show ip http server status
Displays the operational status and configuration of the HTTP server (web server) on the Cisco IOS device, used to verify if the web-based GUI or REST API is enabled and accessible.
show ip http server statusWhen to Use This Command
- Troubleshooting why the web interface (e.g., Cisco Configuration Professional) cannot connect to the router.
- Checking if the HTTP server is enabled before configuring REST API access for automation.
- Verifying HTTP server settings after a security audit to ensure it is disabled on production devices.
- Confirming the port number and authentication method when setting up remote management via HTTPS.
Command Examples
Basic status check
show ip http server statusHTTP server status: Enabled HTTP server port: 80 HTTP server authentication method: local HTTP server access class: 10 HTTP server active session count: 2 HTTP server maximum session count: 5 HTTP server session idle timeout: 300 seconds HTTP server session life timeout: 600 seconds HTTP server secure server capability: Present HTTP server secure server status: Enabled HTTP server secure port: 443 HTTP server secure client authentication: Disabled HTTP server secure trustpoint: TP-self-signed-12345678
Line 1: Shows whether the HTTP server is enabled or disabled. Line 2: Port number for HTTP (default 80). Line 3: Authentication method (local, enable, tacacs, etc.). Line 4: Access-class ACL number if applied. Line 5: Number of currently active sessions. Line 6: Maximum allowed sessions. Line 7: Idle timeout in seconds. Line 8: Maximum session lifetime. Line 9: Indicates if HTTPS capability is present. Line 10: Whether HTTPS is enabled. Line 11: HTTPS port (default 443). Line 12: Whether client certificate authentication is required. Line 13: Trustpoint used for HTTPS certificate.
HTTP server disabled
show ip http server statusHTTP server status: Disabled HTTP server secure server capability: Present HTTP server secure server status: Disabled
This output indicates the HTTP server is disabled. The secure server capability is present but also disabled. No further details are shown because the server is not running.
Understanding the Output
The output provides a summary of the HTTP server configuration and current state. Key fields: 'HTTP server status' indicates if the server is running (Enabled/Disabled). 'HTTP server port' shows the listening port (default 80). 'HTTP server authentication method' shows how users are authenticated (local, enable, tacacs, etc.). 'HTTP server access class' shows any ACL restricting access. 'HTTP server active session count' shows current connections; high numbers may indicate heavy usage or a DoS attack. 'HTTP server maximum session count' is the limit; if reached, new connections are rejected. 'HTTP server session idle timeout' and 'session life timeout' control session persistence. For HTTPS, 'HTTP server secure server status' shows if HTTPS is enabled, and 'HTTP server secure port' shows the port (default 443). 'HTTP server secure trustpoint' shows the certificate used. In a production network, HTTP should typically be disabled and only HTTPS enabled for security. If the server is unexpectedly enabled, it could be a security risk. If disabled and you need web access, you must enable it with 'ip http server' and optionally 'ip http secure-server'.
CCNA Exam Tips
CCNA exam may ask which command verifies if the HTTP server is running; answer is 'show ip http server status'.
Know that 'ip http server' enables HTTP on port 80, and 'ip http secure-server' enables HTTPS on port 443.
Be aware that the default authentication method is 'local' unless changed with 'ip http authentication'.
The exam might test that HTTP is disabled by default on newer IOS versions for security.
Common Mistakes
Confusing 'show ip http server status' with 'show ip http server' (the latter does not exist; correct command includes 'status').
Assuming HTTP server is enabled by default; it is disabled on most modern IOS images.
Forgetting that HTTPS requires a trustpoint; if not configured, 'ip http secure-server' will fail.
Misinterpreting 'HTTP server status: Enabled' as meaning HTTPS is also enabled; they are separate.
Related Commands
Practice for the CCNA 200-301
Test your knowledge with hundreds of CCNA practice questions covering all exam domains.
Practice CCNA Questions