Accton Technology ES3552XA, ES3526XA manual Configuring Https, Https System Support

	User Authentication
		3
Console#configure
Console(config)#authentication login tacacs	4-76
Console(config)#tacacs-server host 10.20.30.40	4-82
Console(config)#tacacs-server port 200	4-82
Console(config)#tacacs-server key green	4-82
Console#show tacacs-server	4-83
Server IP address: 10.20.30.40
Communication key with tacacs server: *****
Server port number: 200
Console(config)#

Configuring HTTPS

You can configure the switch to enable the Secure Hypertext Transfer Protocol (HTTPS) over the Secure Socket Layer (SSL), providing secure access (i.e., an encrypted connection) to the switch’s web interface.

Command Usage

•Both the HTTP and HTTPS service can be enabled independently on the switch. However, you cannot configure both services to use the same UDP port.

•If you enable HTTPS, you must indicate this in the URL that you specify in your browser: https://device[:port_number]

•When you start HTTPS, the connection is established in this way:

-The client authenticates the server using the server’s digital certificate.

-The client and server negotiate a set of security protocols to use for the connection.

-The client and server generate session keys for encrypting and decrypting data.

•The client and server establish a secure encrypted connection.

A padlock icon should appear in the status bar for Internet Explorer 5.x or above and Netscape Navigator 6.2 or above.

•The following web browsers and operating systems currently support HTTPS:

Table 3-6 HTTPS System Support

Web Browser	Operating System
Internet Explorer 5.0 or later	Windows 98,Windows NT (with service pack 6a),
	Windows 2000, Windows XP
Netscape Navigator 6.2 or later	Windows 98,Windows NT (with service pack 6a),
	Windows 2000, Windows XP, Solaris 2.6

•To specify a secure-site certificate, see “Replacing the Default Secure-site Certificate” on page 3-60.

Command Attributes

•HTTPS Status – Allows you to enable/disable the HTTPS server feature on the switch. (Default: Enabled)

•Change HTTPS Port Number – Specifies the UDP port number used for HTTPS/ SSL connection to the switch’s web interface. (Default: Port 443)

3-59