CCENT Book Tood Lammle Chapter 9 Question

mgmguy1

I was reading my CCENT book and I am on chapter 9 and I have a question.
I am on page 491 and he is showing an Example config of how you should secure your router.
I saw this one line I have not noticed before in his config ( ip http secure server )

I googled it and discovered ip http secure server allows you to access the router via a secure page.
I have a two questions on this command. First, should this command be used on all routers or select routers like "Border routers" that sit at the edge of your network?

Question two: Why use a secure Web browser to log into the router when you should be doing everything from the command line.

Please advise

steve2012

Bin a while since I reviewed that book, but I believe the short answer would be SDM related. A secure HTTP page will protect from packet analyzer. Yes, CLI is what you would likely use but you are preping for CCENT and that covers SDM.

If I'm way off someone chime in as I'm doing this from memory.

theodoxa

They're probably saying to use ip http secure server instead of ip http server. The latter would use regular HTTP which sends authentication data in plain text. I believe SDM requires the web (http, secure http) server to be enabled.

JasonIT

Best i can remember, I think its just showing proof of concept. Secure vs. non-secure.

J