Enabling SSH on a Juniper NetScreen Firewall

To enable SSH on a Juniper NetScreen firewall through its web interface, take the following steps:

1. Click on Configuration.
2. Click on Admin.
3. Click on Management.
4. Check the box next to Enable SSH (V2).
5. If you wish to change the port from the default value of 22, put in the value you wish to use in the Port field.
6. If you also wish to enable Secure Copy (SCP), check the box next to Enable SCP.
7. Click on the Apply button.

The above steps will allow access from the "trust" side of the firewall, e.g. the Local Area Network (LAN) behind the firewall. If you want to permit access from the "untrust" side, i.e. from the outside interface of the firewall, you will have to take additional steps.

To permit access from the "unstrust" side using the web interface to the firewall, take the following steps.

1. Click on Network.
2. Click on Interfaces.
3. Click on the Edit link for the "untrust" zone.
4. Under Service Options, check SSH.
5. Click on OK.

[/security/firewalls/netscreen] permanent link