HTTP

HTTP

One of the appearance Cisco IOS offers to administer the accessory is the HTTP protocol. The chip web server in Cisco IOS allows basal administration application the web browser. If HTTP is not required, it is awful recommended that you attenuate it.

HTTP server is enabled application the ip http server command from the all-around agreement mode. The defended HTTP (HTTPS) server

feature was additionally added from IOS adaptation 12.2(15)T and later. Defended HTTP (HTTPS) can be enabled application the ip http secureserver

command from the all-around agreement mode. The accustomed HTTP server and the defended HTTP server can run

concurrently on a device. For added security, it is recommended that you use the Defended HTTP (HTTPS) server and attenuate accustomed HTTP server application the no ip http server command. This will ensure that defended abstracts cannot be accessed through accustomed HTTP connection. The appearance ip http server command can be acclimated for abundant cachet advice about the HTTP

server.

By default, the HTTP server uses the accustomed TCP anchorage 80, and Defended HTTP (HTTPS) uses the accustomed TCP anchorage 443. These

ports can be afflicted to user-defined ports by application the ip http anchorage {port} command and the ip http secure-port {port}

command, respectively. Alone ethics aloft 1024 are accepted.

For added diminutive security, an affidavit apparatus can be acclimated for login back a applicant connects to HTTP server, coupled

with an admission account to bind the admission of HTTP account to accustomed users only. The ip http access-class {access-listnumber}

command can be acclimated to ascertain sets of IP addresses and networks that are acceptable or denied access. The ip http

authentication command can be acclimated to accredit affidavit application the AAA, accredit , bounded , and tacacs methods.

If HTTP and HTTPS casework are not required, they can be disabled by application the no ip http server command and no ip http

secure-server commands, respectively, from the all-around agreement mode.