4 ip http secure-port port-number
Example:
Switch(config)# ip http secure-port 443
Step 5
ip http secure-ciphersuite
{[3des-ede-cbc-sha] [rc4-128-md5]
[rc4-128-sha] [des-cbc-sha]}
Example:
Switch(config)# ip http
secure-ciphersuite rc4-128-md5
Step 6 ip http secure-client-auth
Example:
Switch(config)# ip http
secure-client-auth

Consolidated Platform Configuration Guide, Cisco IOS Release 15.2(4)E (Catalyst 2960-X Switches)

1132
Purpose
(Optional) Displays the status of the HTTP server to determine if the
secure HTTP server feature is supported in the software. You should see
one of these lines in the output:
HTTP secure server capability: Present
or
HTTP secure server capability: Not present
Enters global configuration mode.
Enables the HTTPS server if it has been disabled. The HTTPS server is
enabled by default.
(Optional) Specifies the port number to be used for the HTTPS server.
The default port number is 443. Valid options are 443 or any number in
the range 1025 to 65535.
(Optional) Specifies the CipherSuites (encryption algorithms) to be used
for encryption over the HTTPS connection. If you do not have a reason
to specify a particularly CipherSuite, you should allow the server and
client to negotiate a CipherSuite that they both support. This is the default.
(Optional) Configures the HTTP server to request an X.509v3 certificate
from the client for authentication during the connection process. The
default is for the client to request a certificate from the server, but the
server does not attempt to authenticate the client.