15-6
# Configure certificate access control policy myacp and create a control rule.
[Device] pki certificate access-control-policy myacp
[Device-pki-cert-acp-myacp] rule 1 permit mygroup1
[Device-pki-cert-acp-myacp] quit
4) Reference an SSL server policy
# Associate the HTTPS service with the SSL server policy myssl.
[Device] ip https ssl-server-policy myssl
5) Associate the HTTPS service with a certificate attribute access control policy
# Associate the HTTPS service with certificate attribute access control policy myacp.
[Device] ip https certificate access-control-policy myacp
6) Enable the HTTPS service
# Enable the HTTPS service.
[Device] ip https enable
7) Verify the configuration
Launch the IE explorer on Host, and enter https://10.1.1.1. You can log in to Device and control it.
z The URL of the HTTPS server starts with https://, and that of the HTTP server starts with http://.
z For details of PKI commands, refer to PKI Commands in the Security Volume.
z For details of the public-key local create rsa command, refer to Public Key Commands in the
Security Volume.
z For details of SSL commands, refer to SSL Commands in the Security Volume.
To Next Page
Loading...
