You can enable access to an S Series Node through the HCP S Series management API on both the access network and the management network. At any given time, at least one of these networks must be enabled for management API access. By default, both networks are enabled for management API access.
By default, for both the access and management networks, only HTTPS is enabled for access to the S Series Node through the management API. For each of these networks individually, you can also enable HTTP for management API access. You cannot disable HTTPS for either network without disabling all management API access through that network.
Support for HTTP without SSL security is provided so that the S Series Node can accept management API requests passed on by load balancers when the load balancer has terminated the SSL connection. For security reasons, client requests for access to the S Series Node through the management API should always use HTTPS, not HTTP.
- When you enable or disable HTTP or HTTPS for the access or management network in the Management Console configuration, the same change occurs automatically to the corresponding setting in the management API configuration. When you disable HTTP or HTTPS for the access or management network in the management API configuration, the same change occurs automatically to the corresponding setting in the Management Console configuration. However, when you enable HTTP or HTTPS for the access or management network in the management API configuration, the corresponding setting in the Management Console configuration does not change.
- In releases earlier than 3.2.0, HTTP could be enabled in the Management Console configuration and, at the same time, disabled in the management API configuration. This combination is not supported in release 4.0.0. If this combination is present before an upgrade to release 4.0.0 or later, HTTP is automatically enabled in the management API configuration during the upgrade.
By default, users can use the management API to access an S Series Node from any IP address. You can choose to allow access only from specific IP addresses. Similarly, you can choose to deny access from specific IP addresses. You control how the S Series Node handles IP addresses that are both allowed and denied access or neither allowed nor denied access.
To work with the management API configuration in the Management Console, go to .