HP (Hewlett-Packard) Q.11. (2510-24) ユーザーズマニュアル
7-5
Configuring Secure Socket Layer (SSL)
Prerequisite for Using SSL
Prerequisite for Using SSL
Before using the switch as an SSL server, you must install a publicly or
commercially available SSL enabled web browser application on the com-
puter(s) you use for management access to the switch.
commercially available SSL enabled web browser application on the com-
puter(s) you use for management access to the switch.
Steps for Configuring and Using SSL for
Switch and Client Authentication
Switch and Client Authentication
The general steps for configuring SSL include:
A. Client Preparation
1.
Install an SSL capable browser application on a management station
you want to use for access to the switch. (Refer to the documentation
provided with your browser.)
you want to use for access to the switch. (Refer to the documentation
provided with your browser.)
N o t e :
The latest versions of Microsoft Internet Explorer and Netscape web browser
support SSL and TLS functionality. See the browser documentation for addi-
tional details
support SSL and TLS functionality. See the browser documentation for addi-
tional details
B. Switch Preparation
1.
Assign a login (Operator) and enable (Manager) password on the
switch (page 7-7).
switch (page 7-7).
2.
Generate a host certificate on the switch (page 7-8).
i.
i.
Generate certificate key pair
ii.
Generate host certificate
You need to do this only once. The switch's own public/private
certificate key pair and certificate are stored in the switch's flash
memory and are not affected by reboots or the erase startup-config
command. (You can remove or replace this certificate, if necessary.)
The certificate key pair and the SSH key pair are independent of each
other, which means a switch can have two keys pairs stored in flash.
certificate key pair and certificate are stored in the switch's flash
memory and are not affected by reboots or the erase startup-config
command. (You can remove or replace this certificate, if necessary.)
The certificate key pair and the SSH key pair are independent of each
other, which means a switch can have two keys pairs stored in flash.
3.
Enable SSL on the switch (page 7-17).
4.
Use your SSL enabled browser to access the switch using the switch’s
IP address or DNS name (if allowed by your browser). Refer to the
documentation provided with the browser application.
IP address or DNS name (if allowed by your browser). Refer to the
documentation provided with the browser application.