一、实验环境
Juniper vSRX 12.1
二、配置管理口步骤
2.0 console进入命令行窗口，初始化用户root，密码为空
2.1 配置接口IP地址
set interfaces ge-0/0/1 unit 0 family inet address 192.168.20.2/24
2.2 创建区域
set security zones security-zone trust
2.3 配置接口区域
set security zones security-zone trust interfaces ge-0/0/1.0
2.4 配置允许访问接口的哪些服务
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services ping set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services ssh set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services http set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services https
commit
2.5 查看接口信息
show interfaces ge-0/0/1.0
2.6 配置HTTP登陆
set system services web-management http interface ge-0/0/1.0
2.7 配置https登陆
set system services web-management https system-generated-certificate
set system services web-management https interface ge-0/0/1.0
2.8 配置ssh登陆
set system services ssh
2.9 登陆web界面
三、常见问题
3.1 如果commit出现 error：commit failed: (missing statements)
解决方法：需要设置管理员密码
set system root-authentication plain-text-password
commit
3.2 如果登陆http页面，url自动跳转到http://管理地址/servererror.php?code=401，显示该网页无法正常运作
解决方法：http登陆方式未开启
set system services web-management http interface ge-0/0/1.0