R3166-R3206-HP High-End Firewalls Getting Started Guide-6PW101

62
• HTTP login—The Hypertext Transfer Protocol (HTTP) is used for transferring web page information
across the Internet. It is an application-layer protocol in the TCP/IP protocol suite. The
connection-oriented Transport Control Protocol (TCP) is adopted at the transport layer. Currently, the
device supports HTTP 1.0.
• HTTPS login—The Secure HTTP (HTTPS) refers to the HTTP protocol that supports the Security Socket
Layer (SSL) protocol. HTTPS uses SSL to encrypt the data exchanged between the HTTPS client and
the server to ensure data security and integrity. You can define a certificate attribute-based access
control policy to allow legal clients to access the device securely and prohibit illegal clients.
The following table shows the configuration requirements of web login.
Ob
j
ect Re
q
uirements
Device
Configure the IP address of the management Ethernet interface, and make sure the
device and the PC can reach each other
Configuring HTTP login
Required to use one approach
Configuring HTTPS login
PC
Install a web browser
Obtain the IP address of the management Ethernet interface of the device
Configuring HTTP login
Follow these steps to configure HTTP login:
To do… Use the command…
Remarks
Enter system view
system-view
—
Enable the HTTP service ip http enable
Required
Enabled by default.
Configure the HTTP service port
number
ip http port port-number
Optional
80 by default.
If you execute the command multiple times,
the last one takes effect.
Associate the HTTP service with
an ACL
ip http acl acl-number
Optional
By default, the HTTP service is not
associated with any ACL.
Associating the HTTP service with an ACL
enables the device to allow only clients
permitted by the ACL to access the device.
Create a local user and enter
local user view
local-user user-name
Required
By default, no local user is configured.
Configure a password for the
local user
password { cipher | simple }
password
Required
By default, no password is configured for
the local user.
Specify the command level of
the local user
authorization-attribute level
level
Required
No command level is configured for the
local user.