Using The Cli To Enable Web And Secure Web Modes - Cisco 2100 Series Configuration Manual

Using the Web-Browser Interface
Note
Step 7 Click Save Configuration to save your changes.

Using the CLI to Enable Web and Secure Web Modes

Follow these steps to enable web mode, secure web mode, or both using the controller CLI.
To enable or disable web mode, enter this command:
Step 1
config network webmode {enable | disable}
This command allows users to access the controller GUI using "http://ip-address." The default value is
disabled. Web mode is not a secure connection.
To enable or disable secure web mode, enter this command:
Step 2
config network secureweb {enable | disable}
This command allows users to access the controller GUI using "https://ip-address." The default value is
enabled. Secure web mode is a secure connection.
To enable or disable secure web mode with increased security, enter this command:
Step 3
config network secureweb cipher-option high {enable | disable}
This command allows users to access the controller GUI using "https://ip-address" but only from
browsers that support 128-bit (or larger) ciphers. The default value is disabled.
To enable or disable SSLv2 for web administration, enter this command:
Step 4
config network secureweb cipher-option sslv2 {enable | disable}
If you disable SSLv2, users cannot connect using a browser configured with SSLv2 only. They must use
a browser that is configured to use a more secure protocol such as SSLv3 or later. The default value is
enabled.
To verify that the controller has generated a certificate, enter this command:
Step 5
show certificate summary
Information similar to the following appears:
Web Administration Certificate................. Locally Generated
Web Authentication Certificate................. Locally Generated
Certificate compatibility mode:................ off
Note
(Optional) If you need to generate a new certificate, enter this command:
Step 6
config certificate generate webadmin
After a few seconds, the controller verifies that the certificate has been generated.
Cisco Wireless LAN Controller Configuration Guide
2-4
If desired, you can delete the current certificate by clicking Delete Certificate and have the
controller generate a new certificate by clicking Regenerate Certificate.
If you want to download your own SSL certificate to the controller, follow the instructions in the
"Loading an Externally Generated SSL Certificate" section on page
Chapter 2 Using the Web-Browser and CLI Interfaces
2-5.
OL-17037-01