SRX

SRX 210 HE2 POE

Firmware is 12.1X44-D35.5

This machine is FRESH out of the box.  Never been used.  When I start up putty and type in 192.168.1.1 to log on to the machine I get the prompt for user name.

I type in root.

Get prompt for password. 

I press ENTER for blank password.

LOGIN INCORRECT.

All the documentation says blank password.  Password is clearly not blank.  What's going on?

JamesNT

Hi,

Have you tried this via the console? If that still does not work try a password recovery.

http://www.juniper.net/documentation/en_US/junos11.4/topics/task/operational/security-root-password-srx-series-device-recovering.html

Tim

Laptop doesn't have serial port.  Waiting on an adapter that should be here Monday.  😞

James

Hello,

As it is a fresh non production box, can you try reseting configuration to factory default using link below?

http://kb.juniper.net/InfoCenter/index?page=content&id=KB15725&smlogin=true#reset_config_button

Note:- By default, pressing and holding the Reset Config button for 15 seconds or more—until the STATUS LED is yellow and steadily on—deletes all configurations on the device, including the backup configurations and rescue configuration, and loads and commits the factory-default configuration.

If this does not work, password recovery is the only option available:

http://www.juniper.net/techpubs/en_US/junos12.1x44/topics/task/operational/security-root-password-srx-series-device-recovering.html

Regards,

Rushi

The password is NOT blank for Telnet and SSH through port ge-0/0/0. 

However, password is blank for web site and console. 

This persists even after reset.

Not sure what Juniper is doing.  Perhaps they fear SSH or Telnet (can't say I blame them for fearing Telnet)?  Maybe that is turned off intentionally? 

Our procedure is to now use the console for configuration.

JamesNT

Ran across this purely by accident doing another search, but confirms this thread.

http://kb.juniper.net/InfoCenter/index?page=content&id=KB10083&smlogin=true

JamesNT

i guess you were doing ssh to the device right ?

Regards

Rakesh M

We decided to go with console because our security requirements are so high.

Telnet, SSH, and the web interface have all been disabled.

JamesNT

The issue is that the first port on SRX are default configuration set to the untrust security zone which does not allow this connection.

You would be able to use telnet/ssh on the other ports designated trust zone for the device.

See the port and zone designations for your specific device on the getting started guide.

are you doing a demo or something , i had a similar experience with one of the ACX or Some MX variant where everything was wiped clean before handing over a demo device to us and it was strange RE was not accepting the password. 

did you try loggin in via web ? any luck there ?

Regards

Rakesh M

https://r2079.wordpress.com