Use the HTTP/HTTPS Service page to enable and configure web-based management connections. If HTTPS is used for secure management sessions, you also use the HTTP/HTTPS Service page to manage the required SSL certificates.
Configuring HTTP and HTTPS Services
To configure HTTP and HTTP services:
1. Select Administration > HTTP/HTTPS Service in the navigation pane.
2. Configure these Global Settings:
• Maximum Sessions—The number of web sessions, including both HTTP and HTTPS, that can be in use at the same time.
When a user logs on to the WAP device configuration utility, a session is created. This session is maintained until the user logs off or the Session Timeout expires. The range is from 1 to 10 sessions. The default is 5. If the maximum number of sessions is reached, the next user who attempts to log on to the configuration utility receives an error message about the session limit.
• Session Timeout—The maximum amount of time, in minutes, an inactive user remains logged on to the WAP device configuration utility. When the configured timeout is reached, the user is automatically logged off. The range is from 1 to 60 minutes. The default is 10 minutes.
3. Configure HTTP and HTTPS services:
• HTTP Server—Enables access through HTTP. By default, HTTP access is enabled. If you disable it, any current connections using that protocol are disconnected.
• HTTP Port—The logical port number to use for HTTP connections, from 1025 to 65535. The default port number for HTTP connections is the well-known IANA port number 80.
• HTTPS Server—Enables access through secure HTTP. By default, HTTPS access is enabled. If you disable it, any current connections using that protocol are disconnected.
• HTTPS Port—The logical port number to use for HTTP connections, from 1025 to 65535. The default port number for HTTP connections is the well-known IANA port number 443.
• Redirect HTTP to HTTPS—Redirects management HTTP access attempts on the HTTP port to the HTTPS port. This field is available only when HTTP access is disabled.
4. Click Save. The changes are saved to the Startup Configuration.
To use HTTPS services, the WAP device must have a valid SSL certificate. The WAP device can generate a certificate or you can download it from your network or from a TFTP server.
To generate the certificate with the WAP device, click Generate SSL Certificate. This should be done after the AP has acquired an IP address to ensure that the common name for the certificate matches the IP address of the AP. Generating a new SSL certificate restarts the secure web server. The secure connection does not work until the new certificate is accepted on the browser.
In the Certificate File Status area, you can view whether a certificate currently exists on the WAP device, and view this information about it:
• Certificate Issuer Common Name
If an SSL certificate (with a .pem extension) exists on the WAP device, you can download it to your computer as a backup. In the Download SSL Certificate (From Device to PC) area, select HTTP or TFTP for the Download Method and click Download.
• If you select HTTP, you are prompted to confirm the download and then to browse to the location to save the file on your network.
• If you select TFTP, additional fields appear to enable you to enter the File Name to assign to the downloaded file, and enter the TFTP server address where the file will be downloaded.
You can also upload a certificate file (with a .pem extension) from your computer to the WAP device. In the Upload SSL Certificate (From PC to Device) area, select HTTP or TFTP for the Upload Method.
• For HTTP, browse to the network location, select the file, and click Upload.
• For TFTP, enter the File Name as it exists on the TFTP server and the TFTP Server IPv4 Address, then click Upload. The filename cannot contain the following characters: spaces, <, >, |, \, : , (, ), &, ; , #, ? , *, and two or more successive periods.