cEdge config: disable http(s) service by default

CiscoDevNet · Jan 22, 2024 · 6646af5 · 6646af5
1 parent bdb483e
commit 6646af5
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 1 deletion.
diff --git a/ansible/day_0/templates/sdwan/cedge_user-data.j2 b/ansible/day_0/templates/sdwan/cedge_user-data.j2
@@ -71,6 +71,8 @@ sdwan
    no allow-service snmp
    no allow-service bfd
 !
+no ip http server
+no ip http secure-server
 {% if vpn0_default_gateway is defined %}
 ip route 0.0.0.0 0.0.0.0 {{ vpn0_default_gateway }}
 !

diff --git a/ansible/day_0/templates/sdwan/iosxe.j2 b/ansible/day_0/templates/sdwan/iosxe.j2
@@ -66,4 +66,7 @@ interface GigabitEthernet1
   mtu 1500
   negotiation auto
 exit
+!
+no ip http server
+no ip http secure-server
 --===============6560338015520979320==
diff --git a/sdwan-edge b/sdwan-edge