394
G8264 Command Reference for ENOS 8.4
Table 174.
HTTPS Access Configuration Options (continued)
Command Syntax and Usage
access https generatecsr
Allows you to generate a CSR (Certificate Signing Request) to connect to the
SSL to be used during the key exchange. A default certificate is created when
HTTPS is enabled for the first time. The user can create a new certificate
defining the information that they want to be used in the various fields. For
example:
Country Name (2 letter code): CA
State or Province Name (full name): Ontario
Locality Name (for example, city): Ottawa
Organization Name (for example, company): Lenovo
Organizational Unit Name (for example, section): Operations
Common Name (for example, user's name): Mr Smith
Email (for example, email address): info@lenovo.com
Unlike the generatecertificate command, this command will generate
a certificate request that needs to be signed by a certificate authority (CA)
recognized by both parties.
Command mode: Global configuration
access https savecertificate
Allows the client or the Web browser to accept the certificate and save the
certificate to Flash to be used when the switch is rebooted.
Command mode: Global configuration
access https deletecertificate
Deletes the current certificate from the flash memory.
Command mode: Global configuration
access https port <TCP port number (1‐65535)>
Defines the HTTPS Web server port number.
The default port is 443.
Command mode: Global configuration
default access https port
Resets the HTTPS port to the default port number ‐ 443.
Command mode: Global configuration
copy {tftp|sftp} cacert [dataport|mgtport]
Enables you to import a certificate authority root certificate using TFTP/SFTP.
Command mode: Global configuration
copy tftp cacert address <hostname or server IP address>
filename <server‐filename> [dataport|mgtport]
Enables you to import a certificate authority root certificate using TFTP.
Command mode: Global configuration