Cisco IE 4000, Software Configuration Manual

Page: 187 / 1066

183
Configuring Switch-Based Authentication
Monitoring and Maintaining Switch-Based Authentication
Configuring the Secure HTTP Client
Before You Begin
The standard HTTP client and secure HTTP client are always enabled. A certificate authority is required for secure HTTP
client certification. This procedure assumes that you have previously configured a CA trustpoint on the switch. If a CA
trustpoint is not configured and the remote HTTPS server requires client authentication, connections to the secure HTTP
client fail.
Monitoring and Maintaining Switch-Based Authentication
Command Purpose
1. configure terminal Enters global configuration mode.
2. ip http client secure-trustpoint name (Optional) Specifies the CA trustpoint to be used if the remote HTTP
server requests client authentication. Using this command assumes that
you have already configured a CA trustpoint by using the previous
procedure. The command is optional if client authentication is not needed
or if a primary trustpoint has been configured.
3. ip http client secure-ciphersuite
{[ 3des-ede-cbc-sha ] [ rc4-128-md5 ]
[ rc4-128-sha ] [ des-cbc-sha ]}
(Optional) Specifies the CipherSuites (encryption algorithms) to be used
for encryption over the HTTPS connection. If you do not have a reason to
specify a particular CipherSuite, you should allow the server and client to
negotiate a CipherSuite that they both support. This is the default.
4. end Returns to privileged EXEC mode.
5. show ip http client secure status Displays the status of the HTTP secure server to verify the configuration.
6. copy running-config startup-config (Optional) Saves your entries in the configuration file.
Command Purpose
show running-config Verifies your configured entries.
copy running-config startup-config Saves your entries in the configuration file.
show tacacs Displays the server statistics.
debug radius Displays the information associated with RADIUS.
debug aaa coa Displays the debug information for CoA processing.
debug cmdhd Displays the debug information for the command handler.
show aaa attributes protocol radius Displays the RADIUS attributes.
show ip ssh Displays the version and configuration information for the
SSH server.
show ssh Displays the status of the SSH server.
show ip http client secure status Displays the HTTP secure client configuration.
show ip http server secure status Displays the HTTP secure server configuration.