ip http secure-secure command?

[munwhye.leong]

Hi,

I came across this command from a Cisco website but could not find this command ip http secure-secure in the latest IOS version(12.2.(58)SE2)

extract taken from the link below

Note

To ensure secure authentication when you enter the ip http secure-secure command, the login page is always in HTTPS (secure HTTP) even if the user sends an HTTP request.

provide the link for reference

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_58_se/configuration/guide/swwebauth.html#wp1104299

Thanks

Regards,

Niklas

[Wilson Bonilla]

Hello Niklas.

Yes, that command exist in 12.2(58) and also in the latest version which is 15.0(2).

You can confirm that in the cisco feature navigator.

http://tools.cisco.com/ITDIT/CFN/jsp/SearchBySoftware.jsp.

If you purpose of this question is to use the web GUI, make sure you use a tar image.

Regards.

Wilson B.

[munwhye.leong]

Hi Wilson,

Thank  you for your assistance, i'm still unable to see the ip http  secure-secure command in the IOS version you had advice 12.2(58) and  15.0(2).

The  purpose of this question is to use the web authentication feature in  the switch using ip admission command. Before the user are allowed to  surf any website, they will be directed to a log in page on the cisco  switch. The command ip http secure-secure is to ensure that the login  page will always be in https even when the user send a http request.

Thanks

Regards

Niklas

- See more at: https://supportforums.cisco.com/message/3870113#3870113

Hi Wilson,

Thank  you for your assistance, i'm still unable to see the ip http  secure-secure command in the IOS version you had advice 12.2(58) and  15.0(2).

The  purpose of this question is to use the web authentication feature in  the switch using ip admission command. Before the user are allowed to  surf any website, they will be directed to a log in page on the cisco  switch. The command ip http secure-secure is to ensure that the login  page will always be in https even when the user send a http request.

Thanks

Regards

Niklas

- See more at: https://supportforums.cisco.com/message/3870113#3870113

Hi Wilson,

Thank  you for your assistance, i'm still unable to see the ip http  secure-secure command in the IOS version you had advice 12.2(58) and  15.0(2).

The  purpose of this question is to use the web authentication feature in  the switch using ip admission command. Before the user are allowed to  surf any website, they will be directed to a log in page on the cisco  switch. The command ip http secure-secure is to ensure that the login  page will always be in https even when the user send a http request.

Thanks

Regards

Niklas

- See more at: https://supportforums.cisco.com/message/3870113#3870113

Hi Wilson,

Thank you for your assistance, i'm still unable to see the ip http secure-secure command in the IOS version you had advice 12.2(58) and 15.0(2).

The purpose of this question is to use the web authentication feature in the switch using ip admission command. Before the user are allowed to surf any website, they will be directed to a log in page on the cisco switch. The command ip http secure-secure is to ensure that the login page will always be in https even when the user send a http request.

Thanks

Regards

Niklas

[Wilson Bonilla]

Hello Niklas.

I can see it in the configuration guide

http://www.cisco.com/en/US/docs/switches/lan/catalyst2960/software/release/12.2_58_se/configuration/guide/swwebauth.html#wp1104299

I can see it also in the switches I have on the lab... and I have configured it many times....

You need to make sure the IOS version running is a tar image and with krypto capabilities.

c2960-lanbasek9-tar.122-58.SE2.tar

Other than that it should work fine.

Here's an example of one of my switches in the lab:

Switch Ports Model              SW Version            SW Image                

------ ----- -----              ----------            ----------              

*    1 50    WS-C2960-48TC-L    15.0(2)SE             C2960-LANBASEK9-M

2960(config)#ip http ?

.....

secure-server                  Enable HTTP secure server

2960(config)#ip http secure-server

2960(config)#

*Mar  1 00:06:19.676: %PKI-4-NOAUTOSAVE: Configuration was modified.  Issue "write memory" to save new certificat

Regards.

Wilson B.

[jawad-mukhtar]

Have u enable aaa

[support sg]

Hi Jawad,

ip http secure-secure not available even after enable aaa.

Here are the screen captured from the switch:

================================

Switch Ports Model              SW Version            SW Image

------ ----- -----              ----------            ----------

*    1 50    WS-C2960-48TT-L    12.2(58)SE2           C2960-LANBASEK9-M

Switch(config)#do sh run | b aaa

aaa new-model

!

!

!

!

!

!

!

aaa session-id common

system mtu routing 1500

!

!

!

!

Switch(config)#ip http secure-?

secure-active-session-modules  secure-ciphersuite  secure-client-auth

secure-port                    secure-server       secure-trustpoint

================================

[cadet alain · Accepted solution]

Hi,

this is a typo in the Cisco document because this command doesn't exist, the correct one like already mentioned is ip http secure-server.

Regards

Alain

Don't forget to rate helpful posts.