LAB Web- Autheentication.

1.

Konfigurasi web-Authentication pada interface Zone Employe.

set interfaces fe-0/0/3 unit XXX family inet address < IP-Address > web-authent
ication http
2.

Konfigurasi Access Profile :

Menggunakan User Local.

set access profile
set access profile
YQF"
set access profile
QF"
set access profile
.PpBIRSys2gJjH"

web-allow authentication-order password

web-allow client HRD firewall-user password "$9$MNG8NdwYgJUjs
web-allow client IT firewall-user password "$9$MLu8NdwYgJUjsY
web-allow client wawan firewall-user password "$9$j8qT36/tRcl

Menggunakan User Radius.

set access profile web-allow authentication-order radius
set access profile web-allow radius-server < IP-Address > secret "$9$BIORcl8X-24
ZKM4ZUjPf1RhSKMLxNbYg"
set access profile web-allow radius-server < IP-Address > retry 2
3.
Konfiguasi Access Firewall :
set access firewall-authentication web-authentication default-profile test-FA
set access firewall-authentication web-authentication banner success "Welcome To
SRX-Brance-Ofice"
4.

Konfigurasi policies :

set security policies from-zone Employe to-zone

ource-address any
set security policies from-zone Employe to-zone
estination-address any
set security policies from-zone Employe to-zone
pplication any
set security policies from-zone Employe to-zone
rmit firewall-authentication web-authentication
5.

External policy web-auth match s

External policy web-auth match d
External policy web-auth match a
External policy web-auth then pe

Verifikasi Firewall-Authentication :

root@SRX-01> show security firewall-authentication users

Firewall authentication data:
Total users in table: 1
Id Source Ip
Src zone Dst zone Profile
Age
Status User
x xxx.xxx.xxx.xxx
N/A
N/A
web-allow
7 Success User-Login
LAB pass-through Authentication.
1.
Konfigurasi access Firewall :
set access firewall-authentication pass-through default-profile web-allow
set access firewall-authentication pass-through http banner login Login Access
2.

Konfigurasi Policies :

set security policies from-zone Employe to-zone External

ource-address any
set security policies from-zone Employe to-zone External
estination-address any
set security policies from-zone Employe to-zone External
pplication any
set security policies from-zone Employe to-zone External
rmit firewall-authentication pass-through access-profile

policy web-auth match s

policy web-auth match d
policy web-auth match a
policy web-auth then pe
web-allow