Verifying Secure Web Access; Displaying An Ssl Certificate Configuration - Juniper J2300 Getting Started Manual

J2300, J4300, and J6300 Services Router Getting Started Guide
Table 52: Configuring a Secure Web Access (continued)
Task
Import the SSL
certificate that you have
generated—for example,
new.
For information about
generating SSL certificates,
see "Generating SSL
Certificates" on page 137.
Enable HTTPS access
and specify the SSL
certificate to be used for
authentication.
Specify the port on which
HTTPS access is to be
enabled—for example,
TCP port 8443.
You can enable
NOTE:
HTTPS access on specified
interfaces also. If you
enable HTTPS without
specifying an interface,
HTTPS is enabled on all
interfaces.

Verifying Secure Web Access

To verify that the Services Router has the secure access settings you configured,
perform the following tasks:

Displaying an SSL Certificate Configuration

Display the SSL certificate configuration.
Purpose
From the J-Web interface, select
Action
Configuration>View and Edit>View Configuration Text.
Alternatively, from configuration mode in the CLI, enter the
The following sample output displays an SSL certificate generated with instructions
in "Generating SSL Certificates" on page 137.
142
Verifying Secure Web Access
J-Web Configuration Editor
1. Next to Certificates, click Configure.
2.
Next to Local, click Add new entry.
3.
In the Name box, type a name for the
certificate to be imported—for example,
new.
4. In the Certificate box, paste the generated
SSL certificate and private key.
5. Click OK.
1. On the main Configuration page next to
System, click Configure or Edit.
2. Select the Services check box and click
Edit next to it.
3. Next to Web management, click Edit.
4. Select the Https check box and click Edit
next to it.
5. In the Local certificate box, type the name
of the certificate—for example, new.
6. In the Port box, type 8443.
7.
Click OK.
Displaying an SSL Certificate Configuration on page 142
Displaying a Secure Access Configuration on page 143
CLI Configuration Editor
Enter
set certificates local new load-key-file path
Replace path with a path or URL to the
file containing an SSL certificate and
private key in PEM format—for example,
/var/tmp/new.pem
From the [edit system] hierarchy level, enter
set services web-management https
local-certificate new port 8443
show security
command.