[Contents] [Prev] [Next] [Index] [Report an Error]

Accessing the C-Web Interface

Before you can start using the C-Web interface, you need to configure and enable access to the C-Web interface with the SRC CLI. You can make the C-Web interface accessible to remote users through secure HTTP (HTTPS) or HTTP.

Configuring Access to the C-Web Interface Through Secure HTTPS

Before you configure access to the C-Web interface through HTTPS, obtain a digital security certificate on the system.

See Overview of Digital Certificates.

To make the C-Web interface accessible to remote users through HTTPS:

From configuration mode, access the hierarchy level for Web-management HTTPS.
Specify which TCP port is to receive incoming connection requests for the C-Web interface.
The default port for HTTPS is 443.
Specify the interface to be used for Web browser connections to the C-Web interface.
On a C-series Controller, use eth0; you can use eth2 or eth3 if installed.

On C-series Controllers, specifying an interface is important if your C-series Controller has eth2 and eth3 interfaces and you want to restrict C-Web interface access to one or both of these interfaces.
Specify the name of the certificate on the local system.
Configure logging for the C-Web interface.
See Overview of Logging for SRC Components.
(Optional) Configure user accounts to allow specified users to log in to the C-Web interface.
Users who have privileges to log in to the SRC CLI also have privileges to log in to the C-Web interface.

Note: Like access to the SRC CLI, we recommend that you not use root access. If you do use root access, it must be through a secure terminal on a C-series Controller.

See Overview of SRC User Accounts.

Configuring Access to the C-Web Interface Through HTTP

Although you can configure access to the C-Web interface through HTTP rather than HTTPS, be aware of the following restrictions:

An HTTP connection is not secure. At login, the password is sent in clear text across the network and could be intercepted.
If you use the redirect server, you must change the port that the C-Web interface uses from the default port, 80. If the redirect server is enabled, and the C-Web interface is configured to use HTTP on port 80, the redirect server will intercept traffic destined for the C-Web interface.

To make the C-Web interface accessible to remote users through HTTP:

From configuration mode, access the hierarchy level for Web-management HTTP.
(Required if you use redirect server) Specify which TCP port is to receive incoming connection requests for the C-Web interface.
The default port for HTTP is 80. Use another port if you use the redirect server.
(Optional) Specify the interface to be used for Web browser connections to the C-Web interface.
On the C-series Controller, use eth0; you can use eth2 or eth3 if installed.

On C-series Controllers, specifying an interface is important if your C-series Controller has eth2 and eth3 interfaces and you want to restrict C-Web interface access to one or both of these interfaces.
Configure logging for the C-Web interface.
See Configuring a Component to Store Log Messages in a File with SRC CLI or Configuring System Logging with SRC CLI.
(Optional) Configure user accounts to allow specified users to log in to the C-Web interface.
Users who have privileges to log in to the SRC CLI also have privileges to log in to the C-Web interface.

Note: Like access to the SRC CLI, we recommend that you not use root access. If you do use root access, it must be through a secure terminal on a C-series Controller.

[Contents] [Prev] [Next] [Index] [Report an Error]