Juniper SRX 210, Руководство по оборудованию

Страница: 128 / 204

Table 33: Configuring a Secure Web Access
CLI Configuration Editor J-Web Configuration Editor Task
From the [edit] hierarchy level, enter
edit security
1. In the J-Web interface, select
Configuration>View and Edit>Edit
Configuration
.
2. Next to Security, click Configure or Edit .
Navigate to the Security
level in the configuration
hierarchy.
Enter
set certificates local new load-key-file path
Replace path with a path or URL to the file
containing an SSL certificate and private key
in PEM format—for example,
/var/tmp/new.pem
1. Next to
Certificates
, click Configure .
2.
Next to Local , click Add new entry .
3. In the Name box, type a name for the
certificate to be imported—for example,
new .
4. In the Certificate box, paste the generated
SSL certificate and private key.
5. Click OK .
Import the SSL certificate
that you have
generated—for example,
new
.
From the
[edit system]
hierarchy level, enter
set services web-management https
local-certificate new port 8443
1. On the main Configuration page next to
System, click
Configure or Edit .
2. Select the Services box and click Edit next
to it.
3. Next to
Web management
, click Edit .
4. Select the Https box and click Edit next
to it.
5. In the Local certificate box, type the name
of the certificate—for example,
new .
6. In the Port box, type
8443
.
7. Click OK .
Enable HTTPS access and
specify the SSL certificate
to be used for
authentication.
Specify the port on which
HTTPS access is to be
enabled—for example, TCP
port 8443.
NOTE: You can enable
HTTPS access on specified
interfaces also. If you
enable HTTPS without
specifying an interface,
HTTPS is enabled on all
interfaces.
Related Topics
Verifying Secure Web Access for the SRX 210 Services Gateway on page 108
■
■
Generating SSL Certificates for the SRX 210 Services Gateway on page 104
■
Configuring Secure Access to the J-Web Interface for the SRX 210 Services
Gateway on page 105
Verifying Secure Web Access for the SRX 210 Services Gateway
To verify that the SRX 210 services gateway has the secure access settings you
configured, perform the following tasks:
■
Display an SSL certificate configuration.
■
Display a secure access configuration.
Related Topics
Displaying an SSL Certificate Configuration for the SRX 210 Services
Gateway on page 109
■
108 ■
Verifying Secure Web Access for the SRX 210 Services Gateway
SRX 210 Services Gateway Hardware Guide