Parameters
policy-name
string of 1 to 31 characters.
Usage guidelines
For more information about the certificate-based access control policy, see PKI configuration in
Security Configuration Guide.
Examples
# Use certificate-based access control policy myacl to control HTTPS access.
<Sysname> system-view
[Sysname] ip https certificate access-control-policy myacl
Related commands
pki certificate access-control-policy
ip https enable
Use
ip https enable
Use
undo ip https enable
Syntax
ip https enable
undo ip https enable
Default
The HTTPS service is disabled.
Views
System view
Predefined user roles
network-admin
Usage guidelines
To allow users to access the device through HTTPS, you must enable the HTTPS service.
Enabling the HTTPS service triggers the SSL handshake negotiation process.
•
If the device has a local certificate, the SSL handshake negotiation succeeds and the HTTPS
service starts up.
•
If the device does not have a local certificate, the certificate application process starts. Because
the certificate application process takes a long time, the SSL handshake negotiation might fail
and the HTTPS service might not be started. To solve the problem, execute this command
again until the HTTPS service is enabled.
Examples
# Enable the HTTPS service.
<Sysname> system-view
[Sysname] ip https enable
Related commands
ip https certificate access-control-policy
ip https ssl-server-policy
: Specifies a certificate-based access control policy by its name, a case-sensitive
to enable the HTTPS service.
to disable the HTTPS service.
(Security Command Reference)
27