SRX

Hey all

I'm having trouble with my SRX 210 after placing it into transparent mode.

I am able to ping the management interface fine, I can also telnet to it fine.

I have lost access to the web-ui though after updating the firmware to 12.1R1.9

error is:

Access Error: 401 -- Unauthorized

Interface is not authorized for HTTP access

Im plugged into port FE 0/0/7 and i have obtained an IP via DHCP

Can someone please tell me if something is wrong here?

I appreciate any help! Thank you  (This is a test SRX as im new to Juniper)

set version 12.1R1.9

set system services ssh
set system services telnet
set system services xnm-clear-text
set system services web-management http interface vlan.10
set system services web-management http interface fe-0/0/7.0
set system services web-management https system-generated-certificate
set system services web-management https interface vlan.10
set system services dhcp router 10.95.11.254
set system services dhcp pool 10.95.11.0/24 address-range low 10.95.11.100
set system services dhcp pool 10.95.11.0/24 address-range high 10.95.11.150
set system services dhcp propagate-settings ge-0/0/0.0

set interfaces ge-0/0/0 unit 0 family bridge interface-mode access
set interfaces ge-0/0/0 unit 0 family bridge vlan-id 10
set interfaces ge-0/0/1 unit 0 family bridge interface-mode access
set interfaces ge-0/0/1 unit 0 family bridge vlan-id 10
set interfaces fe-0/0/2 unit 0 family bridge interface-mode access
set interfaces fe-0/0/2 unit 0 family bridge vlan-id 10
set interfaces fe-0/0/3 unit 0 family bridge interface-mode access
set interfaces fe-0/0/3 unit 0 family bridge vlan-id 10
set interfaces fe-0/0/4 unit 0 family bridge interface-mode access
set interfaces fe-0/0/4 unit 0 family bridge vlan-id 10
set interfaces fe-0/0/5 unit 0 family bridge interface-mode access
set interfaces fe-0/0/5 unit 0 family bridge vlan-id 10
set interfaces fe-0/0/6 unit 0 family bridge interface-mode access
set interfaces fe-0/0/6 unit 0 family bridge vlan-id 10
set interfaces fe-0/0/7 unit 0 family bridge interface-mode access
set interfaces fe-0/0/7 unit 0 family bridge vlan-id 10
set interfaces irb enable
set interfaces irb unit 0 family inet address 10.95.11.252/24
set routing-options static route 0.0.0.0/0 next-hop 10.95.11.254

set security policies from-zone trust to-zone untrust policy 1 match source-address any
set security policies from-zone trust to-zone untrust policy 1 match destination-address any
set security policies from-zone trust to-zone untrust policy 1 match application any
set security policies from-zone trust to-zone untrust policy 1 then permit
set security policies from-zone trust to-zone untrust policy 1 then log session-init
set security policies from-zone trust to-zone untrust policy 1 then log session-close
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services dhcp
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services tftp
set security zones security-zone untrust interfaces ge-0/0/0.0 host-inbound-traffic system-services all
set security zones security-zone trust host-inbound-traffic system-services all
set security zones security-zone trust host-inbound-traffic protocols all
set security zones security-zone trust interfaces fe-0/0/7.0
set security zones security-zone trust interfaces ge-0/0/1.0 host-inbound-traffic system-services http
set bridge-domains test domain-type bridge
set bridge-domains test vlan-id 10
set bridge-domains test routing-interface irb.0

Hi,

By specifying particular interfaces under web-management, we restrict access to that interfaces only. Currently you have specified vlan.10 and fe-0/0/7.0 for http and vlan.10 for https (both of them are L2 interfaces ,irb.0 is the only L3 interface in Transparent mode) . So removing these specific interfaces from web-management should give you http/https access to irb.0 interface ip address.

delete system services web-management http interface vlan.10
delete system services web-management http interface fe-0/0/7.0
delete system services web-management https interface vlan.10

 Hope this helps !

Thank you!

That makes complete sense.

This worked - I can now access the web-ui - thank you again

Hi, a quick thank you - this fixed the same problem for me.