05-21-2009 08:43 AM
I have problems with my devise ssg-5-sh
Last month i bought a Junifer ssg 5. When i receive it, i entered to it via ICW in using the IP 192.168.1.1 and see the initial configuration. I click on something that i forget and restart it. since, i cant anymore enter to it. it take the ip 192.168.1.1 as DHCP and i ping it it repply correctly, but when i enter this IP in an internet adress bar, i display page not foung.
I try to reset it, still the same thing.
Please do you have an idea about this problem?
If yes what must i do?
Please help me.
Thanks in advanced for your help.
05-21-2009 09:14 AM
Yes, it means that web management has not be enabled.
Can you try to telnet to the IP instead. OR if you have a console, use that to access the firewall.
Once you have access, then you can turn on the web management :
set int <interface no> manage web
set int <interface no> manage (turns on all management options)
This KB has explanation for how to use console access to get to the firewall, how to reset firewall to default etc:
05-21-2009 12:47 PM
I try to telnet the device juniper ssg5, but it cant open connection. saying that COULD NOT OPEN CONNECTION ON THE HOST, ON THE PORT 23.
What other port can i use?
05-21-2009 12:56 PM
Do you have console cable? I guess all the management options are not enabled for that interface so you have no way to access the device from that IP address.
The only other thing you can try is to use SSH. But the best suggestion I have is to connect CONSOLE cable.
I will attach a document that shows you how to access firewall by console. Please check if and let us know if you still have problem.
05-21-2009 01:19 PM
ok Thank you for this information.
But i have no console cable in my office. Junifer have no software that allow me to access and configure the device?
Please tell me another way i can do to access and manage it.
05-21-2009 01:27 PM
I believe that you can factory default the SSG 5 from the front of the box. There is a little pin-hole that allows you to do so. Very easy to do so with console cable and login of the serial number.
But if you have patience and pay attention to the LED's you can do it with the pin-hole.
Push the pin-hole for for five/six seconds - release. Status LED will blink amber/red every second.
Wait for 1-2 seconds. Power LED will go green. Device is looking for another reset - push the pin-hole again for another five/six seconds. Status LED will go amber/red and then blink green - this means it has been reset to factory default which would include the DHCP access and Web access.
05-21-2009 03:29 PM
Take note that resetting to factory default will remove the original configuration, so if you have any routing etc configured then all that will be lost unless you have a backup of the configuration file somewhere.
05-26-2009 05:44 PM
Another possiblity is that only ssl is allowed now. I've seen this same behavior when web management is off without a redirect. In that case enter:
Into the web browser to connect.
Since Telent isn't working SSH probably won't either, but you could try that.
05-27-2009 07:13 AM
I have a console cable now.i connect to my ssg5 with the cable an log on to it normally.
I try to enable the web interface with the commande: set int eth0/1 manage web
after, i go the browser page and type 192.168.1.1 but it give nothing.
Can you give me all the commande i must type to put the device fonctionnal?
Please help me.
05-27-2009 07:24 AM
Try moving your ethernet connection over to 0/2 for the connection.
By default when shipped 0/1 is the DMZ. So if you didn't change that you would need to do a bunch of commands to get it out of that zone. Or connect to this interface
Also, management access for the trusted zone is with bgroup0 by default not on the interface.
set int bgroup0 manage web