Content

| 9.5 |  | Securing Remote Management |
| 9.5.6 |  | Securing the web management interface |

Cisco switches and routers have the capacity to host a web interface to simplify remote monitoring and management. Because this interface uses insecure protocols, it is not recommended that it be used for remote management. This interface can still be used to provide access where security is less important, such as usage monitoring, but should still be secured as much as possible. To enable the web interface, use the ip http server command from global configuration mode.

One of the settings for the web interface is the configuration of the TCP port number. The http server process running on the switch normally listens for connection requests on port TCP:80. To configure the http server process to listen on a different port, use the global configuration command ip http port HTTP-port, where HTTP-port is a number between 1 and 65535.

The ability to establish a connection to the web interface of the switch can also be managed using access control lists. The global configuration command ip http access-class ACL-number is used to bind a standard access-list to the http server process, where ACL-number must be between 1 and 99. This command will be covered in more detail later in this module.