Juniper-networks J4350 Manual de usuario descargar pdf (Pagina 137)

Configuring Secure Web Access

Before You Begin

Before you begin initial config uration, co mplete the following tasks:

Establish basic connectivity. See “Establishing Basic Conn ectivity” on page 93.

Obtain an SSL certificate from a trusted signing authority. See “Generating SSL

Certificates

” on page 117.

Generating SSL Certificates

To enable secure Web access, you must first generate a digital SSL certificate,

and then enabl

eHTTPSaccessontheServicesRouter.

To generate an

SSL certificate:

1. Enter the foll

owing

openssl comm and in your Secure Shell comm and-line

interface. The

openssl comm and generates a self-signed SSL certificate in

the privacy-enhanced mail (PEM) format. It writes the certificate and an

unencrypted

1024-bit RSA private key to the specified file.

% openssl req –x509 –nodes –newkey rsa:1024 –keyout filename .pem -out filename .pem

Replace filename withthenameofafileinwhichyouwanttheSSLcertificate

to be written—for example ,

new.pem.

2. When prompted, type the appropriate information in the identification form.

For example, type

US for the country name.

3. Display the contents of th e file new.pem.

cat new.pem

Copy the contents o f this file for installing the SSL certificate.

Use can use either J-Web Quick Configuration or a configuration editor

to install the SSL certificate and enable HTTPS.

Configuring Secure Web Access with Quick Configuration

Use the Secure Access Quick Configuration page to enable HTTP and HTTPS access

on interfaces for managing Services Routers through the Web interface. You can also

install SSL

certificates and enable JUNOScript over SSL with the Secure Access page.

Figure 37 sh

ows the Secure Access Quick Configuration page.

Configuring Secure Web Access with Quick Configuration 117

1 2 ... 132 133 134 135 136 137 138 139 140 141 142 ... 283 284

Sin comentarios

Juniper-networks J4350 Manual de usuario Pagina 137