Juniper SRX220, Руководство по оборудованию

Страница: 100 / 182

If the services gateway has not already been powered on, power it on now.
5.
Wait until the Status LED on the front panel of the services gateway lights green.
6.
Turn on the power to the management device. The services gateway assigns an IP
address to the management device within the
192.168.1.0/24
network if the
management device is configured to use DHCP.
7.
To access the setup wizard, open a Web browser on the management device and
enter the IP address
192.168.1.1
in the address field.
Related
Documentation
Connecting an SRX220 Services Gateway to the CLI Locally on page 83
•
•
SRX220 Services Gateway Software Configuration Overview on page 77
•
SRX220 Services Gateway Secure Web Access Overview on page 82
SRX220 Services Gateway Secure Web Access Overview
You can manage a services gateway remotely through the J-Web interface. To
communicate with the services gateway, the J-Web interface uses Hypertext Transfer
Protocol (HTTP). HTTP allows easy Web access but no encryption. The data that is
transmitted between the Web browser and the services gateway by means of HTTP is
vulnerable to interception and attack. To enable secure Web access, the services gateway
supports HTTP over Secure Sockets Layer (HTTPS). You can enable HTTP or HTTPS
access on specific interfaces and ports as needed.
The services gateway uses the SSL protocol to provide secure management of services
gateways through the J-Web. SSL uses public-private key technology that requires a
paired private key and an authentication certificate for providing the SSL service. SSL
encrypts communication between your device and the Web browser with a session key
negotiated by the SSL server certificate.
An SSL certificate includes identifying information such as a public key and a signature
made by a certificate authority (CA). When you access the services gateway through
HTTPS, an SSL handshake authenticates the server and the client and begins a secure
session. If the information does not match or if the certificate has expired, your access
to the services gateway through HTTPS is restricted.
Without SSL encryption, communication between your services gateway and the browser
is sent in the open and can be intercepted. We recommend that you enable HTTPS access
on your WAN interfaces.
For more information about configuring secure Web access, see the following topics:
• Initial Configuration for Security Devices
• Monitoring and Troubleshooting for Security Devices
Related
Documentation
SRX220 Services Gateway Software Configuration Overview on page 77
•
Copyright © 2016, Juniper Networks, Inc. 82
SRX220 Services Gateway Hardware Guide for H Model Numbers