Juniper Networks SSG 20 manual Administrative Access, Management Services

CLI

unset interface bgroup0 port ethernet0/3 unset interface bgroup0 port ethernet0/4 set interface bgroup1 port ethernet0/3 set interface bgroup1 port ethernet0/4 set interface bgroup1 port wireless0/2 set interface bgroup1 zone DMZ

set interface bgroup1 ip 10.0.0.1/24 save

Administrative Access

By default, anyone in your network can manage a device if they know the login and password.

To configure the device to be managed only from a specific host on your network, use the WebUI or CLI as follows:

WebUI

Configuration > Admin > Permitted IPs: Enter the following, then click Add:

IP Address/Netmask: ip_addr/mask

CLI

set admin manager-ip ip_addr/mask save

Management Services

ScreenOS provides services for configuring and managing the device, such as

SNMP, SSL, and SSH, which you can enable on a per-interface basis.

To configure the management services on the device, use the WebUI or CLI as follows:

WebUI

Network > Interfaces > List > Edit (for ethernet0/0): Under Management Services, select or clear the management services you want to use on the interface, then click Apply.

CLI

set interface ethernet0/0 manage web unset interface ethernet0/0 manage snmp save

Basic Device Configuration „ 35