55
Syntax
web https-authorization mode
{
auto
|
manual
}
undo web https-authorization mode
Default
A user must enter correct username and password to log in through HTTPS.
Views
System view
Default command level
2: System level
Parameters
auto
: Uses the PKI certificates of HTTPS users to automatically authenticate them.
manual
: Provides a login page for HTTPS users to enter the correct username and password.
Usage guidelines
When the
auto
mode is enabled:
•
If the PKI certificate of the user is correct and not expired, the CN field in the certificate is used as
the username to perform AAA authentication. If the authentication succeeds, the user automatically
enters the Web interface of the device.
•
If the PKI certificate of the user is correct and not expired, but the AAA authentication fails, the
device shows the Web login page. The user can log in to the device after entering correct username
and password.
•
When the PKI certificate of the user is incorrect or expired, the HTTPS connection is terminated.
Examples
# Specify the
auto
authentication mode for users trying to log in to the device through HTTPS.
<Sysname> system-view
[Sysname] web https-authorization mode auto
web idle-timeout
Use
web idle-timeout
to set the Web user connection timeout time.
Use
undo web idle-timeout
to restore the default.
Syntax
web idle-timeout
minutes
undo web idle-timeout
Default
The Web user connection timeout time is 10 minutes.
Views
System view
Default command level
2: System level
