CLI Reference Guide-R04

Chapter 8 | User Authentication Commands
Web Server
– 261 –
Command Mode
Global Configuration
Command Usage
◆ Both HTTP and HTTPS service can be enabled independently on the switch.
However, you cannot configure the HTTP and HTTPS servers to use the same
UDP port.
◆ If you enable HTTPS, you must indicate this in the URL that you specify in your
browser: https://device[:port_number]
◆ When you start HTTPS, the connection is established in this way:
■
The client authenticates the server using the server’s digital certificate.
■
The client and server negotiate a set of security protocols to use for the
connection.
■
The client and server generate session keys for encrypting and decrypting
data.
◆ The client and server establish a secure encrypted connection.
A padlock icon should appear in the status bar for Internet Explorer 11, Mozilla
Firefox 52, or Google Chrome 57, or more recent versions.
The following web browsers and operating systems currently support HTTPS:
◆ To specify a secure-site certificate, see “Replacing the Default Secure-site
Certificate” in the Web Management Guide. Also refer to the copy tftp https-
certificate command.
◆ Connection to the web interface is not supported for HTTPS using an IPv6 link
local address.
Example
Console(config)#ip http secure-server
Console(config)#
Related Commands
ip http secure-port (260)
copy tftp https-certificate (128)
show system (119)
Table 44: HTTPS System Support
Web Browser Operating System
Internet Explorer 11 or later Windows 7, 8, 10
Mozilla Firefox 52 or later Windows 7, 8, 10, Linux
Google Chrome 57 or later Windows 7, 8, 10