Juniper SRX110 H2 User Manual

Understanding Management Access
Telnet allows you to connect to the services gateway and access the CLI to execute
commands from a remote system. The Telnet CLI connections are not encrypted and
therefore can be intercepted.
NOTE: Telnet accessto the root user is prohibited. You must use more secure
methods, such as SSH, to log in as root.
SSH provides the following features:
•
Allows you to connect to the device and access the CLI to execute commands from a
remote system
•
Encrypts traffic so that it cannot be intercepted (unlike Telnet)
•
Can be configured so that connections are authenticated by a digital certificate
•
Uses public–private key technology for both connection and authentication
The SSH client software must be installed on the machine where the client application
runs. If the SSH private key is encrypted (for greater security), the SSH client must be
able to access the passphrase used to decrypt the key.
For information about obtaining SSH software, see http://www.ssh.com and
http://www.openssh.com.
If you are using a Junos XML management protocol server to configure and monitor
devices, you can activate cleartext access on the device to allow unencrypted text to be
sent directly over a Transmission Line Protocol (TCP) connection without using any
additional protocol (such as SSH, SSL, or Telnet). For more information about the Junos
XML management protocol application programming interface (API), see the NETCONF
XML Management Protocol Guide.
NOTE: Information sent in cleartext is not encrypted and therefore can be
intercepted.
If the device is operating in a Common Criteria environment, see the Configuration Guides
for Junos OS Public Sector Certifications.
Related
Documentation
Connecting the SRX110 Services Gateway to the J-Web Interface on page 86•
• Connecting the Services Gateway to the CLI Locally on page 88
• Connecting the SRX110 Services Gateway to the CLI Remotely
• Performing Initial Software Configuration on the SRX110 Services Gateway Using the
CLI on page 96
85Copyright © 2015, Juniper Networks, Inc.
Chapter 14: Performing Initial Configuration

Juniper SRX110 H2 Specifications

General

Brand	Juniper
Model	SRX110 H2
Category	Gateway
Language	English