F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices Network Management Configuration Guide-6PW100

949
Figure 420 Configuring a local user
1877BConfiguring the firewall at the CLI
1. Configure the HTTPS service:
# Create SSL server policy myssl.
<Firewall> System-view
[Firewall] ssl server-policy myssl
# Specify the PKI domain for the SSL server policy as default.
[Firewall-ssl-server-policy-myssl] pki-domain default
# Configure the HTTPS service to use SSL server policy myssl.
[Firewall] ip https ssl-server-policy myssl
# Enable the HTTPS server.
[Firewall] ip https enable
2. Configure a local user:
# Create a local user, configuring the user name as admin1, password as admin1, user privilege
level as level 3, and service type as Web and Telnet.
[Firewall] local-user admin1
[Firewall -luser-admin1] password simple admin1
[Firewall -luser-admin1] authorization-attribute level 3
[Firewall -luser-admin1] service-type web
[Firewall -luser-admin1] service-type telnet
1878BVerifying the configuration
Launch IE on the host and enter https://10.1.1.1 in the address bar. The Web interface login page of the
firewall should appear. On the login page, enter and username and password admin1. You are able to
log in to the Web interface to access and manage the firewall.
357B
Configuring an SSL client policy
An SSL client policy is a set of SSL parameters for a client to use when connecting to the server. An SSL
client policy takes effect only after it is associated with an application layer protocol.
To configure an SSL client policy: