Adds or removes an interface to the listen interface list so it can accept HTTP/HTTPS requests for remote access to the Web UI. The listen interface list is used when listen interface constraints are enabled on the appliance.
Listen interface constraints are enabled by default. Use the command show web to verify whether they are enabled, and use the command web server listen enable to enable them.
The management interface is used for remote access to the Web UI and CLI, and for other management traffic (such as NTP, SNMP, and syslog). The default management interface is ether1. You can define a different interface (such as ether2) for remote access to the Web UI and CLI.
When listen interface constraints are enabled on the appliance, only interfaces that meet the following criteria can accept HTTP/HTTPS requests (for Web UI access) and SSH connections (for CLI access).
The interface must be in the listen interface list. By default, only ether1 is in this list.
The interface exists and is running.
DHCP and zeroconf are disabled on the interface for lPv4.
IPv6 is enabled on both the interface and the system.
The interface has an IPv4 or IPv6 address:
IPv4: At least one static nonzero IPv4 address is available to be assigned to the interface.
IPv6: A static IPv6 address is available to assign to the interface, or the address can be obtained dynamically through Stateless Address Autoconfiguration (SLAAC) or DHCP6.
The system prevents remote users from being locked out of the system when the criteria are not met by at least one interface. If no interface meets the criteria, listen interface constraints are not enforced, and all viable interfaces are open and can accept HTTPS/HTTPS requests and SSH connections.
Note
For more information, see your System Administration Guide or Administration Guide.
Syntax
[no] web server listen interface <interface>
Parameters
no
Removes the interface from the listen interface list.
interface
The interface to add to or remove from the listen interface list.
Examples
The following example adds ether2 to the listen interface list.
hostname (config) # web server listen interface ether2
The following example removes ether1 from the listen interface list.
hostname (config) # no web server listen interface ether1
User role
Admin or Operator
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Malware Analysis: Release 7.7.5
Central Management System: Release 7.9.1
Email Security — Server: Release 7.8
File Protect: Release 7.7.5
Network Security: Release 7.9.1
Intelligent Virtual Execution - Server: Release 7.9.1