Configuring NETCONF over SOAP

NETCONF over SOAP encapsulates NETCONF messages into SOAP messages and transmits the SOAP messages over HTTP or HTTPS. You can use a custom user interface to establish a NETCONF over SOAP session to the device and perform NETCONF operations.

To configure NETCONF over SOAP:

Step

Command

Remark

1. Enter system view.

system-view

N/A

2. Enable NETCONF over SOAP.

  • Enable NETCONF over SOAP over HTTP (not available in FIPS mode):netconf soap http enable

  • Enable NETCONF over SOAP over HTTPS:
    netconf soap http
    s enable

By default, the NETCONF over SOAP feature is disabled.

3. Set the DSCP value for NETCONF over SOAP packets.

  • Set the DSCP value for NETCONF over SOAP over HTTP packets:netconf soap http dscp dscp-value

  • Set the DSCP value for NETCONF over SOAP over HTTPs packets:netconf soap https dscp dscp-value

By default, the DSCP value is 0 for NETCONF over SOAP packets.

4. Apply an ACL to control NETCONF over SOAP access.

  • Apply an ACL to control NETCONF over SOAP over HTTP access (not available in FIPS mode):netconf soap http acl { acl-number | name acl-name }

  • Apply an ACL to control NETCONF over SOAP over HTTPS access:netconf soap https acl { acl-number | name acl-name }

By default, no ACL is applied to control NETCONF over SOAP access.

5. Specify a mandatory authentication domain for NETCONF users.

netconf soap domain domain-name

By default, no mandatory authentication domain is specified for NETCONF users. For information about authentication domains, see Security Configuration Guide.