Table of Contents
Advertisement
Services
Repeat this step to list additional firewall zones.
4. (Optional) If you have your own signed SSL certificate, if you have your own signed SSL
certificate, set the certificate and private key by pasting their contents into the service web_
admin cert command. Enclose the certificate and private key contents in quotes (").
(config)> service web_admin cert "ssl-cert-and-private-key"
(config)>
If SSL certificate is blank, the device will use an automatically-generated, self-signed
n
certificate.
The SSL certificate and private key must be in PEM format.
n
The private key can use one of the following algorithms:
n
l
l
l
l
Example
a. Generate the SSL certificate and private key, for example:
# openssl req -newkey rsa:2048 -nodes -keyout key.pem -x509 -days 365
-out certificate.pem
b. Paste the contents of certificate.pem and key.pem into the service web_admin cert
command. Enclose the contents of certificate.pem and key.pem in quotes. For example:
IX20 User Guide
Type ... firewall zone ? at the config prompt:
(config)> ... firewall zone ?
Zones: A list of groups of network interfaces that can be
referred to by packet
filtering rules and access control lists.
Additional Configuration
--------------------------------------------------------
-----------------------
any
dynamic_routes
edge
external
internal
ipsec
loopback
setup
(config)>
RSA
DSA
ECDSA
ECDH
Note
Password-protected certificate keys are not supported.
Configure the web administration service
413
Advertisement
Table of Contents
