beautypg.com

Ssl settings, Configuring ssl – Allied Telesis AT-GS950/8 User Manual

Page 56

background image

Chapter 2: Basic Switch Configuration

56

SSL Settings

The AT-GS950/8 switch has a web browser server for remote
management of the unit with a web browser application from management
workstations on your network. By default, the server operates in a
non-secure HTTP mode and can be configured to communicate in a
secure HTTPS mode with SSL protocol.

In many situations, the communication with the switch will be in a
controlled environment and it is acceptable to communicate with the
management software in the HTTP mode.

However, you may find that your management communications are
subject to outside security risks and web sessions conducted in the non-
secure HTTP mode are vulnerable to security issues because the packets
are sent in clear text. Web browser management sessions that use the
secure HTTPS mode with SSL protocol are protected against snooping
because the packets exchanged between the switch and your
management workstations are encrypted. When operating in this mode,
only the AT-GS950/8 switch and the web browser are able to decipher the
packets sent and received between them.

Configuring SSL

To enable or disable the SSL protocol feature, perform the following
procedure:

1. From the main menu on the left side of the page, click the System

folder.
The System folder expands.

2. From the System folder, select SSL Settings.

The SSL Settings Page is displayed. See Figure 20.

Figure 20. SSL Settings Page

3. From the SSL Settings field, select one of the following choices from

the pull-down menu:

Enable - The secure SSL mode is active. You must log in to the
switch’s management using the HTTPS mode on your browser.

Disable - The secure SSL mode is inactive. You must log in to the
switch’s management using the HTTP mode on your browser.