Dell Force10 MXL Blade 애플리케이션 노트 - 페이지 5

{카테고리_이름} Dell Force10 MXL Blade에 대한 애플리케이션 노트을 온라인으로 검색하거나 PDF를 다운로드하세요. Dell Force10 MXL Blade 6 페이지. 10/40gbe blade switches
Dell Force10 MXL Blade에 대해서도 마찬가지입니다: 시작하기 매뉴얼 (38 페이지), 사양 (2 페이지), 매뉴얼 (27 페이지)

페이지 인쇄

Certificate file transfer operation completed successfully

SFTOS #copy tftp://192.168.0.10/rootcert.pem nvram:sslpem-root

Mode........................................... TFTP

Set TFTP Server IP............................. 192.168.0.10

TFTP Path......................................

TFTP Filename.................................. rootcert.pem

Data Type...................................... SSL Root cert

Management access will be blocked for the duration of the transfer

Are you sure you want to start? (y/n) y

TFTP SSL certificate receive complete... updating certificate file...

Certificate file transfer operation completed successfully

3. Enable the HTTPS server with this command.

SFTOS Version <= 2.2.1

(SFTOS) #ip http secure-server

To verify that the server has started, use this command to show the HTTPS server status and check the log file for

the following messages.

SFTOS #show ip http

Java Mode: Disabled

HTTP Mode (Unsecure): Disabled

HTTP Mode (Secure): Enabled

Secure Port: 443

Secure Protocol Level(s): TLS1 SSL3

SFTOS #show logging buffered

JAN 01 01:16:19 192.168.0.34-1 UNKN[209189968]: sslt_util.c(321) 39 %% SSLT: Successfully

loaded all required SSL PEM files

Using a web browser, connect to the switch using an https:// URL and login to verify that the SSL server is working.

The padlock icon on your browser should indicate an encrypted connection.

If you used the example certificates, your browser will display a warning that it cannot verify the authenticity of the

certificate. This is because the example certificates have not been certified by a Certification Authority. When

certificates are acquired from a Certification Authority and loaded on the switch this warning will not occur.

4. Once you have verified that you can connect to the switch with a web browser, the HTTP server can be disabled

with this command for additional security if it was enabled previously. The HTTP server is disabled by default.

SFTOS Version <= 2.2.1

(SFTOS) #no ip http server

S-Series Secure Management

SFTOS (Config)#ip http secure-server enable

SFTOS (Config)#no ip http server enable

- 5 -

SFTOS Version >= 2.3.1