I cant access to my devise Juniper SSG5

[Eldivert]

Hi all,

I have problems with my devise  ssg-5-sh

Last month i bought a Junifer ssg 5. When i receive it, i entered to it via ICW in using the IP 192.168.1.1 and see the initial configuration. I click on something that i forget and restart it. since, i cant anymore enter to it. it take the ip 192.168.1.1 as DHCP and i ping it it repply correctly, but when i enter this IP in an internet adress bar, i display page not foung. 

I try to reset it, still the same thing.

Please do you have an idea about this problem?

If yes what must i do?

Please help me.

Thanks in advanced for your help.

[WL]

Yes, it means that web management has not be enabled.

Can you try to telnet to the IP instead. OR if you have a console, use that to access the firewall. 

Once you have access, then you can turn on the web management :

set int <interface no> manage web

or

set int <interface no> manage (turns on all management options)

This KB has explanation for how to use console access to get to the firewall, how to reset firewall to default etc:

http://kb.juniper.net/index?page=content&id=KB5046&actp=search&searchid=1242922387628

[Eldivert]

Hi,

I try to telnet the device juniper ssg5, but it cant open connection. saying that COULD NOT OPEN CONNECTION ON THE HOST, ON THE PORT 23.

What other port can i use?

[WL]

Do you have console cable? I guess all the management options are not enabled for that interface so you have no way to access the device from that IP address.

The only other thing you can try is to use SSH. But the best suggestion I have is to connect CONSOLE cable.

I will attach a document that shows you how to access firewall by console. Please check if and let us know if you still have problem.

[Eldivert]

ok Thank you for this information.

But i have no console cable in my office. Junifer have no software that allow me to access and configure the device?

Please tell me another way i can do to access and manage it.

[muttbarker]

I believe that you can factory default the SSG 5 from the front of the box. There is a little pin-hole that allows you to do so. Very easy to do so with console cable and login of the serial number.

But if you have patience and pay attention to the LED's you can do it with the pin-hole.

Push the pin-hole for for five/six seconds - release. Status LED will blink amber/red every second.

Wait for 1-2 seconds. Power LED will go green. Device is looking for another reset - push the pin-hole again for another five/six seconds. Status LED will go amber/red and then blink green - this means it has been reset to factory default which would include the DHCP access and Web access.

[WL]

Take note that resetting to factory default will remove the original configuration, so if you have any routing etc configured then all that will be lost unless you have a backup of the configuration file somewhere.

[spuluka]

Another possiblity is that only ssl is allowed now.  I've seen this same behavior when web management is off without a redirect.  In that case enter:

https://192.168.1.1

Into the web browser to connect.

Since Telent isn't working SSH probably won't either, but you could try that.

[Eldivert]

Hi,

I have a console cable  now.i connect to my ssg5 with the cable an log on to it normally.

I try to enable the web interface with the commande: set int eth0/1 manage web

save

after, i go the browser page and type 192.168.1.1 but it give nothing.

Can you give me all the commande i must  type to put the device fonctionnal?

Please help me.

Regard

[spuluka]

Try moving your ethernet connection over to 0/2 for the connection.

By default when shipped 0/1 is the DMZ. So if you didn't change that you would need to do a bunch of commands to get it out of that zone.  Or connect to this interface

Also, management access for the trusted zone is with bgroup0 by default not on the interface.

set int bgroup0 manage web