Junos OS

We have follwed this KB article KB26928 to install and configure j-web on one of our MX-960s.

 

Code is 13.3R9.13. Package installed both the REs and web-management has been enabled. But J-web service is not running on the box.

 

We checked both HTTP/HTTPS. No luck!

 

We see that httpd-gk is running on the box when web-management is enabled. Do we need httpd process also to up the j-web service?

 

Please help.

Hi Supun,

Please let me know what errors you are getting.

 

Please refer to below document for all SSL/certificate/Browser requirement. Please refer the other sections given in it.

 

Installing the J-Web Software

 

Let me know if still you see any issue.

 

[KUDOS PLEASE! If you think I earned it!

If this solution worked for you please flag my post as an "Accepted Solution" so others can benefit..]

Hi adwivedi,

Thanks for the response.

The link you have provided and KB26928 are same.

The only issue is I'm not getting GUI of j-web. Httpd is not running on the box. Browser is showing "refused to connect"

I did not get any error when installing the j-web to the box.

I verified using a filter that http requests are hitting the box.

Hi,

 

Can you please check if you see "httpd" and "httpd-gk" processes running on the router? Also can you please make sure there are no firewall filters which are blocking http traffic to/fro from the router? If above things are fine, can you please restart the web-management process using "restart web-management" and check if that helps?

 

Thanks

Hi Sarathi,

 

Thankyou verymuch for the response.

 

We could see that only "httpd-gk" process is running on the box. Not httpd.

 

#run show system processes extensive
  PID USERNAME     THR PRI NICE   SIZE    RES STATE    TIME   WCPU COMMAND
   10 root           1 171   52     0K    12K RUN    9372.0 73.34% idle
40453 root           1  96    0 51664K 41960K select   0:06  4.01% mgd
41234 root           1  96    0  5948K  2800K select   0:00  0.00% httpd-gk

We have added a lo0-filter to check whether request are hitting the box.

term WEB {
    from {
        destination-port 80;
    }
    then {
        count web-count;
        accept;
    }
}

 

We could the increment on the counter.

# run show firewall filter 99-VTY    

Filter: 99-VTY                                                 
Counters:
Name                                                Bytes              Packets
web-count                                             204                    4

 

We couldn't see box is listning on port 80.

# run show system connections | match :80

 

We restarted the web-management several times. But only the gatekeeper process is restarting.

 

>restart web-management    
Web management gatekeeper process started, pid 41916

 

We could see that web-mgmt package has been installed to the box correctly.

# run show version
....
JUNOS Web Management [13.3R9.13]

 

Please help to identify the rootcause.

 

BR

smartm

Hi Folks,

That is true.. httpd is required to complete the jweb

 

I did a quick test in my DUT and could find the below observation,

 

• By default we don’t have the daemon http and httpd-gk running in the box
• Post installing the jweb and only post doing the commit changes of adding service web we do find the box signaling 'Web management gatekeeper process' and adding the web-management http cli

 

box% ps -aux |grep http

root    60613  0.0  0.4  5952  2796  ??  I    11:17AM   0:00.06 /usr/sbin/httpd-gk -N

nobody  60623  0.0  0.4  5760  3228  ??  I    11:17AM   0:00.07 /packages/mnt/jcrypto/usr/sbin/httpd --config /jail/var/etc/httpd.conf

 

• I have captured the J-web traffic post enabling and it’s as below, [This is expected traffic and should be allowed in the loopback filter]

 

labroot@M10i-2004> monitor traffic interface fxp0.0 size 2000 matching "host 10.222.1.152"

 

11:01:53.032265 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 935338885:935339128(243) ack 3245016427 win 33350

11:01:53.087262  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 243 win 259

11:01:54.047711 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 243:628(385) ack 1 win 33350

11:01:54.103724  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 628 win 257

11:01:55.046681 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 628:811(183) ack 1 win 33350

11:01:55.104577  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 811 win 257

11:01:56.046507 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 811:994(183) ack 1 win 33350

11:01:56.105625  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 994 win 256

11:01:57.046356 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 994:1177(183) ack 1 win 33350

11:01:57.106609  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 1177 win 255

11:01:58.046208 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 1177:1362(185) ack 1 win 33350

11:01:58.107593  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 1362 win 255

11:01:59.046046 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 1362:1548(186) ack 1 win 33350

11:01:59.108286  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 1548 win 260

11:02:00.045899 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 1548:1734(186) ack 1 win 33350

11:02:00.097436  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 1734 win 259

11:02:01.045745 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 1734:1920(186) ack 1 win 33350

11:02:01.110034  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 1920 win 259

 

Next Action Plan

----------------

• We can try un-installing the jweb package and add it

Hi Folks,

Solution

--------

The issue was isolated to be the Export version of Junos in the box. You are running JunOS Worldwide, which does not support encryption and has limited/no support for certain features.

We could figure out this works with only Junos [domestic] version since and  it observed  that httpd process is not running because its having a dependency for  SSL Library.

 

We would suggest to upgrade the box with domestic image to enable this utility.