|
|
|
Allows you to change the web server port.
ip http server port <num> no ip http server port
Must be in configuration (config) mode, which requires privileged-level access.
You can set the port to any valid port number in the specified range. Use the no form of the command to reset the port to its default value.
When you enter the ip http server port command in the CLI, CNA will reject any of the well-known ports (0 through 1023), as well as those ports which are reserved by the device for its exclusive use (all ports in the range 56789 through 65535).
Ports in the range 5000 through 49151 are known as “registered” ports and may be claimed by a third-party process used in some future implementation of the CNA operating system.
In addition, the ports in the range 1024 through 4999 are considered by the operating system to be available on demand to meet transient needs.
CNA has multiple processes exchanging data across multiple modules, and multiple users can log in simultaneously via Telnet or SSH and transfer files or initiate cross-module traffic. Each of these events requires one or more of these dynamically allocated ports for varying amounts of time.
You are free to use one of the ports in the dynamic pool, but there is a very small--though still present--chance that the port you choose will have been allocated at the moment the web server attempts to bind to it. (Once the port is claimed by the HTTP server, it will be removed from the pool and there will be no further chance of conflict as long as the server remains up.)
You can also use one of the “registered” ports as long as it is available.
In the rare instance of a conflict, it is possible that the Medic process will still show the server to be running even though it is not. Currently, the only means by which you can detect a port conflict is to start the web server and attempt to log in to the web interface.
If the attempt fails, issue the no ip http server on command to tell Medic to release the server it thinks is running and then restart the server with the ip http server on command. Most dynamic port assignments will be temporary and short lived, so the requested port will in all probability be available this time (though this is not guaranteed).
If you change the web server port, you must also define a new access list which allows the management module to use not only the new port, but also all of the ports that were previously enabled on the interface by default.
For details about default access rules, see Access Lists in Chapter 3: Security of the CNA Basic Monitoring Guide.
Use the no form of the ip http server port command to reset the port to its default.
|
|
|