http/https on router

Unanswered Question
Apr 5th, 2007

hello,


i want to disable http and https access to my router on some interfaces and just enable the same services on the internal ethernet interface.


but i found thT HTTPAND HTTPS access to the router are enabled/disabled globaly.


how can i solve this problem.


thanks

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 3 (1 ratings)
Loading.
Craig Balfour Thu, 04/05/2007 - 04:54

It is not possible (as far as I know) to restict access to the web interface on a Cisco router or Catalyst switch on the basis of interface.


The best you can do is to limit access to particular source networks or hosts using a standard access-list.


Here is an example:


ip access-list standard 10

remark Restrict access to HTTP/s service

permit 10.0.0.0 0.255.255.255

permit host 192.168.100.10

deny any


ip http access-list 10

ip http server


This will only permit hosts on network 10.0.0.0/8 and host 192.168.100.10 to connect to the HTTP server on this router.

Actions

This Discussion