Chapter 64 System Remote Management
ZyWALL Series CLI Reference Guide
530
[no] ip http secure-server auth-client
Sets the client to authenticate itself to the HTTPS server. The
no command sets the client not to authenticate itself to the
HTTPS server.
[no] ip http secure-server cert certificate_name
Specifies a certificate used by the HTTPS server. The no
command resets the certificate used by the HTTPS server to
the factory default (
default).
certificate_name: The name of the certificate. You can
use up to 31 alphanumeric and ;‘~!@#$%^&()_+[]{}’,.=-
characters.
[no] ip http secure-server force-redirect
Redirects all HTTP connection requests to a HTTPS URL. The
no command disables forwarding HTTP connection
requests to a HTTPS URL.
[no] ip http secure-server sslv3
Turns on SSLv3 support in the HTTP server. The no command
turns SSLv3 support off.
ip http secure-server table {admin|user} rule
{rule_number|append|insert rule_number} access-
group {ALL|address_object} zone
{ALL|zone_object} action {accept|deny}
Sets a service control rule for HTTPS service.
ip http secure-server table {admin|user} rule
move rule_number to rule_number
Changes the index number of a HTTPS service control rule.
ip http secure-server cipher-suite
{cipher_algorithm} [cipher_algorithm]
[cipher_algorithm] [cipher_algorithm]
Sets the encryption algorithms (up to four) that the Zyxel
Device uses for the SSL in HTTPS connections and the
sequence in which it uses them. The cipher_algorithm
can be any of the following.
rc4: RC4 (RC4 may impact the Zyxel Device’s CPU
performance since the Zyxel Device’s encryption
accelerator does not support it).
aes: AES
des: DES
3des: Triple DES.
no ip http secure-server cipher-suite
{cipher_algorithm}
Has the Zyxel Device not use the specified encryption
algorithm for the SSL in HTTPS connections.
[no] ip http server
Allows HTTP access to the Zyxel Device web configurator.
The
no command disables HTTP access to the Zyxel Device
web configurator.
ip http server table {admin|user} rule
{rule_number|append|insert rule_number} access-
group {ALL|address_object} zone
{ALL|zone_object} action {accept|deny}
Sets a service control rule for HTTP service.
ip http server table {admin|user} rule move
rule_number to rule_number
Changes the number of a HTTP service control rule.
no ip http secure-server table {admin|user} rule
rule_number
Deletes a service control rule for HTTPS service.
no ip http server table {admin|user} rule
rule_number
Deletes a service control rule for HTTP service.
ip http skip-csrf-check
Omits cross-site request forgery (CSRF) checking. CSRF
exploits the trust that a site has in a user's browser to transmit
unauthorized commands as if they are from a user that the
website trusts.
Table 306 Command Summary: HTTP/HTTPS (continued)
COMMAND DESCRIPTION