Technical Documentation

Configuring Secure Access to the J-Web Interface for the SRX240 Services Gateway

Navigate to the J-Web Secure Access Quick Configuration page in J-Web interface by selecting Configuration>Quick Configuration>Secure Access. On this page, you can enable Hypertext Transfer Protocol (HTTP) and HTTP over Secure Sockets Layer (HTTPS) access on interfaces for managing services gateways through the Web interface. You can also install SSL certificates and enable JUNOScript over SSL with the Secure Access page.

Reviewer, please provide the valid screenshot for Narfi. The below screenshot is a place-holder.

Figure 1 shows the Secure Access Quick Configuration page.

Figure 1: Secure Access Quick Configuration Page

Image s031001.gif

To configure Web access settings in the J-Web interface:

  1. Enter information into the Secure Access Quick Configuration page, as described in Table 1.
  2. Click one of the following buttons:
    • To apply the configuration and stay on the Secure Access Quick Configuration page, click Apply.
    • To apply the configuration and return to the Secure Access Quick Configuration page, click OK.
    • To cancel your entries and return to the Secure Access Quick Configuration page, click Cancel.
  3. To verify that Web access is enabled correctly, connect to the services gateway using one of the following methods:
    • For HTTP access—In your browser, type http://URL or http://IP address.
    • For HTTPS access—In your browser, type https://URL or https://IP address.
    • For SSL JUNOScript access—A JUNOScript client such as JUNOScope is required. For information about how to log into JUNOScope, see the JUNOScope Software User Guide.
  4. Verify the secure Web access configuration.

Table 1: Secure Access Quick Configuration Summary

Field

Function

Your Action

Certificates

Certificates

Displays digital certificates required for SSL access to the services gateway.

Allows you to add and delete SSL certificates.

To add a certificate:

  1. Click Add. Opens the Add a Local Certificate page.
  2. Type a name in the Certificate Name box—for example, new.
  3. Paste the generated certificate and RSA private key in the Certificate box.

To delete a certificate, select it and click Delete.

HTTP Web Access

Enable HTTP Access

Enables HTTP access on interfaces.

To enable HTTP access, select the Enable HTTP access box.

Enable HTTP on All Interfaces

Enables HTTP access on all interfaces at one time.

To enable HTTP access on all interfaces, select the Enable HTTP on All Interfaces box.

HTTP-Enabled Interfaces

Specifies interfaces on which you want to enable HTTP access.

Select and deselect interfaces by clicking the direction arrows:

  • To enable HTTP access on an interface, add the interface to the HTTP Interfaces list.
  • To disable HTTP access on an interface, add the interface to the Logical Interfaces list.
HTTPS Web Access

Enable HTTPS Access

Enables HTTPS access on interfaces.

To enable HTTPS access, select the Enable HTTPS access box.

HTTPS Certificate

Specifies SSL certificates to be used for encryption.

This field is available only after you have created an SSL certificate.

To specify the HTTPS certificate, select a certificate from the HTTPS Certificate list—for example, new.

Enable HTTPS on All Interfaces

Enables HTTPS on all interfaces at one time.

To enable HTTPS on all interfaces, select the Enable HTTPS on All Interfaces box.

HTTPS-Enabled Interfaces

Allows you to specify interfaces on which you want to enable HTTPS access.

Select and deselect interfaces by clicking the direction arrows:

  • To enable HTTPS access on an interface, add the interface to the HTTPS Interfaces list.
  • To disable HTTPS access on an interface, add the interface to the Logical Interfaces list.
JUNOScript over SSL

Enable SSL JUNOScript access

Enables secured SSL access to the JUNOScript XML scripting API.

To enable SSL access, select the Enable SSL JUNOScript access box.

JUNOScript SSL Certificate

Specifies SSL certificates to be used for encryption.

This field is available only after you create at least one SSL certificate.

To enable an SSL certificate, select a certificate from the JUNOScript SSL Certificate list—for example, new.


Updated: 2009-04-27