55Syntaxweb https-authorization mode { auto | manual }undo web https-authorization modeDefaultA user must enter correct username and password to log in through HTTPS.ViewsSystem viewDefault command level2: System levelParametersauto: Uses the PKI certificates of HTTPS users to automatically authenticate them.manual: Provides a login page for HTTPS users to enter the correct username and password.Usage guidelinesWhen the auto mode is enabled:• If the PKI certificate of the user is correct and not expired, the CN field in the certificate is used asthe username to perform AAA authentication. If the authentication succeeds, the user automaticallyenters the Web interface of the device.• If the PKI certificate of the user is correct and not expired, but the AAA authentication fails, thedevice shows the Web login page. The user can log in to the device after entering correct usernameand password.• When the PKI certificate of the user is incorrect or expired, the HTTPS connection is terminated.Examples# Specify the auto authentication mode for users trying to log in to the device through HTTPS. system-view[Sysname] web https-authorization mode autoweb idle-timeoutUse web idle-timeout to set the Web user connection timeout time.Use undo web idle-timeout to restore the default.Syntaxweb idle-timeout minutesundo web idle-timeoutDefaultThe Web user connection timeout time is 10 minutes.ViewsSystem viewDefault command level2: System level
