Description:
If you operate a number of LANCOM switches of the type GS-23XX(P) in your network infrastructure, you may wish to use secure access to the configuration interface via HTTPS. However, this is not possible with the firmware versions up to version 2.52 in combination with the following Web browsers, because all LANCOM GS-23XX(P) switches use the same HTTPS certificate serial number.
    • Microsoft Internet Explorer
    • Mozilla Firefox
    • Apple Safari
As of the switch firmware version 2.83 it is possible to renew the HTTPS certificate stored in each switch, so a number of switches can each use their own HTTPS certificate serial numbers.

Requirements:
  • LANCOM managed switch of type GS-23XX(P)
  • Switch firmware version 2.83 or later (download)
Instructions on how to update the firmware of LANCOM switches is available in this Knowledge Base document.



Procedure:

1) Open the command line of the LANCOM switch in an SSH session and login with administrator rights.

2) At the command prompt, type the command https to enter the HTTPS configuration menu.

3) With the command mode disable, you initially have to disable HTTPS.

You can find out the current HTTPS mode with the command show.

4) Run the command cert-renew to renew the HTTPS certificate.
5) The newly created HTTPS certificate is now stored to the startup configuration with the command save start.
6) Type the command exit to return to the root directory of the configuration menu.
7) The next step is to restart the switch with the command reboot.
8) Following the restart, login to the switch again via SSH session.
9) At the command prompt, type the command https to enter the HTTPS configuration menu.
10) Use the command mode enable you to enable HTTPS.

You can find out the current HTTPS mode with the command show.

11) The enabled HTTPS mode is now stored to the startup configuration with the command save start.
12) The new HTTPS certificate with its own certificate serial number is now enabled on the switch.

The new certificate serial number is identical to the first twelve digits of the serial number of the LANCOM switch.

13) If necessary, repeat steps 1 through 12 for the other LANCOM GS-23XX(P) switches in your network.