Настраиваю https на cisco2960, без центра CA.
По https подключается, но не выдается запрос на сертификат. В результате интернет браузер сигнализирует о том, что не может отобразить эту веб-страницу. telnet x.x.x.x 443 проходит успешно. Как мне правильно заставить https работать?
Sw3-4(2690-24-2Gb)#sh start
.....
crypto pki trustpoint TP-self-signed-1575809152
enrollment selfsigned
subject-name cn=IOS-Self-Signed-Certificate-1575809152
revocation-check none
rsakeypair TP-self-signed-1575809152
.....
crypto pki certificate chain TP-self-signed-1575809152
certificate self-signed 01 nvram:IOS-Self-Sig#3233.cer
.....
ip http server
ip http secure-server
ip http secure-client-auth
ip http secure-trustpoint TP-self-signed-1575809152
ip http client secure-trustpoint TP-self-signed-1575809152
.....
Sw3-4(2690-24-2Gb)#show ip http server status
HTTP server status: Enabled
HTTP server port: 80
HTTP server authentication method: enable
HTTP server access class: 0
HTTP server base path: flash:/c2960-lanbasek9-mz.122-50.SE/html
HTTP server help root:
Maximum number of concurrent server connections allowed: 16
Server idle time-out: 180 seconds
Server life time-out: 180 seconds
Maximum number of requests allowed on a connection: 25
HTTP server active session modules: ALL
HTTP secure server capability: Present
HTTP secure server status: Enabled
HTTP secure server port: 443
HTTP secure server ciphersuite: 3des-ede-cbc-sha des-cbc-sha rc4-128-md5 rc4-128-sha
HTTP secure server client authentication: Enabled
HTTP secure server trustpoint: TP-self-signed-1575809152
HTTP secure server active session modules: ALL
Sw3-4(2690-24-2Gb)#show ip http client secure status
HTTP secure client ciphersuite: 3des-ede-cbc-sha des-cbc-sha rc4-128-md5 rc4-128-sha
HTTP secure client trustpoint: TP-self-signed-1575809152
Sw3-4(2690-24-2Gb)#show ip http server secure status
HTTP secure server status: Enabled
HTTP secure server port: 443
HTTP secure server ciphersuite: 3des-ede-cbc-sha des-cbc-sha rc4-128-md5 rc4-128-sha
HTTP secure server client authentication: Enabled
HTTP secure server trustpoint: TP-self-signed-1575809152
HTTP secure server active session modules: ALLСпасибо, за совет.
:)