SRX

last person joined: 4 days ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  SRX Pulse client won't download, but Pulse client will connect if DL from Juniper

    Posted 09-17-2013 20:50

    I have a wierd issue.  If I download the pulse client from juniper, install it, and use my username and password I can connect to my SRX and get an established tunnel.  When I browse to https://external-ip/dynamic-vpn I get prompted for a username and password, with User Authentication on the top.  If I use incorrect username and password I get the error: Invalid username and password.  If I use the correct username and password it just loops back to the login page, provides no error, and does not download the software.  

     

    I have tried run restart web-management, deleting the tokens-info, and restarting the SRX but I am unable to login through the web page; only through Pulse.  Any ideas on how to start troubleshooting?



  • 2.  RE: SRX Pulse client won't download, but Pulse client will connect if DL from Juniper

    Posted 09-18-2013 22:58

    which browser are you using? Please have Java installed if you use non IE browser. For IE please have active x enabled.

     

    Thanks,

    SHKM



  • 3.  RE: SRX Pulse client won't download, but Pulse client will connect if DL from Juniper

    Posted 09-19-2013 07:33

    Thank you for your help, I am running IE 10 with Active X allowed and I have tried Firefox 24 with Java 7 update 40.  

     

    Not sure if this helps but this is my httpd.log file from when I connect with Firefox:

     

    Sep 19 15:21:10 CORP-SRH clear-log[6453]: logfile cleared

    httpd: 2: GET / HTTP/1.1
    httpd: 0: jauth modifyJuniperRequests /
    httpd: 2: CheckInterface called
    httpd: 2: redirectInterface called
    httpd: 0: URI token is NULL

    httpd: 0: Interface allowed for dvpn URL. Transparent redirect to /dynamic-vpn
    httpd: 2: redirectUri called
    httpd: 2: DEBUG: redirectCallback /dynamic-vpn

    httpd: 2: GET /dynamic-vpn/login.php HTTP/1.1
    httpd: 0: jauth modifyJuniperRequests /dynamic-vpn/login.php
    httpd: 2: CheckInterface called
    httpd: 2: redirectInterface called
    httpd: 2: redirectUri called
    httpd: 2: CreateMGD: sendmsg to gk for url /dynamic-vpn/login.php
    httpd: 2: Matched Dynamic VPN URL /dynamic-vpn/login.php
    httpd: 2: requestCompleted : Closing gk fd 15 for URL /dynamic-vpn/login.php
    httpd: 2: POST /dynamic-vpn/login HTTP/1.1
    httpd: 0: jauth modifyJuniperRequests /dynamic-vpn/login
    httpd: 2: CheckInterface called
    httpd: 2: redirectInterface called
    httpd: 2: redirectUri called
    httpd: 2: CreateMGD: sendmsg to gk for url /dynamic-vpn/login.php
    httpd: 2: Matched Dynamic VPN URL /dynamic-vpn/login.php
    httpd: 2: Matched Dynamic VPN URL /dynamic-vpn/login.php
    httpd: 2: DEBUG: redirectCallback /dynamic-vpn/login.php

    httpd: 2: requestCompleted : Closing gk fd 15 for URL /dynamic-vpn/login.php
    httpd: 2: GET /dynamic-vpn/setup.php HTTP/1.1
    httpd: 0: jauth modifyJuniperRequests /dynamic-vpn/setup.php
    httpd: 2: CheckInterface called
    httpd: 2: redirectInterface called
    httpd: 2: redirectUri called
    httpd: 2: CreateMGD: sendmsg to gk for url /dynamic-vpn/setup.php
    httpd: 2: Matched Dynamic VPN URL /dynamic-vpn/setup.php
    httpd: 2: DEBUG: redirectCallback /dynamic-vpn/setup.php

    httpd: 2: requestCompleted : Closing gk fd 15 for URL /dynamic-vpn/setup.php
    httpd: 2: GET /dynamic-vpn/login.php HTTP/1.1
    httpd: 0: jauth modifyJuniperRequests /dynamic-vpn/login.php
    httpd: 2: CheckInterface called
    httpd: 2: redirectInterface called
    httpd: 2: redirectUri called
    httpd: 2: CreateMGD: sendmsg to gk for url /dynamic-vpn/login.php
    httpd: 2: Matched Dynamic VPN URL /dynamic-vpn/login.php
    httpd: 2: requestCompleted : Closing gk fd 15 for URL /dynamic-vpn/login.php



  • 4.  RE: SRX Pulse client won't download, but Pulse client will connect if DL from Juniper

    Posted 09-19-2013 08:08

    Please contact Jtac via case.

     

    https://tools.online.juniper.net/cm/case_create_choice.jsp

     

    Let's investigate further on this.

     

    Thanks,

    SHKM



  • 5.  RE: SRX Pulse client won't download, but Pulse client will connect if DL from Juniper
    Best Answer

    Posted 09-20-2013 11:04

    Just to follow up on my issue in the event any future person comes across something similar, this resolved my issue.

     

    http://kb.juniper.net/InfoCenter/index?page=content&id=KB23613&actp=RSS

     

    I guess some of the pages are dynamically created and if the /cf directory fills up it can't create those pages and so it doesn't error out but just loops back to the login page.  

     

    I did open a Jtac case but they were unable to find the resolution before I did.