Chapter 43 Access Control
GS2210 Series User’s Guide
380
43.7.3 Introduction to HTTPS
HTTPS ( Hyper Text Transfer Pr ot ocol over Secur e Socket Layer, or HTTP over SSL) is a w eb pr ot ocol
t hat encr ypt s and decr ypt s w eb pages. Secur e Socket Layer ( SSL) is an applicat ion- level pr ot ocol
t hat enables secur e t ransact ions of dat a by ensur ing confident ialit y ( an unaut hor ized par t y cannot
r ead t he t ransfer r ed dat a) , aut hent icat ion ( one par t y can ident ify t he ot her par t y ) and dat a
int egr it y ( you know if dat a has been changed) .
I t r elies upon cer t ificat es, public keys, and pr ivat e keys.
HTTPS on t he Swit ch is used so t hat you m ay secur ely access t he Swit ch using t he w eb
configurat or. The SSL pr ot ocol specifies t hat t he SSL ser ver ( t he Sw it ch) m ust always aut hent icat e
it self t o t he SSL client ( t he com put er w hich r equest s t he HTTPS connect ion w it h t he Swit ch) ,
w her eas t he SSL client only should aut hent icat e it self w hen t he SSL ser ver r equir es it t o do so.
Aut hent icat ing client cer t ificat es is opt ional and if select ed m eans t he SSL- client m ust send t he
Swit ch a cer t ificat e. You m ust apply for a cer t ificat e for t he br ow ser fr om a Cer t ificat e Aut hor it y
( CA) t hat is a t r ust ed CA on t he Sw it ch.
Please r efer t o t he following figur e.
1
HTTPS connect ion r equest s fr om an SSL- awar e w eb brow ser go t o port 443 ( by default ) on t he
Swit ch’s WS ( w eb ser ver ) .
2
HTTP connect ion r equest s fr om a web br owser go t o por t 80 ( by default ) on t he Swit ch’s WS ( web
ser ver ) .
Figure 266
HTTPS I m plem ent at ion
Not e: I f you disable HTTP in t he Ser v ice Access Cont r ol scr een, t hen t he Sw it ch block s all
HTTP connect ion at t em pt s.
43.7.3.1 HTTPS Example
I f you haven’t changed t he default HTTPS por t on t he Sw it ch, t hen in your br ow ser ent er “ ht t ps: / /
Swit ch I P Addr ess/ ” as t he w eb sit e addr ess w her e “ Sw it ch I P Addr ess” is t he I P addr ess or dom ain
nam e of t he Swit ch you w ish t o access.
Internet Explorer Warning Messages
I n t e r n e t Ex plor e r 6