Juniper Networks J4350 Verifying Secure Web Access, Displaying an SSL Certificate Configuration

Chapter 8: Configuring Secure Web Access

Table 66: Configuring a Secure Web Access (continued)

Task

Import the SSL certificate that you have generated—for example, new.

For information about generating SSL certificates, see “Generating SSL Certificates” on page 155.

J-Web Configuration Editor

1.Next to Certificates, click Configure.

2.Next to Local, click Add new entry.

3.In the Name box, type a name for the certificate to be imported—for example, new.

4.In the Certificate box, paste the generated SSL certificate and private key.

5.Click OK.

CLI Configuration Editor

Enter

set certificates local new load-key-filepath

Replace path with a path or URL to the file containing an SSL certificate and private key in PEM format—for example,

/var/tmp/new.pem

Enable HTTPS access and specify the SSL certificate to be used for authentication.

Specify the port on which HTTPS access is to be enabled—for example, TCP port 8443.

NOTE: You can enable HTTPS access on specified interfaces also. If you enable HTTPS without specifying an interface, HTTPS is enabled on all interfaces.

1.On the main Configuration page next to System, click Configure or Edit.

2.Select the Services check box and click Edit next to it.

3.Next to Web management, click Edit.

4.Select the Https check box and click Edit next to it.

5.In the Local certificate box, type the name of the certificate—for example, new.

6.In the Port box, type 8443.

7.Click OK.

From the [edit system] hierarchy level, enter

set services web-management https local-certificate new port 8443

Verifying Secure Web Access

To verify that the Services Router has the secure access settings you configured, perform the following tasks:

■Displaying an SSL Certificate Configuration on page 159

■Displaying a Secure Access Configuration on page 160

Displaying an SSL Certificate Configuration

Purpose Display the SSL certificate configuration.

Action From the J-Web interface, select

Configuration>View and Edit>View Configuration Text. Alternatively, from

configuration mode in the CLI, enter the show security command.

The following sample output displays an SSL certificate generated with instructions in “Generating SSL Certificates” on page 155.

[edit]

user@R0# show security certificates {

Verifying Secure Web Access ■ 159