3.10.4 SSH and HTTPS Configuration

Use this command to configure SSH and HTTPS mode operation.

Command Syntax:

ip ssh 
ip http secure-server 
ip http secure-redirect
ip http secure-certificate { upload <url_file> [ pass-phrase <pass_phrase> ] | delete | generate } 
Table 3-45. Command Description

Argument

Description

Parameter

<url_file>

Upload a certificate through a URL. The supported protocols are HTTP, HTTPS, TFTP, and FTP. The URL format is <protocol>://[<username>[:<password>]@]<host>[:<port>][/<path>]/<file_name>. For example, tftp://10.10.10.10/new_image_path/new_image.dat, http://username:password@10.10.10.10:80/new_image_path/new_image.dat. A valid file name is a text string drawn from the alphabet (A-Z, a-z), digits (0-9), dot (.), hyphen (-), and underscore (_). The maximum length of the file name is 63 characters, and the hyphen must not be the first character. A file name consisting solely of periods (‘.’) is not allowed.

<pass_phrase>

Privacy key pass phrase string if uploading certificate protected by a specific passphrase.

Default

N.A

Mode

Global Configuration mode

Usage

Enable SSH and HTTPS. To disable it, use the ‘no’ version of the command. Manage the HTTPS certificate (PEM format).

Example

Example 1:

Upload the HTTPS certificate from TFTP server.

(config)# ip http secure-certificate upload tftp://10.9.52.103/test_ca.pem

Example 2:

Delete current certificate.

(config)# ip http secure-certificate delete