KSwitch D10 MMT Managed Time Sensitive Ethernet Switch - Preliminary User Guide, Rev. 0.99
// 80
9.6.3.
Web Server - Configuration Commands
Controls whether switch embedded Web Server should operate in HTTP or HTTPS mode. HTTPS use TLS v1.2
encryption to encrypt all Web Network traffic between the user web browser and the switch Web Server.
9.6.3.1.
IP HTTP Secure-Server
Description- Configure Web Server to use only HTTPS (secure and encrypted operation mode) or HTTP (unsecure
operation mode) as well.
ip http secure-server
no ip http secure-server
Parameter
Description
Parameter
N.A
N.A
Default
N.A
Mode
Global Configuration Mode
Usage
Configure Web Server to use HTTPS. Use the no version of the command to use HTTP
Examples
Example
(config)# ip http secure-server
(config)# no ip http secure-server
9.6.3.2.
IP HTTP Secure-Certificate
Description- Manage Web Server certificate. Use this command to delete the current certificate, generate a new
self-signed RSA certificate or upload a PEM certificate using URL over http, tftp or ftp.
ip http secure-certificate
{ upload <url_file> [ pass-phrase <pass_phrase> ] | delete | generate }
Parameter
Description
Parameter
<url_file>
Uniform Resource Locator. It is a specific character string that
constitutes a reference to a resource. Syntax:
<protocol>://[<username>[:<password>]@]<host>[:<port>][/
<path>]/<file_name> If the following special characters: space
!\"#$%&'()*+,/:;<=>?@[\\]^`{|}~ need to be contained in the input
URL string, they should be percent-encoded. A valid file name is a
text string drawn from alphabet (A-Za-z), digits (0-9), dot (.),
hyphen (-), under score (_). The maximum length is 63 and hyphen
must not be first character. The file name content that only
contains '.' is not allowed.
<pass_phrase>
Privacy key pass phrase string if uploading certificate protected by
a specific passphrase.
Default
N.A
Mode
Global Configuration Mode
Usage
Manage the HTTPS certificate (PEM format)
Examples
Example#1 (upload the HTTPS certificate from TFTP server)
(config)# ip http secure-certificate upload tftp://10.9.52.103/test_ca.pem
Example#2 (delete current certificate)
(config)# ip http secure-certificate delete