Security Measures
150
Instruction Manual - NXA-ENET8-POE+
Configuring HTTPS
You can configure the switch to enable the Secure Hypertext Transfer Protocol (HTTPS) over the Secure Socket Layer (SSL),
providing secure access (i.e., an encrypted connection) to the switch's web interface.
Configuring Global Settings for HTTPS
Use the Security > HTTPS (Configure Global) page to enable or disable HTTPS and specify the TCP port used for this service.
Command Usage
Both the HTTP and HTTPS service can be enabled independently on the switch. However, you cannot configure both
services to use the same TCP port. (HTTP can only be configured through the CLI using the "ip http server" command
described in the CLI Reference Guide.)
If you enable HTTPS, you must indicate this in the URL that you specify in your browser: https://device[:port_number]
When you start HTTPS, the connection is established in this way:
The client authenticates the server using the server's digital certificate.
The client and server negotiate a set of security protocols to use for the connection.
The client and server generate session keys for encrypting and decrypting data.
The client and server establish a secure encrypted connection.
A padlock icon should appear in the status bar for Internet Explorer 9, Mozilla Firefox 39, or Google Chrome 44, or more
recent versions.
The following web browsers and operating systems currently support HTTPS:
To specify a secure-site certificate, see "Replacing the Default Secure-site Certificate" on page 252.
NOTE:
Connection to the web interface is not supported for HTTPS using an IPv6 link local address.
The following table lists the options on this page:
Perform these steps to configure HTTPS:
1.
Click
Security
>
HTTPS
.
2.
Select
Configure Global
from the Step list.
3.
Enable HTTPS and specify the port number if required.
4.
Click
Apply
.
HTTPS System Support
Web Browser
Operating System
Internet Explorer 9.x or later
Windows 7, 8, 10
Mozilla Firefox 39 or later
Windows 7, 8, 10, Linux
Google Chrome 44 or later
Windows 7, 8, 10
Security - HTTPS Options
HTTPS Status
Allows you to enable/disable the HTTPS server feature on the switch. (Default: Enabled)
HTTPS Port
Specifies the TCP port number used for HTTPS connection to the switch's web interface. (Default:
Port 443)
FIG. 178
Configuring HTTPS