CLI Reference Guide-R01

Chapter 8 | Authentication Commands
Web Server
– 248 –
Command Mode
Global Configuration
Command Usage
◆ Both HTTP and HTTPS service can be enabled independently on the switch.
However, you cannot configure the HTTP and HTTPS servers to use the same
UDP port.
◆ If you enable HTTPS, you must indicate this in the URL that you specify in your
browser: https://device[:port_number]
◆ When you start HTTPS, the connection is established in this way:
■
The client authenticates the server using the server’s digital certificate.
■
The client and server negotiate a set of security protocols to use for the
connection.
■
The client and server generate session keys for encrypting and decrypting
data.
◆ The client and server establish a secure encrypted connection.
A padlock icon should appear in the status bar for Internet Explorer 9, Mozilla
Firefox 52, Google Chrome 54, or Opera 41, or more recent versions.
The following web browsers and operating systems currently support HTTPS:
◆ To specify a secure-site certificate, see “Replacing the Default Secure-site
Certificate” in the Web Management Guide. Also refer to the copy tftp https-
certificate command.
◆ Connection to the web interface is not supported for HTTPS using an IPv6 link
local address.
Example
Console(config)#ip http secure-server
Console(config)#
Related Commands
ip http secure-port (247)
copy tftp https-certificate (118)
Table 45: HTTPS System Support
Web Browser Operating System
Internet Explorer 9 or later Windows 7, 8, 10
Mozilla Firefox 52 or later Windows 7, 8, 10, Linux
Google Chrome 54 or later Windows 7, 8, 10
Opera 41 or later Windows 7, 8, 10, Linux