36
Default command level
3: Manage level
Parameters
policy-name
: Specifies the name of the certificate attribute access control policy, a string of 1 to 16
characters.
Usage guidelines
Association of the HTTPS service with a certificate attribute access control policy can control the access
rights of clients.
Examples
# Associate the HTTPS server to certificate attribute access control policy
myacl
.
<Sysname> system-view
[Sysname] ip https certificate access-control-policy myacl
Related commands
•
display ip https
•
pki certificate access-control-policy
(
Security Command Reference
)
ip https enable
Use ip https enable
to enable the HTTPS service.
Use
undo ip https enable
to disable the HTTPS service.
Syntax
ip https enable
undo ip https enable
Default
The HTTPS service is disabled.
Views
System view
Default command level
3: Manage level
Usage guidelines
The device can act as the HTTP server that can be accessed only after the HTTP service is enabled.
Enabling the HTTPS service triggers an SSL handshake negotiation process:
•
If the local certificate of the device exists, the SSL negotiation succeeds, and the HTTPS service can
be started.
•
If no local certificate exists, the SSL negotiation triggers a certificate application process that often
fails because it times out. If that happens, execute the
ip https enable
command multiple times to
start the HTTPS service.
Examples
# Enable the HTTPS service.
<Sysname> system-view
