Junos OS

 View Only
last person joined: 9 hours ago 

Ask questions and share experiences about Junos OS.
  • 1.  Want to separate the JWEB and Juniper Secure Connect (SSL VPN) Ports in vSRX.

    Posted 05-30-2023 19:05

    Hi Team.

    Jweb port is 'X' and  Juniper secure connect port is also 'X' in juniper, when i am changing the port jweb port from 'X' to 'Y', then Juniper secure connect port also got changed to 'Y'.

    I want to separate these (JWEB & JSC) ports.

    for example:

    1. For Jweb it should be 
              https://x.x.x.x:2234

    2. And For JSC
              https://x.x.x.x:4325

    Thanks



    ------------------------------
    Muhammad Jamal Akbar
    ------------------------------


  • 2.  RE: Want to separate the JWEB and Juniper Secure Connect (SSL VPN) Ports in vSRX.

    Posted 05-31-2023 19:51

    There is no option available to change the ports used for these services on the SRX.

    The only option here is to control which interfaces are configured for the two protocols so you can have both working but on different interfaces.



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: Want to separate the JWEB and Juniper Secure Connect (SSL VPN) Ports in vSRX.

    Posted 06-01-2023 06:31

    Hi Steve,

    I have create a certificate for JSC SSL VPN and associate it to web service management, therefore both jweb and JSC are using same port. Can you please tell any other way to disable the JSC Public web access ?



    ------------------------------
    Muhammad Jamal Akbar
    ------------------------------



  • 4.  RE: Want to separate the JWEB and Juniper Secure Connect (SSL VPN) Ports in vSRX.

    Posted 06-01-2023 06:47

    Yes, they are using the same standard port for the ssl connection.  But when you configure JSC and Jweb you choose which SRX interface the service is active on.

    So the JSC would be on your externally facing interface and the Jweb management would be on your internal secure interface.

    You can add multiple certificates with different domains as needed in the certificate configuration section so that both are usable as well.



    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP - Retired)
    http://puluka.com/home
    ------------------------------