Associating the HTTPS Service with a Certificate Attribute Access Control Policy 1215
Associating the HTTPS
Service with a
Certificate Attribute
Access Control Policy
Associating the HTTPS service with a configured certificate access control policy
helps control the access right of the client, thus providing the device with
enhanced security.
Follow these steps to associate the HTTPS service with a certificate attribute access
control policy:
n
■ If the ip https certificate access-control-policy command is executed
repeatedly, the HTTPS server is only associated with the last specified certificate
attribute access control policy.
■ If the HTTPS service is associated with a certificate attribute access control
policy, the client-verify enable command must be configured in the SSL
server policy. Otherwise, the client cannot log onto the device.
■ If the HTTPS service is associated with a certificate attribute access control
policy, the latter must contain at least one permit rule. Otherwise, no HTTPS
client can log onto the device.
■ For the configuration of an SSL server policy, refer to “PKI Configuration” on
page 1219.
Associating the HTTPS
Service with an ACL
Associating the HTTPS service with an ACL can filter out requests from some
clients to let pass only clients that pass the ACL filtering.
Follow these steps to associate the HTTPS service with an ACL:
n
If the ip https acl command is executed repeatedly, the HTTPS service is only
associated with the last specified ACL.
Displaying and
Maintaining HTTPS
HTTPS Configuration
Example
Network requirements
■ Host acts as the HTTPS client and Switch acts as the HTTPS server.
To do… Use the command… Remarks
Enter system view system-view -
Associate the HTTPS service with a
certificate attribute access control
policy
ip https certificate
access-control-policy
policy-name
Required
Not associated by default.
To do… Use the command… Remarks
Enter system view system-view -
Associate the HTTPS service
with an ACL
ip https acl acl-number Required
Not associated by default.
To do… Use the command… Remarks
Display information about
HTTPS
display ip https Available in any view
To Next Page
Loading...
