Choose the menu
System
→
Access Security
→
HTTP Config
to load the following page.
Figure 4-19 HTTP Config
The following entries are displayed on this screen
:
Global Config
HTTP:
Enable or disable the HTTP function on the switch.
Session Config
Hard Timeout:
Configure hard timeout of HTTP sessions.
Soft Timeout:
Configure soft timeout of HTTP sessions.
Maximum Sessions:
Configure maximum allowable number of HTTP sessions.
4.4.3
HTTPS Config
SSL (Secure Sockets Layer), a security protocol, is to provide a secure connection for the
application layer protocol (e.g. HTTP) communication based on TCP. SSL is widely used to
secure the data transmission between the Web browser and servers. It is mainly applied
through ecommerce and online banking.
SSL mainly provides the following services:
1.
Authenticate the users and the servers based on the certificates to ensure the data are
transmitted to the correct users and servers;
2.
Encrypt the data transmission to prevent the data being intercepted;
3.
Maintain the integrality of the data to prevent the data being altered in the transmission.
Adopting asymmetrical encryption technology, SSL uses key pair to encrypt/decrypt
information. A key pair refers to a public key (contained in the certificate) and its corresponding
private key. By default the switch has a certificate (self-signed certificate) and a corresponding
private key. The Certificate/Key Download function enables the user to replace the default key
pair.
After SSL is effective, you can log on to the Web management page via https://192.168.0.1. For
the first time you use HTTPS connection to log into the switch with the default certificate, you
will be prompted that “The security certificate presented by this website was not issued by a
32