HP A-F1000-E Getting Started Manual page 67

To do...
Associate the HTTPS
service with a
certificate
attribute-based
access control policy
Configure the port
number of the HTTPS
service
Associate the HTTPS
service with an ACL
Create a local user
and enter local user
view
Configure a
password for the local
user
Specify the command
level of the local user
Specify the Telnet
service type for the
local user
Exit to system view
Enter management
Ethernet interface
view
Assign an IP address
and subnet mask to
the management
Ethernet interface
Use the command...
ip https certificate
access-control-policy
policy-name
ip https port port-number
ip https acl acl-number
local-user user-name
password { cipher |
simple } password
authorization-attribute
level level
service-type web
quit
interface interface-type
interfac-number
ip address ip-address
{ mask | mask-length }
61
Remarks
Optional
By default, the HTTPS service is not associated with any
certificate-based attribute access control policy.
•
Associating the HTTPS service with a certificate-based
attribute access control policy enables the device to
control the access rights of clients.
•
You must configure the client-verify enable command in
the associated SSL server policy. If not, no clients can
log in to the device.
•
The associated SSL server policy must contain at least
one permit rule. Otherwise, no clients can log in to the
device.
Optional
443 by default.
Required
By default, the HTTPS service is not associated with any
ACL.
Associating the HTTPS service with an ACL enables the
device to allow only clients permitted by the ACL to access
the device.
Required
By default, no local user is configured.
Required
By default, no password is configured for the local user.
Required
By default, no command level is configured for the local
user.
Required
By default, no service type is configured for the local user.
—
Required
Required
By default, the IP address of the management Ethernet
interface is 192.168.0.1/24.