Web Access - Enterprise Device Manager - Avaya ERS 2500 Technical Configuration Manual

8. WEB Access – Enterprise Device
Manager
By default, password authentication is disabled for WEB access to the switch allowing a user to
use HTTP to access an Ethernet Routing Switch, i.e. for Enterprise Device Manager Access,
without having to enter a user name or password. Password authentication for WEB access is
enabled automatically either when local CLI Telnet password security or CLI Telnet RADIUS
password security is enabled. IP Manager can also be enabled for WEB access if you wish to
restrict access to a few individuals or a particular subnet or subnets. Please note that WEB
access is disabled if TACACS+ is enabled.
If secure mode is enabled or simply if SSL is enabled, the Web server listens on TCP port 443
and responds only to HTTPS client browser requests. All existing non-secure connections, TCP
port 80, with the browser are closed down.
In the non-secure mode, the Web server listens on TCP port 80, by default, and responds only to
HTTP client browser requests. All existing secure connections with the browser are closed down.
You can designate the TCP port as a number between 1024 and 65535.
The WEB server demon can either be enabled or disabled by issuing the following command.

ERS-Stackable(config)# web-server ?
disable Disable HTTP access
enable Enable HTTP access
To enable WEB authentication, enter the following command:

ERS-Stackable(config)# cli password <stack|switch> telnet <local|radius|tacacs>
To enable IP Manager control for WEB access, enter the following command depending on if
IPv4 or IPv6 addressing is used:

ERS-Stackable(config)# ipmgr source-ip <1-50> <IPv4 address/mask>

ERS-Stackable(config)# ipmgr source-ip <51-100> <IPv6 address/prefix>

ERS-Stackable(config)# ipmgr web
In non-secure mode, SSL disabled, if you wish to designate the TCP port number other than TCP
port 80, enter the following command:

ERS-Stackable(config)# http-port ?
<1024-65535>
For Enterprise Device Manager to work, the web-server option must be enabled.

Also, TACACS+ cannot be enabled if you wish to enable HTTP access. Please see the
section Telnet password protection section above, ether using local authentication or
RADIUS authentication if you wish to provide WEB access user name and password
protection.
http port number
Avaya Inc. – External Distribution
avaya.com
44