ScreenOS Firewalls (NOT SRX)
Reply
Contributor
Eldivert
Posts: 27
Registered: ‎05-21-2009
0

I cant access to my devise Juniper SSG5

Hi all,

I have problems with my devise  ssg-5-sh

 

Last month i bought a Junifer ssg 5. When i receive it, i entered to it via ICW in using the IP 192.168.1.1 and see the initial configuration. I click on something that i forget and restart it. since, i cant anymore enter to it. it take the ip 192.168.1.1 as DHCP and i ping it it repply correctly, but when i enter this IP in an internet adress bar, i display page not foung. 

 

I try to reset it, still the same thing.

Please do you have an idea about this problem?

If yes what must i do?

Please help me.

 

Thanks in advanced for your help.

Trusted Expert Trusted Expert
Trusted Expert
WL
Posts: 789
Registered: ‎07-26-2008
0

Re: I cant access to my devise Juniper SSG5

Yes, it means that web management has not be enabled.

Can you try to telnet to the IP instead. OR if you have a console, use that to access the firewall. 

 

Once you have access, then you can turn on the web management :

 

set int <interface no> manage web

or

set int <interface no> manage (turns on all management options)

 

This KB has explanation for how to use console access to get to the firewall, how to reset firewall to default etc:

http://kb.juniper.net/index?page=content&id=KB5046&actp=search&searchid=1242922387628

****pls click the button " Accept as Solution" if my post helped to solve your problem****
Contributor
Eldivert
Posts: 27
Registered: ‎05-21-2009
0

Re: I cant access to my devise Juniper SSG5

Hi,

I try to telnet the device juniper ssg5, but it cant open connection. saying that COULD NOT OPEN CONNECTION ON THE HOST, ON THE PORT 23.

 

What other port can i use?

Trusted Expert Trusted Expert
Trusted Expert
WL
Posts: 789
Registered: ‎07-26-2008
0

Re: I cant access to my devise Juniper SSG5

Do you have console cable? I guess all the management options are not enabled for that interface so you have no way to access the device from that IP address.

 

The only other thing you can try is to use SSH. But the best suggestion I have is to connect CONSOLE cable.

 

I will attach a document that shows you how to access firewall by console. Please check if and let us know if you still have problem.

****pls click the button " Accept as Solution" if my post helped to solve your problem****
Contributor
Eldivert
Posts: 27
Registered: ‎05-21-2009
0

Re: I cant access to my devise Juniper SSG5

ok Thank you for this information.

But i have no console cable in my office. Junifer have no software that allow me to access and configure the device?

 

Please tell me another way i can do to access and manage it.

 

Distinguished Expert
muttbarker
Posts: 2,371
Registered: ‎01-29-2008
0

Re: I cant access to my devise Juniper SSG5

I believe that you can factory default the SSG 5 from the front of the box. There is a little pin-hole that allows you to do so. Very easy to do so with console cable and login of the serial number.

 

But if you have patience and pay attention to the LED's you can do it with the pin-hole.

 

Push the pin-hole for for five/six seconds - release. Status LED will blink amber/red every second.

 

Wait for 1-2 seconds. Power LED will go green. Device is looking for another reset - push the pin-hole again for another five/six seconds. Status LED will go amber/red and then blink green - this means it has been reset to factory default which would include the DHCP access and Web access.

Kevin Barker
JNCIP-SEC
JNCIS-ENT, FWV, SSL, WLAN
JNCIA-ER, EX, IDP, UAC, WX
Juniper Networks Certified Instructor
Juniper Networks Ambassador

Juniper Elite Reseller
J-Partner Service Specialist - Implementation

If this worked for you please flag my post as an "Accepted Solution" so others can benefit. A kudo would be cool if you think I earned it.
Trusted Expert Trusted Expert
Trusted Expert
WL
Posts: 789
Registered: ‎07-26-2008
0

Re: I cant access to my devise Juniper SSG5

Take note that resetting to factory default will remove the original configuration, so if you have any routing etc configured then all that will be lost unless you have a backup of the configuration file somewhere.

****pls click the button " Accept as Solution" if my post helped to solve your problem****
Distinguished Expert
spuluka
Posts: 2,608
Registered: ‎03-30-2009
0

Re: I cant access to my devise Juniper SSG5

Another possiblity is that only ssl is allowed now.  I've seen this same behavior when web management is off without a redirect.  In that case enter:

 

https://192.168.1.1

 

Into the web browser to connect.

 

Since Telent isn't working SSH probably won't either, but you could try that.

 

 

Steve Puluka BSEET
Juniper Ambassador
Senior Network Engineer - UPMC Pittsburgh, PA
JNCIA-ER JNCIA-EX JNCIS-SEC JNCIP-SEC
JNCIS-FWV JNCIS-SSL
MCP - Managing Server 2003 MCP - Windows XP Professional
MCTS Windows 7
http://puluka.com/home
Contributor
Eldivert
Posts: 27
Registered: ‎05-21-2009
0

Re: I cant access to my devise Juniper SSG5

Hi,

 

I have a console cable  now.i connect to my ssg5 with the cable an log on to it normally.

I try to enable the web interface with the commande: set int eth0/1 manage web

save

 

after, i go the browser page and type 192.168.1.1 but it give nothing.

 

Can you give me all the commande i must  type to put the device fonctionnal?

 

Please help me.

 

Regard

Distinguished Expert
spuluka
Posts: 2,608
Registered: ‎03-30-2009
0

Re: I cant access to my devise Juniper SSG5

Try moving your ethernet connection over to 0/2 for the connection.

 

By default when shipped 0/1 is the DMZ. So if you didn't change that you would need to do a bunch of commands to get it out of that zone.  Or connect to this interface

 

Also, management access for the trusted zone is with bgroup0 by default not on the interface.

 

set int bgroup0 manage web

Steve Puluka BSEET
Juniper Ambassador
Senior Network Engineer - UPMC Pittsburgh, PA
JNCIA-ER JNCIA-EX JNCIS-SEC JNCIP-SEC
JNCIS-FWV JNCIS-SSL
MCP - Managing Server 2003 MCP - Windows XP Professional
MCTS Windows 7
http://puluka.com/home
Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.