Brocade Multi-Service IronWare Security Configuration Guide (Supporting R05.6.00) - Manual (Page 45)

Multi-Service IronWare Security Configuration Guide 27
53-1003035-02
Configuring SSL security for the Web Management Interface
1
The first instance of the hh:mm:ss variable specifies the start of the access time and the second
instance of the hh:mm:ss variable specifies the end of the access time.
Configuring SSL security for the Web
Management Interface
When enabled, the SSL protocol uses digital certificates and public-private key pairs to establish a
secure connection to the Brocade device. Digital certificates serve to prove the identity of a
connecting client, and public-private key pairs provide a means to encrypt data sent between the
device and the client.
NOTE
The Web Management Interface is only supported on the Brocade NetIron XMR and Brocade MLX
series devices
Configuring SSL for the Web Management Interface consists of the following tasks:
• Enabling the SSL server on the Brocade device
• Importing an RSA certificate and private key file from a client (optional)
• Generating a certificate
Enabling the SSL server on a Brocade device
To enable the SSL server on a Brocade device, enter the following command.
Brocade(config)# web-management https
Syntax: [no] web-management http | https
You can enable either the HTTP or HTTPs servers with this command. You can disable both the
HTTP and HTTPs servers by entering the following command.
Brocade(config)# no web-management
Syntax: [no] web-management
Specifying a port for SSL communication
By default, SSL protocol exchanges occur on TCP port 443. You can optionally change the port
number used for SSL communication.
For example, the following command causes the device to use TCP port 334 for SSL
communication.
Brocade(config)# ip ssl port 334
Syntax: [no] ip ssl port port-number
The default port for SSL communication is 443.