HP VPN Firewall Appliances Network Management Configuration Guide

947
Figure 421 Configuring a local user
Configuring the firewall at the CLI
1. Configure the HTTPS service:
# Create SSL server policy myssl.
<Firewall> System-view
[Firewall] ssl server-policy myssl
# Specify the PKI domain for the SSL server policy as default.
[Firewall-ssl-server-policy-myssl] pki-domain default
# Configure the HTTPS service to use SSL server policy myssl.
[Firewall] ip https ssl-server-policy myssl
# Enable the HTTPS server.
[Firewall] ip https enable
2. Configure a local user:
# Configure the user name as admin1, password as admin1, user privilege level as level 3, and
service type as Web and Telnet.
[Firewall] local-user admin1
[Firewall-luser-admin1] password simple admin1
[Firewall-luser-admin1] authorization-attribute level 3
[Firewall-luser-admin1] service-type web
[Firewall-luser-admin1] service-type telnet
Verifying the configuration
Launch IE on the host, enter h t t p s : / / 1 0 .1.1.1 in the address bar. The login page of the firewall appears.
After you enter the username admin1 and the password admin1, the Web interface of the firewall
appears.
Configuring an SSL client policy
An SSL client policy is a set of SSL parameters for a client to use when connecting to the server. An SSL
client policy takes effect only after it is associated with an application layer protocol.
To configure an SSL client policy: