Configuring a Hostname for Accessing Web Interface
You can configure a hostname (FQDN) for the device's Web interface. This means that you can access the Web interface using the device's hostname (e.g., http://mysbc.com) instead of its IP address. You can also enforce (default) access only through the device's hostname, blocking any access attempts using its IP address.
If you configure a hostname, you also need to define it on a DNS server. When you try to access the Web interface with the hostname, a query is first sent to the DNS server to resolve the hostname into the device's IP address.
If you access the device's Web interface using its hostname, the toolbar displays the hostname (first 16 characters only) instead of the device type.
It's highly recommended to configure a hostname for accessing the device's Web interface because it helps protect the device against HTTP Host header attacks and DNS rebinding attacks.
|
➢
|
To configure hostname for device's Web interface: |
|
1.
|
Open the Web Settings page (Setup menu > Administration tab > Web & CLI folder > Web Settings). |
|
2.
|
In the 'Web Server Name' field [WebHostname], type a hostname. |
|
3.
|
To enforce access to the device's Web interface only through the hostname (instead of the IP address), from the 'Enforce Web Host Name' drop-down list, select Enable (default): |
|
●
|
If you configure the 'Enforce Web Host Name' parameter to Disable, or you leave the ‘Web Server Name’ parameter empty (regardless of the 'Enforce Web Host Name' parameter's setting), the Web interface can be accessed through its hostname or IP address. |
|
●
|
If you're using single sign-on (SSO) with OVOC, you must configure the 'Enforce Web Host Name' parameter to Disable; otherwise, SSO will fail. |
|
●
|
If you're upgrading the device from version 7.4.500-2 (7.40A.500.775) or later to version 7.4.500-5 or later and have configured the ‘Web Server Name’ parameter and use the device’s IP address to access the Web interface, access to the device through the IP address will be denied. If you want to retain such capability, configure the ‘Enforce Web Host Name’ parameter to Disable. |
|
●
|
When the device operates in High-Availability mode, the active and redundant units share the same hostname. |