SMC Networks 10/100/1000 SMCGS8P-Smart manual Configuring Https, CLI Commands

SECURITY

CLI Commands

CLI – Specify all the required parameters to enable logon authentication.

Console(config)#authentication login radius	3-56
Console(config)#radius-server host 192.168.1.25	3-58
Console(config)#radius-server port 181	3-58
Console(config)#radius-server key green	3-59
Console(config)#radius-server retransmit 5	3-60
Console(config)#radius-server timeout 10	3-60
Console#show radius-server	3-61
Server IP address: 192.168.1.25
Communication key with radius server: green
Server port number: 181
Retransmit times: 5
Request timeout: 10	3-56
Console(config)#authentication login tacacs
Console(config)#tacacs-server host 10.20.30.40	3-61
Console(config)#tacacs-server port 200	3-62
Console(config)#tacacs-server key green	3-63
Console#show tacacs-server	3-63
Server IP address: 10.20.30.40

Communication key with tacacs server: green

Server port number: 200

Console(config)#

Configuring HTTPS

You can configure the switch to enable the Secure Hypertext Transfer Protocol (HTTPS) over the Secure Socket Layer (SSL), providing secure access (i.e., an encrypted connection) to the switch’s Web interface.

Both the HTTP and HTTPS service can be enabled independently on the switch. However, you cannot configure the HTTP and HTTPS servers to use the same UDP port. If you change the HTTPS port number, clients attempting to connect to the HTTPS server must specify the port number in the URL, in this

format: https://device:port_number.

Note: If you enable HTTPS, you must indicate this in the URL. For example: https://device [:port_number]

2-21