Configuring Https - Cisco Firepower 4110 Preparative Procedures & Operational User Manual

Cisco Preparative Procedures & Operational User Guide
4) Launch a dialog for entering and uploading the key ring certificate:
Firepower-chassis /security/keyring# set cert
At the prompt, paste the certificate text that you received from the trust anchor or certificate
authority. On the next line following the certificate, type ENDOFBUF to complete the certificate
input.
5) Commit the transaction:
Firepower-chassis /security/keyring# commit-buffer

4.5.6.6 Configuring HTTPS

IMPORTANT! After you complete the HTTPS configuration, including changing the port and key
ring to be used by HTTPS, all current HTTP and HTTPS sessions are closed without warning as
soon as you save or commit the transaction.
1) Enter system mode:
Firepower-chassis# scope system
2) Enter system services mode:
Firepower-chassis /system# scope services
3) Enter the HTTPS service:
Firepower-chassis /system/services# enable https
4) (Optional) Specify the port to be used for the HTTPS connection:
Firepower-chassis /system/services# set https port port-number
Specify an integer between 1 and 65535 for port-number. HTTPS is enabled on port 443 by default.
5) (Optional) Specify the name of the key ring you created for HTTPS:
Firepower-chassis /system/services# set https keyring keyring-name
6) (Optional) Specify the level of Cipher Suite security used by the domain:
Firepower-chassis /system/services# set https cipher-suite-mode
ciphersuite-mode
ciphersuite-mode
o high-strength
o medium-strength
o low-strength
o custom – Specify a user-defined Cipher Suite specification string.
7) (Optional) If cipher-suite-mode is set to custom, specify a custom level of Cipher Suite security for
the domain:
Firepower-chassis /system/services# set https cipher-suite cipher-suites
© 2016 Cisco Systems, Inc. All rights reserved.
can be one of the following keywords: