Hypertext Transfer Protocol Commands

This section describes the commands you use to configure Hypertext Transfer Protocol (HTTP) and secure HTTP access to the switch. Access to the switch by using a Web browser is enabled by default. Everything you can view and configure by using the CLI is also available by using the Web.

ip http authentication

Use this command to specify authentication methods for http server users. The default configuration is the local user database is checked. This action has the same effect as the command ip http authentication local. The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line.

• Default: local
• Format: ip http authentication method1 [method2...]
• Mode: Global Config
• local: Uses the local username database for authentication.
• none: Uses no authentication.
• radius: Uses the list of all RADIUS servers for authentication.
• tacacs: Uses the list of all TACACS servers for authentication.

no ip http authentication

Use this command to return to the default.

ip https authentication

Use this command to specify authentication methods for https server users. The default configuration is the local user database is checked. This action has the same effect as the command ip https authentication local. The additional methods of authentication are used only if the previous method returns an error, not if it fails. To ensure that the authentication succeeds even if all methods return an error, specify none as the final method in the command line. For example, if none is specified as an authentication method after radius, no authentication is used if the RADIUS server is down.

• Default: local
• Format: ip https authentication method1 [method2...]
• Mode: Global Config
• local: Uses the local username database for authentication.
• none: Uses no authentication.
• radius: Uses the list of all RADIUS servers for authentication.
• tacacs: Uses the list of all TACACS servers for authentication.

no ip https authentication

Use this command to return to the default.

ip http server

This command enables access to the switch through the Web interface. When access is enabled, the user can login to the switch from the Web interface. When access is disabled, the user cannot login to the switch Web server. Disabling the Web interface takes effect immediately. All interfaces are affected.

• Default: enabled
• Format: ip http server
• Mode: Privileged EXEC

no ip http server

This command disables access to the switch through the Web interface. When access is disabled, the user cannot login to the switch Web server.

• Format: no ip http server
• Mode: Privileged EXEC

ip http secure-server

This command is used to enable the secure socket layer for secure HTTP.

• Default: disabled
• Format: ip http secure-server
• Mode: Privileged EXEC

no ip http secure-server

This command is used to disable the secure socket layer for secure HTTP.

• Format: no ip http secure-server
• Mode: Privileged EXEC

ip http java

This command enables the Web Java mode. The Java mode applies to both secure and un-secure Web connections.

• Default: Enabled
• Format: ip http java
• Mode: Privileged EXEC

no ip http java

This command disables the Web Java mode. The Java mode applies to both secure and un-secure Web connections.

• Format: no ip http java
• Mode: Privileged EXEC

ip http session hard-timeout

This command configures the hard timeout for un-secure HTTP sessions in hours. Configuring this value to zero will give an infinite hard-timeout. When this timeout expires, the user will be forced to re-authenticate. This timer begins on initiation of the web session and is unaffected by the activity level of the connection.

• Default: 24
• Format: ip http session hard-timeout <1-168>
• Mode: Privileged EXEC

no ip http session hard-timeout

This command restores the hard timeout for un-secure HTTP sessions to the default value.

• Format: no ip http session hard-timeout
• Mode: Privileged EXEC

ip http session maxsessions

This command limits the number of allowable un-secure HTTP sessions. Zero is the configurable minimum.

• Default: 16
• Format: ip http session maxsessions <0-16>
• Mode: Privileged EXEC

no ip http session maxsessions

This command restores the number of allowable un-secure HTTP sessions to the default value.

• Format: no ip http session maxsessions
• Mode: Privileged EXEC

ip http session soft-timeout

This command configures the soft timeout for un-secure HTTP sessions in minutes. Configuring this value to zero will give an infinite soft-timeout. When this timeout expires the user will be forced to re-authenticate. This timer begins on initiation of the Web session and is re-started with each access to the switch.

• Default: 5
• Format: ip http session soft-timeout <1-60>
• Mode: Privileged EXEC

no ip http session soft-timeout

This command resets the soft timeout for un-secure HTTP sessions to the default value.

• Format: no ip http session soft-timeout
• Mode: Privileged EXEC

ip http secure-session hard-timeout

This command configures the hard timeout for secure HTTP sessions in hours. When this timeout expires, the user is forced to re-authenticate. This timer begins on initiation of the Web session and is unaffected by the activity level of the connection. The secure-session hard-timeout can not be set to zero (infinite).

• Default: 24
• Format: ip http secure-session hard-timeout <1-168>
• Mode: Privileged EXEC

no ip http secure-session hard-timeout

This command resets the hard timeout for secure HTTP sessions to the default value.

• Format: no ip http secure-session hard-timeout
• Mode: Privileged EXEC

ip http secure-session maxsessions

This command limits the number of secure HTTP sessions. Zero is the configurable minimum.

• Default: 16
• Format: ip http secure-session maxsessions <0-16>
• Mode: Privileged EXEC

no ip http secure-session maxsessions

This command restores the number of allowable secure HTTP sessions to the default value.

• Format: no ip http secure-session maxsessions
• Mode: Privileged EXEC

ip http secure-session soft-timeout

This command configures the soft timeout for secure HTTP sessions in minutes. Configuring this value to zero will give an infinite soft-timeout. When this timeout expires, you are forced to re-authenticate. This timer begins on initiation of the Web session and is re-started with each access to the switch. The secure-session softtimeout can not be set to zero (infinite).

• Default: 5
• Format: ip http secure-session soft-timeout <1-60>
• Mode: Privileged EXEC

no ip http secure-session soft-timeout

This command restores the soft timeout for secure HTTP sessions to the default value.

• Format: no ip http secure-session soft-timeout
• Mode: Privileged EXEC

ip http secure-port

This command is used to set the SSL port where port can be 1-65535 and the default is port 443.

• Default: 443
• Format: ip http secure-port portid
• Mode: Privileged EXEC

no ip http secure-port

This command is used to reset the SSL port to the default value.

• Format: no ip http secure-port
• Mode: Privileged EXEC

ip http secure-protocol

This command is used to set protocol levels (versions). The protocol level can be set to TLS1, SSL3 or to both TLS1 and SSL3.

• Default: SSL3 and TLS1
• Format: ip http secure-protocol [SSL3] [TLS1]
• Mode: Privileged EXEC

show ip http

This command displays the http settings for the switch.

• Format: show ip http
• Mode: Privileged EXEC

The display parameters for above command are:

• HTTP Mode (Unsecure): The unsecure HTTP server administrative mode.
• Java Mode: The java applet administrative mode which applies to both secure and un-secure web connections.
• Maximum Allowable HTTP Sessions: The number of allowable un-secure http sessions.
• HTTP Session Hard Timeout: The hard timeout for un-secure http sessions in hours.
• HTTP Session Soft Timeout: The soft timeout for un-secure http sessions in minutes.
• HTTP Mode (Secure): The secure HTTP server administrative mode.
• Secure Port: The secure HTTP server port number.
• Secure Protocol Level(s): The protocol level may have the values of SSL3, TSL1, or both SSL3 and TSL1.
• Maximum Allowable HTTPS Sessions: The number of allowable secure http sessions.
• HTTPS Session Hard Timeout: The hard timeout for secure http sessions in hours.
• HTTPS Session Soft Timeout: The soft timeout for secure http sessions in minutes.
• Certificate: Present Indicates whether the secure-server certificate files are present on the device.
• Certificate Generation in Progress: Indicates whether certificate generation is currently in progress.