H3C U200-CS防火墙web配置问题 无法登陆web

参考：

Configuration Procedure

1)        Apply for a certificate for Switch

# Configure a Public Key Infrastructure (PKI) entity.

<Sysname> system-view

[Sysname] pki entity en

[Sysname-pki-entity-en] common-name http-server1

[Sysname-pki-entity-en] fqdn ssl.security.com

[Sysname-pki-entity-en] quit

# Configure a PKI domain.

[Sysname] pki domain 1

[Sysname-pki-domain-1] ca identifier ca1

[Sysname-pki-domain-1] certificate request url http://10.1.2.2/certsrv/mscep/mscep.dll

[Sysname-pki-domain-1] certificate request from ra

[Sysname-pki-domain-1] certificate request entity en

[Sysname-pki-domain-1] quit

# Generate a key pair locally by using the RSA algorithm.

[Sysname] public-key local create rsa

The range of public key size is (512 ~ 2048).

NOTES: If the key modulus is greater than 512,

It will take a few minutes.

Press CTRL+C to abort.

Input the bits of the modulus[default = 1024]:

Generating Keys...

.......++++++

.............++++++

............++++++++

....++++++++

.....                

# Obtain a server certificate from CA.

[Sysname] pki retrieval-certificate ca domain 1

# Apply for a local certificate.

[Sysname] pki request-certificate domain 1

2)        Configure an SSL server policy associated with the HTTPS service

# Configure an SSL server policy myssl.

[Sysname] ssl server-policy myssl

# Configure the PKI domain used on the SSL server policy as 1.

[Sysname-ssl-server-policy-myssl] pki-domain 1

# Enable client authentication on the server.

[Sysname-ssl-server-policy-myssl] client-verify enable

[Sysname-ssl-server-policy-myssl] quit

3)        # Associate the HTTPS service with the SSL server policy and enable the HTTPS service.

# Configure the SSL policy used in HTTPS service as myssl.

[Sysname] ip https ssl-server-policy myssl

# Enable the HTTPS service.

[Sysname] ip https enable

4)        Verify the configuration

Launch the IE explorer on Host, and enter https://10.1.1.1. You can log in to Switch and control it.