Edge-Core ECS4110-28T, Management Manual, Page: 341 / 1514

C
HAPTER
13
| Security Measures
Configuring HTTPS
– 341 –
C
ONFIGURING
HTTPS
You can configure the switch to enable the Secure Hypertext Transfer
Protocol (HTTPS) over the Secure Socket Layer (SSL), providing secure
access (i.e., an encrypted connection) to the switch’s web interface.
C
ONFIGURING
G
LOBAL
S
ETTINGS FOR
HTTPS
Use the Security > HTTPS (Configure Global) page to enable or disable
HTTPS and specify the TCP port used for this service.
CLI R
EFERENCES
◆
"Web Server" on page 847
C
OMMAND
U
SAGE
◆
Both the HTTP and HTTPS service can be enabled independently on the
switch. However, you cannot configure both services to use the same
TCP port. (HTTP can only be configured through the CLI using the ip
http server command described on page 848 .)
◆
If you enable HTTPS, you must indicate this in the URL that you specify
in your browser: https:// device [: port_number ]
◆
When you start HTTPS, the connection is established in this way:
■
The client authenticates the server using the server’s digital
certificate.
■
The client and server negotiate a set of security protocols to use for
the connection.
■
The client and server generate session keys for encrypting and
decrypting data.
◆
The client and server establish a secure encrypted connection.
A padlock icon should appear in the status bar for Internet Explorer 6,
Mozilla Firefox 4, or Google Chrome 29, or more recent versions.
◆
The following web browsers and operating systems currently support
HTTPS:
◆
To specify a secure-site certificate, see "Replacing the Default Secure-
site Certificate" on page 342 .
Table 20: HTTPS System Support
Web Browser Operating System
Internet Explorer 6.x or later Windows 98,Windows NT (with service pack 6a),
Windows 2000, XP, Vista, 7, 8
Mozilla Firefox 4 or later Windows 2000, XP, Vista, 7, 8, Linux
Google Chrome 29 or later Windows XP, Vista, 7, 8