Настраиваю https на cisco2960, без центра CA. По https подключается, но не выдается запрос на сертификат. В результате интернет браузер сигнализирует о том, что не может отобразить эту веб-страницу. telnet x.x.x.x 443 проходит успешно. Как мне правильно заставить https работать? Sw3-4(2690-24-2Gb)#sh start ..... crypto pki trustpoint TP-self-signed-1575809152 enrollment selfsigned subject-name cn=IOS-Self-Signed-Certificate-1575809152 revocation-check none rsakeypair TP-self-signed-1575809152 ..... crypto pki certificate chain TP-self-signed-1575809152 certificate self-signed 01 nvram:IOS-Self-Sig#3233.cer ..... ip http server ip http secure-server ip http secure-client-auth ip http secure-trustpoint TP-self-signed-1575809152 ip http client secure-trustpoint TP-self-signed-1575809152 ..... Sw3-4(2690-24-2Gb)#show ip http server status HTTP server status: Enabled HTTP server port: 80 HTTP server authentication method: enable HTTP server access class: 0 HTTP server base path: flash:/c2960-lanbasek9-mz.122-50.SE/html HTTP server help root: Maximum number of concurrent server connections allowed: 16 Server idle time-out: 180 seconds Server life time-out: 180 seconds Maximum number of requests allowed on a connection: 25 HTTP server active session modules: ALL HTTP secure server capability: Present HTTP secure server status: Enabled HTTP secure server port: 443 HTTP secure server ciphersuite: 3des-ede-cbc-sha des-cbc-sha rc4-128-md5 rc4-128-sha HTTP secure server client authentication: Enabled HTTP secure server trustpoint: TP-self-signed-1575809152 HTTP secure server active session modules: ALL Sw3-4(2690-24-2Gb)#show ip http client secure status HTTP secure client ciphersuite: 3des-ede-cbc-sha des-cbc-sha rc4-128-md5 rc4-128-sha HTTP secure client trustpoint: TP-self-signed-1575809152 Sw3-4(2690-24-2Gb)#show ip http server secure status HTTP secure server status: Enabled HTTP secure server port: 443 HTTP secure server ciphersuite: 3des-ede-cbc-sha des-cbc-sha rc4-128-md5 rc4-128-sha HTTP secure server client authentication: Enabled HTTP secure server trustpoint: TP-self-signed-1575809152 HTTP secure server active session modules: ALLСпасибо, за совет.
|