CLI Configuration

To configure an SRX-series device to act as a JUNOS Enforcer:

1. Specify the Infranet Controller(s) to which the SRX-series device should connect:
   • Specify the Infranet Controller’s host name:

     edit services unified-access-control infranet-controller hostname

   • Specify the Infranet Controller’s IP address:

     edit services unified-access-control infranet-controller hostname address ip-address

   Note: When configuring access to multiple Infranet Controllers, you must define each separately. For example: edit services unified-access-control infranet-controller IC1 edit services unified-access-control infranet-controller IC2 edit services unified-access-control infranet-controller IC3 edit services unified-access-control infranet-controller IC1 address 10.10.10.01 edit services unified-access-control infranet-controller IC2 address 10.10.10.02 edit services unified-access-control infranet-controller IC3 address 10.10.10.03 Make sure that all of the Infranet Controllers are members of the same cluster.

2. Specify the Infranet Controller port to which the SRX-series device should connect:

   edit services unified-access-control infranet-controller hostname port port

3. Specify the JUNOS interface to which the Infranet Controller should connect:

   edit services unified-access-control infranet-controller hostname interface interface-name

4. Specify the password that the SRX-series device should use to initiate secure communications with the Infranet Controller:

   edit services unified-access-control infranet-controller hostname password password

5. (Optional) Specify information about the certificate that the device should use for SSL communications with the Infranet Controller:
   • Specify the certificate that the device should use:

     edit services unified-access-control infranet-controller hostname server-certificate-subject certificate-name

   • Specify the certificate authority (CA) profile associated with the certificate:

     edit services unified-access-control infranet-controller hostname ca-profile ca-profile

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.