HTTPS Configuration Example 1217
2 Configure an SSL server policy associated with the HTTPS service
# Configure SSL server policy.
[Switch] ssl server-policy myssl
[Switch-ssl-server-policy-myssl] pki-domain 1
[Switch-ssl-server-policy-myssl] client-verify enable
[Switch-ssl-server-policy-myssl] quit
3 Configure certificate access control policy
# Configure certificate attribute group.
[Switch] pki certificate attribute-group mygroup1
[Switch-pki-cert-attribute-group-mygroup1] attribute 1 issuer-name dn ctn new-ca
[Switch-pki-cert-attribute-group-mygroup1] quit
# Configure certificate access control policy myacp and create a control rule.
[Switch] pki certificate access-control-policy myacp
[Switch-pki-cert-acp-myacp] rule 1 permit mygroup1
[Switch-pki-cert-acp-myacp] quit
4 Reference an SSL server policy
# Associate the HTTPS service with the SSL server policy myssl.
[Switch] ip https ssl-server-policy myssl
5 Associate the HTTPS service with a certificate attribute access control policy
# Associate the HTTPS service with a certificate attribute access control policy
myacp.
[Switch] ip https certificate access-control-policy myacp
6 Enable the HTTPS service
# Enable the HTTPS service.
[Switch] ip https enable
7 Verify the configuration
Launch the IE explorer on Host, and enter https://10.1.1.1. You can log onto
Switch and control it.
n
■ For details of PKI commands, refer to PKI “PKI Configuration” on page 1219.
■ For details of the public-key local create rsa command, refer to “SSH
Configuration” on page 1107.
To Next Page
Loading...
