Verifying secure web access, Displaying an ssl certificate configuration – Juniper Networks J-series Services Router J2320 User Manual

Page 181

Advertising
background image

Table 66: Configuring a Secure Web Access (continued)

CLI Configuration Editor

J-Web Configuration Editor

Task

Enter

set certificates local new load-key-filepath

Replace path with a path or URL to the file
containing an SSL certificate and private key
in PEM format—for example,

/var/tmp/new.pem

1.

Next to Certificates, click Configure.

2.

Next to Local, click Add new entry.

3.

In the Name box, type a name for the
certificate to be imported—for example,

new

.

4.

In the Certificate box, paste the generated
SSL certificate and private key.

5.

Click OK.

Import the SSL certificate
that you have
generated—for example,

new

.

For information about
generating SSL certificates,
see “Generating SSL
Certificates” on page 155.

From the

[edit system]

hierarchy level, enter

set services web-management https

local-certificate new port 8443

1.

On the main Configuration page next to
System, click Configure or Edit.

2.

Select the Services check box and click
Edit next to it.

3.

Next to Web management, click Edit.

4.

Select the Https check box and click Edit
next to it.

5.

In the Local certificate box, type the name
of the certificate—for example,

new

.

6.

In the Port box, type

8443

.

7.

Click OK.

Enable HTTPS access and
specify the SSL certificate
to be used for
authentication.

Specify the port on which
HTTPS access is to be
enabled—for example, TCP
port 8443.

NOTE: You can enable
HTTPS access on specified
interfaces also. If you
enable HTTPS without
specifying an interface,
HTTPS is enabled on all
interfaces.

Verifying Secure Web Access

To verify that the Services Router has the secure access settings you configured,
perform the following tasks:

Displaying an SSL Certificate Configuration on page 159

Displaying a Secure Access Configuration on page 160

Displaying an SSL Certificate Configuration

Purpose

Display the SSL certificate configuration.

Action

From the J-Web interface, select
Configuration>View and Edit>View Configuration Text. Alternatively, from
configuration mode in the CLI, enter the

show security

command.

The following sample output displays an SSL certificate generated with instructions
in “Generating SSL Certificates” on page 155.

[edit]
user@R0# show security
certificates {

Verifying Secure Web Access

159

Chapter 8: Configuring Secure Web Access

Advertising