R3166-R3206-HP High-End Firewalls Getting Started Command Reference-6PW101

18
Verify that the port number is not used by another service, because this command does not check for
conflicts with configured port numbers.
Related commands: display ip http.
Examples
# Configure the port number of the HTTP service as 8080.
<Sysname> system-view
[Sysname] ip http port 8080
ip https acl
Syntax
ip https acl acl-number
undo ip https acl acl-number
View
System view
Default level
3: Manage level
Parameters
acl-number: ACL number, which ranges from 2000 to 2999.
Description
Use the ip https acl command to associate the HTTPS service with an ACL.
Use the undo ip https acl command to remove the association.
By default, the HTTPS service is not associated with any ACL.
The HTTPS service can be associated with a basic ACL, and the ACLs will overwrite each other. In other
words, if you execute the ip https acl command multiple times to associate the HTTPS service with the
same type of ACLs, the HTTPS service is only associated with the last specified ACL.
Related commands: display ip https.
Examples
# Associate the HTTPS service with ACL 2001 to only allow the clients within the 10.10.0.0/16 network
segment to access the HTTPS server through HTTP.
<Sysname> system-view
[Sysname] acl number 2001
[Sysname-acl-basic-2001] rule permit source 10.10.0.0 0.0.255.255
[Sysname-acl-basic-2001] quit
[Sysname] ip https acl 2001
ip https certificate access-control-policy
Syntax
ip https certificate access-control-policy policy-name
undo ip https certificate access-control-policy