If you have access to Oracle MetaLink, then document 185707.1 “How to configure and start iSQL*plus” is very good.
1. Enable iSQLplus
2. Get a suitable http server running. Oracle 9i (and later) comes with one built in.
3. Configure iSQL*plus security.
The MetaLink note describes the details of this process very well.