SGS-6340 Series User Manual

48.3 SSL Typical Example
When the Web function is enabled on the switch, SSL can be configured for users to access
the web interface on the switch. If the SSL has been configured, communication between the
client and the switch will be encrypted through SSL for safety.
Firstly, SSL should be enabled on the switch. When the client tries to access the switch
through https method, a SSL session will be set up between the switch and the client. When
the SSL session has been set up, all the data transmission in the application layer will be
encrypted.
Web Server
Malicious Users
Date Acquisition
Fails
SSLSes
sion
Connected
Web Browser https
PC Users
Config
uratio
n on the switch:
Switch(config)# ip http secure-server
Switch(config)# ip http secure-port 1025
Switch(config)# ip http secure-ciphersuite rc4-128-sha
48.4 SSL Troubleshooting
In configuring and using SSL, the SSL function may fail due to reasons such as physical
connection failure or wrong configurations. The user should ensure the following:
 First good condition of the physical connection;
 Second all interface and link protocols are in the UP state (use “show interface”
command);
 Then, make sure SSL function is enabled (use ip http secure-server command );
 Don’t use the default port number if configured port number, pay attention to the port
number when input the web wide;
48-119