how to configure SSH or web management to connected my Srx from outside ?

[suwandy]

-hi-

I have configure my srx240, I cannot remote from outside using SSH or Web management. I can access with SSH,Telnet and web management from inside only.   could any one help me to solve this configuration?  this is my srx configuration. thk for help.  -urgently-

[Duga]

Hi

Regarding your configuration (specially your zones), what do you mean with inside and outside ?

[oldtimer · Accepted solution]

Which zone are you coming in from?  If you are coming in from the untrust zone, then based on your configuration, you will not be able to manage from untrust.  You don't have host-inbound-traffic system services set for http.  Add http to your host-inbound-traffic system-services for the untrust zone, or whichever zone you are coming in from, then try it again.

[keithr]

If by "outside" you mean "untrust", then to echo and add on to what oldtimer said:

set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic ssh
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic http
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic https

You'll also need to add the ge-0/0/0.0 interface to the system services:

set system services web-management http interface ge-0/0/0.0
set system services web-management https interface ge-0/0/0.0

-kr

[suwandy]

-hi-

the inside and outside which I mean is trusted and untrusted.  Thanks.

[suwandy]

-hi-

thank you for your helping solution.  Now, I can solving my problem. 

[suwandy]

-hi-

specially thank for keithr, your configuration is helpfull  for me to solving my problem. 

[zanyterp]

Does this command work only on specific versions of JUNOS? I recently received an SRX and am trying to configure the same for allowing remote SSH access. When I use the guide below, I receive a syntax error on ssh.

[AdamLin]

The commands are just missing the bolded part:

set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services ssh

set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services http

set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services https

[keithr]

Yeah, I'm not sure how that got left out of my snippets since I copied/pasted from a live configuration file.

Weird...