S
ECURITY

2-21

CLI Commands
CLI – Specify all the required parameters to enable logon
authentication.

Configuring HTTPS

You can configure the switch to enable the Secure Hypertext
Transfer Protocol (HTTPS) over the Secure Socket Layer (SSL),
providing secure access (i.e., an encrypted connection) to the
switch’s Web interface.
Both the HTTP and HTTPS service can be enabled independently
on the switch. However, you cannot configure the HTTP and
HTTPS servers to use the same UDP port. If you change the
HTTPS port number, clients attempting to connect to the HTTPS
server must specify the port number in the URL, in this
format: https://device:port_number.
Note: If you enable HTTPS, you must indicate this in the URL.
For example: https://device [:port_number]
Console(config)#authentication login radius 3-56
Console(config)#radius-server host 192.168.1.25 3-58
Console(config)#radius-server port 181 3-58
Console(config)#radius-server key green 3-59
Console(config)#radius-server retransmit 5 3-60
Console(config)#radius-server timeout 10 3-60
Console#show radius-server 3-61
Server IP address: 192.168.1.25
Communication key with radius server: green
Server port number: 181
Retransmit times: 5
Request timeout: 10
Console(config)#authentication login tacacs 3-56
Console(config)#tacacs-server host 10.20.30.40 3-61
Console(config)#tacacs-server port 200 3-62
Console(config)#tacacs-server key green 3-63
Console#show tacacs-server 3-63
Server IP address: 10.20.30.40
Communication key with tacacs server: green
Server port number: 200
Console(config)#
b_mgmt.book Page 21 Tuesday, July 8, 2003 5:24 PM