45
Chapter 9 SSL Commands
SSL (Secure Sockets Layer), a security protocol, is to provide a secure connection for the
application layer protocol(e.g. HTTP) based on TCP. Adopting asymmetrical encryption technology,
SSL uses key pair to encrypt/decrypt information. A key pair refers to a public key (contained in the
certificate) and its corresponding private key. By default the switch has a certificate (self-signed
certificate) and a corresponding private key. The certificate/key download function enables the
user to replace the default key pair.
ip http secure-server
Description
The
ip http secure-server
command is used to enable the SSL function
globally on the switch. To disable the SSL function, please use
no ip http
secure-server
command. Only the SSL function is enabled, a secure HTTPS
connection can be established.
Syntax
ip http secure-server
no ip http secure-server
Command Mode
Global Configuration Mode
Example
Enable the SSL function:
TL-SL2428(config)# ip http secure-server
ip http secure-server download certificate
Description
The
ip http secure-server
download certificate
command is used to
download a certificate to the switch from TFTP server.
Syntax
ip http secure-server download certificate
ssl-cert
ip-address
ip-addr
