H3C Technologies H3C SecPath F1000-E - Manual (Page 49)

39
Figure 32 Associating HTTP service with ACL 2000
HTTPS configuration example
Network requirements
As shown in Figure 33 , Host can access and control SecPath through web pages. To avoid malicious
users from accessing and controlling SecPath, users use HTTPS to access web pages on SecPath. SSL is
used to authenticate servers, preventing data eavesdropping and data modification.
To meet the requirements, configure SecPath as an HTTPS server and apply for a certificate for SecPath.
The name of the certificate authority (CA) that issues certificates to SecPath and Host is CA server.
NOTE:
•
This example uses a Windows server as the CA that has the Simple Certificate Enrollment Protocol
(SCEP) component installed.
• Before proceeding with the following configuration, make sure that SecPath, Host, and CA are
reachable to each other.
Figure 33 Network diagram
Configuring a PKI entity
1. Select VPN > Certificate Management > Entity from the navigation tree.
2. Click Add.