1-3Associating the HTTPS Service with a Certificate Attribute AccessControl PolicyAssociating the HTTPS service with a configured certificate access control policy helps control theaccess right of the client, thus providing the device with enhanced security.Follow these steps to associate the HTTPS service with a certificate attribute access control policy:To do… Use the command… RemarksEnter system view system-view —Associate the HTTPS service witha certificate attribute accesscontrol policyip https certificateaccess-control-policypolicy-nameRequiredNot associated by default.z If the ip https certificate access-control-policy command is executed repeatedly, the HTTPSserver is only associated with the last specified certificate attribute access control policy.z If the HTTPS service is associated with a certificate attribute access control policy, theclient-verify enable command must be configured in the SSL server policy. Otherwise, the clientcannot log onto the device.z If the HTTPS service is associated with a certificate attribute access control policy, the latter mustcontain at least one permit rule. Otherwise, no HTTPS client can log onto the device.Associating the HTTPS Service with an ACLAssociating the HTTPS service with an ACL can filter out requests from some clients to let pass onlyclients that pass the ACL filtering.Follow these steps to associate the HTTPS service with an ACL:To do… Use the command… RemarksEnter system view system-view —Associate the HTTPS service withan ACL ip https acl acl-number RequiredNot associated by default.Displaying and Maintaining HTTPSTo do… Use the command… RemarksDisplay information aboutHTTPS display ip https Available in any view
