Release Notes

1987 | web-server Dell Networking W-Series ArubaOS 6.4.x| Reference Guide
Parameter Description Range Default
ssl-protocol
Specifies the Secure Sockets Layer
(SSL) or Transport Layer Security
(TLS) protocol version used for
securing communication with the
web server:
SSLv3
TLSv1
sslv3, tlsv1 sslv3, tlsv1
switch-cert
Specifies the name of the server
certificate associated with WebUI
access. Use the show crypto-local
pki ServerCert command to see the
server certificates installed in the
controller.
— default
web-https-port-443
Enables WebUI access on the HTTPS
port (443) .When you connect to the
WebUI using https (tcp port 443), the
controller continues using port 443
and no longer redirects to port 4343.
— —
web-lync-listen-port
{http <listen-port>}|
{https <listen-port>}
Configures the port number on
which Lync Network Diagnostic
(LND), a Microsoft® plug-in, sends
HTTP/HTTPS messages to Dell
controller.
NOTE: Disable the media
classification ACL before using this
feature. See ip access-list session.
1024-
65535
0 (feature
disabled)
web-max-clients <web-max-client>
Configures the web server’s
maximum number of supported
concurrent clients.
25-320 25
Usage Guidelines
There is a default server certificate installed in the controller, However this certificate does not guarantee
security in production networks. Best practices are to replace the default certificate with a custom certificate
issued for your site by a trusted Certificate Authority (CA). See the Dell Networking W-Series ArubaOS User
Guide for more information about how to generate a Certificate Signing Request (CSR) to submit to a CA and
how to import the signed certificate received from the CA into the controller. After importing the signed
certificate into the controller, use the web-server command to specify the certificate for captive portal or
WebUI access. If you need to specify a different certificate for captive portal or WebUI access, use the no
command to revert back to the default certificate before you specify the new certificate (see the Example
section).
You can use client certificates to authenticate management users. If you specify certificate authentication, you
need to configure certificate authentication for the management user with the mgmt-user webui-cacert
command.
Example
The following commands configure WebUI access with client certificates only, and specify the server certificate
for the controller:
(host) (config) #web-server mgmt-auth certificate
switch-cert ServerCert1
mgmt-user webui-cacert serial 1111111 web-admin root