Nortel SMC 2450, Руководство по внедрению

Страница: 88 / 262

Page 88 of 260 Installation and configuration
553-3001-225 Standard 1.00 May 2006
Enabling secure HTTP
Procedure 8
Enabling the Web UI
You can enable the Web UI for HTTP and/or HTTPS access. By default, the r
the Web UI is enabled for HTTP access and disabled for HTTPS access.
Note: HTTP is not a secure protocol. All data (including passwords)
between an HTTP client and the SMC is not encrypted and is subject only
to weak authentication. If secure remote access is required, use HTTPS.
1 Access the CLI. See “Accessing the CLI” on page 184 .
2 Choose one of the following:
• To enable HTTP access, enter
>> # /cfg/sys/adm/web/http/ena
.
• To enable HTTPS access using SSL, enter
>> # /cfg/sys/adm/web/ssl/ena
.
3 Generate a temporary certificate (if using HTTPS).
An SSL server certificate is required for HTTPS access to the Web UI.
The SMC can generate a temporary, self-signed certificate.
a. Enter
>> SSL configuration# certs/serv/gen <Name>
<Country code> <Key size>
.
where Name is the common name that appears on the certificate,
Country code is a two-letter code (US for the United States of
America, CA for Canada, JP for Japan, and so on), and Key size is
512, 1024, or 2048 bits.
For a list of country codes, refer to the International Standards
Organization (ISO) website for the ISO 3166 standard for two-letter
country codes.
For example:
>> SSL configuration# certs/serv/gen Nortel US 1024
b. Enter
Y
to verify that you want to generate a self-signed certificate
with the generated key.