Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.
  • 1.  Enabling Web access on Untrust Interface on Juniper SSG 20

    Posted 12-22-2010 09:17

    Can somone guide me on how to Enable Web access on Untrust Interface on Juniper SSG 20



  • 2.  RE: Enabling Web access on Untrust Interface on Juniper SSG 20

    Posted 12-22-2010 11:59

    Hi,

     

    First you need to make untrust interface manageable (let's say it's eth0/0):

    set interface ethernet0/0 ip manageable

     

    Then you can enable service you want on the interface:

    set interface ethernet0/0 manage web (or "ssl" if you want https)

     

    Here's a good article from KB how to do the same with GUI: http://kb.juniper.net/KB4718



  • 3.  RE: Enabling Web access on Untrust Interface on Juniper SSG 20

    Posted 12-22-2010 14:54

    If this is a true untrust public interface do make sure you use "ssl" and not "web" for the access.  With "web" your user/password will pass on the internet in clear text.

     

    Don't use telnet or web on any public networks and avoid them even on private ones when possible.