Configure the Web Server

Perform this procedure to enable and manage the web server using the Command Line Interface (CLI). After you enable the web server, you can connect to EDM.

HTTP and FTP support both IPv4 and IPv6 addresses, with no difference in functionality or configuration. The TFTP server supports both IPv4 and IPv6 addresses. The TFTP client is not supported, only the server.

About this task

This procedure assumes that you use the default port assignments. You can change the port number used for HTTP and HTTPS.

Important

To enable HTTP access to the device, you must disable the web server secure-only option. To enable HTTPS access to the device, the web server secure-only option is enabled by default.

Procedure

Enter Global Configuration mode:

enable

configure terminal
Enable the web server:

web-server enable

Important

When you enable the web management interface using the web-server enable command, the system prompts you to change the admin and read-only user default passwords. If you do not change the default passwords, you are prompted to changing them every time you use the web-server enable command.
Optional: Disable the secure-only option (for HTTP access) :

no web-server secure-only
Enable read-only user:

web-server read-only-user enable
Display the web server status:

show web-server

Example

Switch:1(config)#show web-server
Web Server Info :

        Status                    : off
        Secure-only               : enabled
        TLS-minimum-version       : tlsv12
        RO Username Status        : disabled
        RO Username               : user
        RO Password               : ********
        RWA Username              : admin
        RWA Password              : ********
        Def-display-rows          : 30
        Inactivity timeout        : 900 sec
        Html help tftp source-dir :
        HttpPort                  : 80
        HttpsPort                 : 443
        NumHits                   : 0
        NumAccessChecks           : 0
        NumAccessBlocks           : 0
        NumRxErrors               : 0

        NumTxErrors               : 0
        NumSetRequest             : 0
        Minimum password length   : 8
        Last Host Access Blocked  : 0.0.0.0
        In use certificate        : Self signed
        Certificate Truspoint CA Name :
        Certificate with Subject Name : 823

        Ciphers-Tls               : TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
                                    TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256
                                    TLS_DHE_RSA_WITH_AES_256_CBC_SHA256 TLS_DHE_RSA_WITH_AES_256_CBC_SHA
                                    TLS_DHE_RSA_WITH_AES_128_CBC_SHA256 TLS_DHE_RSA_WITH_AES_128_CBC_SHA
                                    TLS_RSA_WITH_AES_256_CBC_SHA256 TLS_RSA_WITH_AES_256_CBC_SHA
                                    TLS_RSA_WITH_AES_128_CBC_SHA256 TLS_RSA_WITH_AES_128_CBC_SHA

Variable Definitions

Use the data in the following table to use the web-server command.


Variable	Value
def-display-rows `<10-100>`	Configures the number of rows each page displays, between 10 and 100.
enable	Enables the web interface. To disable the web server, use the no form of this command: `no web-server [enable]`
help-tftp `<WORD/0-256>`	Configures the TFTP or FTP directory for Help files, in one of the following formats: a.b.c.d:/\| peer:/ [<dir>]. The path can use 0–256 characters. The following example paths illustrate the correct format: 192.0.2.1:/help 192.0.2.1:/
http-port `<80-49151>`	Configures the web server HTTP port. The default port is 80.
https-port `<443-49151>`	Configure the web server HTTPS port. The default port is 443.
inactivity-timeout`<30–65535>`	Configures the web-server session inactivity timeout. The default is 900 seconds (15 minutes).
password {ro \| rwa} `WORD<1-20>`	Configures the logon and password for the web interface.
password min-passwd-len`<1–32>`	Configures the minimum password length. By default, the minimum password length is 8 characters.
read-only-user	Enables read-only user for the web server. Note: read-only-user enable is available for demonstration purposes on some products. For more information, see Fabric Engine and VOSS Feature Support Matrix.
secure-only	Enables secure-only access for the web server.
tls-min-ver`<tlsv10\|tlsv11\|tlsv12>`	Configures the minimum version of the TLS protocol supported by the web-server. You can select among the following: tlsv10 – Configures the version to TLS 1.0. Note: tlsv10 is not supported in enhanced secure mode. tlsv11 – Configures the version to TLS 1.1. tlsv12 – Configures the version to TLS 1.2 The default is tlsv12.