Chapter 34 System Remote Management

 

 

Table 126 Command Summary: HTTP/HTTPS (continued)

 

COMMAND

DESCRIPTION

[no] ip http secure-server force-redirect

Redirects all HTTP connection requests to a

 

HTTPS URL. The no command disables

 

forwarding HTTP connection requests to a

 

HTTPS URL.

 

 

ip http secure-server table {adminuser} rule

Sets a service control rule for HTTPS service.

{rule_numberappendinsert rule_number} access-

 

group {ALLaddress_object} zone

 

{ALLzone_object} action {acceptdeny}

 

ip http secure-server table {adminuser} rule

Changes the index number of a HTTPS service

move rule_number to rule_number

control rule.

ip http secure-server cipher-suite

Sets the encryption algorithms (up to four) that

{cipher_algorithm} [cipher_algorithm]

the NXC uses for the SSL in HTTPS connections

[cipher_algorithm] [cipher_algorithm]

and the sequence in which it uses them. The

 

cipher_algorithm can be any of the

 

following.

 

rc4: RC4 (RC4 may impact the NXC’s CPU

 

performance since the NXC’s encryption

 

accelerator does not support it).

 

aes: AES

 

des: DES

 

3des: Triple DES.

no ip http secure-server cipher-suite

Has the NXC not use the specified encryption

{cipher_algorithm}

algorithm for the SSL in HTTPS connections.

[no] ip http server

Allows HTTP access to the NXC web

 

configurator. The no command disables HTTP

 

access to the NXC web configurator.

ip http server table {adminuser} rule

Sets a service control rule for HTTP service.

{rule_numberappendinsert rule_number} access-

 

group {ALLaddress_object} zone

 

{ALLzone_object} action {acceptdeny}

 

ip http server table {adminuser} rule move

Changes the number of a HTTP service control

rule_number to rule_number

rule.

no ip http secure-server table {adminuser} rule

Deletes a service control rule for HTTPS service.

rule_number

 

no ip http server table {adminuser} rule

Deletes a service control rule for HTTP service.

rule_number

 

show ip http server status

Displays HTTP settings.

show ip http server secure status

Displays HTTPS settings.

34.3.1 HTTP/HTTPS Command Examples

This following example adds a service control rule that allowed an administrator from the computers with the IP addresses matching the Marketing address object to access the WAN zone using HTTP service.

Router# configure terminal

Router(config)# ip http server table admin rule append access-group Marketing zone WAN action accept

 

215

NXC CLI Reference Guide