|
|
|
Enables or disables HTTPS on the CNA web server.
ip http server ssl on no ip http server ssl on
Must be in configuration mode (config) or USTAT configuration mode (config-ustat), which requires privileged-level access.
Also, you must have already installed all required SSL certificate and key files, using the ssl add command.
If you are in configuration mode (config), the ip http server ssl on command enables SSL on the management module’s web server.
When HTTPS is enabled on the management module, the web server provides access to the web interface through a Secure Sockets Layer (SSL) connection at https://<PathControl hostname>. Data will be encrypted using SSL certificate and key files which you provide.
You can have both HTTP and HTTPS enabled simultaneously, and data will be transferred according to the appropriate protocol based on the form of URL entered. If you have only HTTPS enabled, the URL http://<PathControl hostname> will be redirected to the secure channel and data will be encrypted as though the URL had been entered with https://. (You can turn this behavior off with an access list that blocks the port specified for HTTP.)
If you are in USTAT configuration mode (config-ustat), the ip http server ssl on command enables SSL on a USTAT-SSL module. The command will be ignored by a standard (non-SSL equipped) USTAT module.
If SSL is not enabled, the USTAT-SSL module will only respond to http:// requests.
If SSL is enabled, the USTAT-SSL module will respond to either http:// or https:// requests.
To disable HTTPS, use the no form of the command while in the appropriate configuration mode for the module of interest.
See the command ip http server on for information about enabling HTTP.
Use the no form of the ip http server on command to disable HTTP.
|
|
|