Configure clear-text or SSL Service for Junos XML Protocol Client Applications
A Junos XML protocol client application can use one of four protocols to connect to the Junos XML protocol server on a router: clear-text (a Junos XML protocol-specific protocol for sending unencrypted text over a TCP connection), SSH, SSL, or Telnet. For clients to use the clear-text or SSL protocol, you must include Junos XML protocol-specific statements in the router configuration.
For more information, see the following topics:
Configuring clear-text Service for Junos XML Protocol Client Applications
To configure the router to accept clear-text connections
from Junos XML protocol client applications on port 3221, include
the xnm-clear-text statement at the [edit system services] hierarchy level:
[edit system services] xnm-clear-text { connection-limit limit; rate-limit limit; }
By default, the Junos XML protocol server supports a limited number of simultaneous clear-text sessions and connection attempts per minute. Optionally, you can include either or both of the following statements to change the defaults:
connection-limit limit—Maximum number of simultaneous connections per protocol (IPv4 and IPv6) (a value from 1 through 250). The default is 75. When you configure a connection limit, the limit is applicable to the number of sessions per protocol (IPv4 and IPv6). For example, a connection limit of 10 allows 10 IPv6 clear-text service sessions and 10 IPv4 clear-text service sessions.rate-limit limit—Maximum number of connection attempts accepted per minute per protocol (IPv4 and IPv6). The range is a value from 1 through 250. The default is 150. When you configure a rate limit, the limit is applicable to the number of connection attempts per protocol (IPv4 and IPv6). For example, a rate limit of 10 allows 10 IPv6 session connection attempts per minute and 10 IPv4 session connection attempts per minute.
You cannot include the xnm-clear-text statement on routers that run the Junos-FIPS software. We recommend
that you do not use the clear-text protocol in a Common Criteria environment.
Configuring SSL Service for Junos XML Protocol Client Applications
To configure the router to accept SSL connections
from Junos XML protocol client applications on port 3220, include
the xnm-ssl statement at the [edit system services] hierarchy level:
[edit system services] xnm-ssl { local-certificate name; connection-limit limit; rate-limit limit; }
local-certificate is the name of the
X.509 authentication certificate used to establish an SSL connection.
You must obtain the certificate and copy it to the router before referencing
it.
By default, the Junos XML protocol server supports a limited number of simultaneous SSL sessions and connection attempts per minute. Optionally, you can include either or both of the following statements to change the defaults:
connection-limit limit—Maximum number of simultaneous connections per protocol (IPV4 and IPv6). The range is a value from 1 through 250. The default is 75. When you configure a connection limit, the limit is applicable to the number of sessions per protocol (IPv4 and IPv6). For example, a connection limit of 10 allows 10 IPv6 SSL sessions and 10 IPv4 SSL sessions.rate-limit limit—Maximum number of connection attempts accepted per protocol per minute. The range is a value from 1 through 250. The default is 150. When you configure a rate limit, the limit is applicable to the number of connection attempts per protocol (IPv4 and IPv6). For example, a rate limit of 10 allows 10 IPv6 SSL session connection attempts per minute and 10 IPv4 SSL session connection attempts per minute.