Configuring The Secure Http Client - Cisco Catalyst 2960 Software Configuration Manual
Hide thumbs
Also See for Catalyst 2960:
- Configuration manual (2288 pages) ,
- Command reference manual (800 pages) ,
- Hardware installation manual (108 pages)
Table of Contents
Advertisement
Chapter 9
Configuring Switch-Based Authentication
Command
Step 7
ip http secure-trustpoint name
Step 8
ip http path path-name
Step 9
ip http access-class access-list-number (Optional) Specify an access list to use to allow access to the HTTP server.
Step 10
ip http max-connections value
Step 11
ip http timeout-policy idle seconds life
seconds requests value
Step 12
end
Step 13
show ip http server secure status
Step 14
copy running-config startup-config
Use the no ip http server global configuration command to disable the standard HTTP server. Use the
no ip http secure-server global configuration command to disable the secure HTTP server. Use the no
ip http secure-port and the no ip http secure-ciphersuite global configuration commands to return to
the default settings. Use the no ip http secure-client-auth global configuration command to remove the
requirement for client authentication.
To verify the secure HTTP connection by using a Web browser, enter https://URL, where the URL is the
IP address or hostname of the server switch. If you configure a port other than the default port, you must
also specify the port number after the URL. For example:
https://209.165.129:1026
or
https://host.domain.com:1026
Configuring the Secure HTTP Client
The standard HTTP client and secure HTTP client are always enabled. A certificate authority is required
for secure HTTP client certification. This procedure assumes that you have previously configured a CA
trustpoint on the switch. If a CA trustpoint is not configured and the remote HTTPS server requires client
authentication, connections to the secure HTTP client fail.
OL-26520-01
Purpose
Specify the CA trustpoint to use to get an X.509v3 security certificate and
to authenticate the client certificate connection.
Note
Use of this command assumes you have already configured a CA
trustpoint according to the previous procedure.
(Optional) Set a base HTTP path for HTML files. The path specifies the
location of the HTTP server files on the local system (usually located in
system flash memory).
(Optional) Set the maximum number of concurrent connections that are
allowed to the HTTP server. The range is 1 to 16; the default value is 5.
(Optional) Specify how long a connection to the HTTP server can remain
open under the defined circumstances:
•
idle—the maximum time period when no data is received or response
data cannot be sent. The range is 1 to 600 seconds. The default is
180 seconds (3 minutes).
life—the maximum time period from the time that the connection is
•
established. The range is 1 to 86400 seconds (24 hours). The default
is 180 seconds.
requests—the maximum number of requests processed on a
•
persistent connection. The maximum value is 86400. The default is 1.
Return to privileged EXEC mode.
Display the status of the HTTP secure server to verify the configuration.
(Optional) Save your entries in the configuration file.
Catalyst 2960 and 2960-S Switches Software Configuration Guide, Release 15.0(1)SE
Configuring the Switch for Secure Socket Layer HTTP
9-51
Hide quick links:
Advertisement
Chapters
Table of Contents
Troubleshooting
