Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] How to change the WebUI administration port

0

0

Article ID: KB4773 KB Last Updated: 17 Apr 2020Version: 8.0
Summary:

This article provides information on how to change the WebUI administration port.

 

Symptoms:

How to change the administration port on a Juniper firewall. For example, changing the admin port from 80 to another port number.

 

Solution:

By default, the ScreenOS WebUI administration port is set to port 80. When you have a VIP Same As Untrust, you cannot configure a VIP service for port 80. The Juniper firewall will think it has a conflict with the WebUI management port. The workaround for this is to re-configure the WebUI administration port to something other than port 80.

 

For this example, we will change the WebUI management port to 8080. This enables you to configure the VIP to allow the HTTP traffic to the web server defined on the VIP.

 

To change the ScreenOS Administration port from WEBUI, perform the following steps:

 

Step one: Open the WebUI. For more information on accessing the WebUI, go to Accessing Your NetScreen, SSG, or ISG Firewall Using the WebUI

 

From the ScreenOS options menu, click Configuration, select Admin and then click Management.

 

Image of step two

 

In the HTTP Port text box, enter a new management port number.

 

note: You can also change the management port numbers for HTTPS (SSL), Telnet, SSH (V2), and SCP.

 

Image of step three

 

Click Apply.

 

Image of step four

 

To change the ScreenOS Administration port from CLI, use the below command:

set admin port 8080

note: To access the Juniper firewall externally, you will now enter http://IP_address:8080 in your browser Address bar text box. Example: http://10.1.1.1:8080.

 

To change the default management ports on the Juniper firewall (SSH, TELNET, HTTP and HTTPS), refer to KB5661 - Change the default management ports on the Juniper firewall - SSH, TELNET, HTTP and HTTPS.

 

To check the admin ports (Telnet, SSH, HTTP, or HTTPS) that are defined on a Juniper firewall, refer to KB11376 - How do I check the admin ports (Telnet, SSH, HTTP, or HTTPS) defined on the Juniper firewall.

 

Modification History:

2020-04-17: Article reviewed for accuracy; VIP configuration removed since it is no longer needed

 

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search