[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Configuring Secure Web Access with a Configuration Editor

You can manage your Services Router using a secure Web connection by enabling HTTPS.

To enable HTTPS on your Services Router:

  1. Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.
  2. Perform the configuration tasks described in Table 32.
  3. If you are finished configuring the device, commit the configuration.
  4. To check the configuration, see Verifying Secure Web Access.

Table 32: Configuring a Secure Web Access

Task

J-Web Configuration Editor

CLI Configuration Editor

Navigate to the Security level in the configuration hierarchy.

  1. In the J-Web interface, select Configuration>View and Edit>Edit Configuration.
  2. Next to Security, click Configure or Edit.

From the [edit] hierarchy level, enter

edit security

Import the SSL certificate that you have generated—for example, new.

For information about generating SSL certificates, see Generating SSL Certificates.

  1. Next to Certificates, click Configure.
  2. Next to Local, click Add new entry.
  3. In the Name box, type a name for the certificate to be imported—for example, new.
  4. In the Certificate box, paste the generated SSL certificate and private key.
  5. Click OK.

Enter

set certificates local new load-key-filepath

Replace path with a path or URL to the file containing an SSL certificate and private key in PEM format—for example, /var/tmp/new.pem

Enable HTTPS access and specify the SSL certificate to be used for authentication.

Specify the port on which HTTPS access is to be enabled—for example, TCP port 8443.

Note: You can enable HTTPS access on specified interfaces also. If you enable HTTPS without specifying an interface, HTTPS is enabled on all interfaces.

  1. On the main Configuration page next to System, click Configure or Edit.
  2. Select the Services check box and click Edit next to it.
  3. Next to Web management, click Edit.
  4. Select the Https check box and click Edit next to it.
  5. In the Local certificate box, type the name of the certificate—for example, new.
  6. In the Port box, type 8443.
  7. Click OK.

From the [edit system] hierarchy level, enter

set services web-management https local-certificate new port 8443


[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]