HP VPN Firewall Appliances Getting Started Guide

54
HTTPS uses SSL to encrypt data between the client and the server for data integrity and security, and is
more secure than HTTP. You can define a certificate attribute-based access control policy to allow only
legal clients to access the device.
HTTP login and HTTPS login are separate login methods. To use HTTPS login, you do not need to
configure HTTP login.
Table 10 sh
ows the basic Web login configuration requirements.
Table 10 Basic Web login configuration requirements
Ob
j
ect Re
q
uirements
Device
Assign an IP address to an interface.
Configure routes to make sure the interface and the PC can reach each other.
Perform either or both of the following tasks:
• Configuring HTTP login
• Configuring HTTPS login
PC
Install a Web browser.
Obtain the IP address of the device's interface.
Configuring HTTP login
Ste
p
Command Remarks
1. Specify a fixed verification
code for Web login.
web captcha
verification-code
Optional.
By default, a Web user must enter the
verification code indicated on the login
page to log in.
This command is available in user view.
2. Enter system view.
system-view N/A
3. Enable the HTTP service.
ip http enable
By default, HTTP service is enabled.
4. Configure the HTTP service
port number.
ip http port port-number
Optional.
The default HTTP service port is 80.
If you execute the command multiple
times, the most recent configuration takes
effect.
5. Associate the HTTP service
with an ACL.
ip http acl acl-number
Optional.
By default, the HTTP service is not
associated with any ACL.
Associating the HTTP service with an ACL
enables the device to allow only clients
permitted by the ACL to access the
device.
6. Set the Web connection
timeout time.
web idle-timeout minutes Optional.
7. Set the size of the buffer for
Web login logging.
web logbuffer size pieces Optional.