Configuring Secure Access To The J-Web Interface For The Srx 210 Services Gateway - Juniper SRX 210 Services Hardware Manual

SRX 210 Services Gateway Hardware Guide
Without SSL encryption, communication between your services gateway and the
browser is sent in the open and can be intercepted. We recommend that you enable
HTTPS access on your WAN interfaces.
On services gateway, the HTTP access is enabled by default on the built-in
management interfaces. By default, HTTPS access is supported on any interface with
an SSL server certificate.
You can use J-Web Quick Configuration, the J-Web configuration editor, or the CLI
configuration editor to configure secure Web access.
Before you configure secure Web access for the first time, you must complete the
following tasks:
Related Topics
Generating SSL Certificates for the SRX 210 Services Gateway
To enable secure Web access, you must first generate a digital SSL certificate and
then enable HTTPS access on the SRX 210 services gateway.
To generate an SSL certificate:
1.
2.
3.
You can use either J-Web Quick Configuration or a configuration editor to install the
SSL certificate and enable HTTPS.
104
Generating SSL Certificates for the SRX 210 Services Gateway
Establish basic connectivity
Obtain an SSL certificate from a trusted signing authority
SRX 210 Services Gateway Basic Connectivity Overview on page 78
Generating SSL Certificates for the SRX 210 Services Gateway on page 104
Configuring Secure Access to the J-Web Interface for the SRX 210 Services
Gateway on page 105
Enter the following openssl
generates a self-signed SSL certificate in the privacy-enhanced mail (PEM) format.
It writes the certificate and an unencrypted 1024-bit RSA private key to the
specified file.
% openssl req –x509 –nodes –newkey rsa:1024 –keyout filename.pem -out
filename.pem
Replace with the name of a file in which you want the SSL certificate
filename
to be written—for example,
When prompted, type the appropriate information in the identification form.
For example, type for the country name.
US
Display the contents of the file
cat new.pem
Copy the contents of this file for installing the SSL certificate.
command in your SSH CLI. The
new.pem .
new.pem .
openssl command