Allied Telesis AT-S62 - Manual (Page 682)

Chapter 30: Web Server
682 Section VII: Management Security
Web Server Overview
The AT-S62 management software comes with web server software so
you can remotely manage a switch with a web browser from a
management workstation on your network. (For instructions on how to
manage a switch with a web browser, refer to the AT-S62 Web Browser
Interface User’s Guide.)
The web server can operate in two modes. The first is referred to as non-
secure HTTP mode. In this mode, packets sent between the switch and
the web browser during a management session are transmitted in
plaintext. Anyone monitoring your network with a network analyzer, such
as a sniffer, will be able to view the contents of the management packets.
The web server can also operate in the secure HTTPS mode where all
communications between the switch and a web browser are encrypted.
This feature uses the Secure Sockets Layer (SSL) protocol. It can help
protect your switch from intruders who might be monitoring your network.
If you intend to use the secure HTTPS mode of the web server, there are
several procedures you need to perform before you can configure the web
server. You must create an encryption key, as explained in Chapter 31,
“Encryption Keys” on page 687. You must also create a certificate and add
the certificate to the certificate database. This latter part is explained in
Chapter 32, “PKI Certificates and SSL” on page 705. For an overview to
the procedures, refer to “General Steps to Configuring the Web Server for
Encryption” on page 685. For an overview of all the steps, refer to
“General Steps to Configuring the Web Server for Encryption” on
page 685.
The default setting for the web server is enabled, with the non-secure
HTTP mode as the default active mode.
Note
To use SSL in an enhanced stack, all switches in the stack must use
SSL. For further information, refer to “SSL and Enhanced Stacking”
on page 709.
Supported
Protocols
The switch supports the following HTTP and HTTPs protocols:
ˆ HTTP v1.0 and v1.1 protocols
ˆ HTTPS v1.0 and v1.1 protocols running over SSL
The switch supports the following SSL protocols:
ˆ SSL version 2.0
ˆ SSL version 3.0
ˆ TLS (Transmission Layer Security) version 1.0