Edge-Core Direk Tronik 24/48-Port, Руководство по управлению

Страница: 123 / 588

Configuring HTTPS
12-5
12
CLI – Specify all the required parameters to enable logon authentication.
Configuring HTTPS
You can configure the switch to enable the Secure Hypertext Transfer Protocol
(HTTPS) over the Secure Socket Layer (SSL), providing secure access (i.e., an
encrypted connection) to the switch’s web interface.
Command Usage
• Both the HTTP and HTTPS service can be enabled independently on the switch.
However, you cannot configure both services to use the same UDP port.
• If you enable HTTPS, you must indicate this in the URL that you specify in your
browser: https:// device [: port_number ]
• When you start HTTPS, the connection is established in this way:
- The client authenticates the server using the server’s digital certificate.
- The client and server negotiate a set of security protocols to use for the
connection.
Console(config)#authentication login radius 41-3
Console(config)#radius-server port 181 41-6
Console(config)#radius-server key green 41-7
Console(config)#radius-server retransmit 5 41-7
Console(config)#radius-server timeout 10 41-8
Console(config)#radius-server 1 host 192.168.1.25 41-6
Console(config)#exit
Console#show radius-server
41-8
Remote RADIUS server configuration:
Global settings:
Communication key with RADIUS server: *****
Server port number: 181
Retransmit times: 5
Request timeout: 10
Server 1:
Server IP address: 192.168.1.25
Communication key with RADIUS server: *****
Server port number: 181
Retransmit times: 5
Request timeout: 10
Console#config
Console(config)#authentication login tacacs
41-3
Console(config)#tacacs-server host 10.20.30.40 41-9
Console(config)#tacacs-server port 200 41-9
Console(config)#tacacs-server key green 41-10
Console(config)#exit
Console#show tacacs-server
41-10
Server IP address: 10.20.30.40
Communication key with tacacs server: *****
Server port number: 200
Console(config)#