Junos
Highlighted
Junos

J-web on MX

‎01-12-2017 08:58 AM

We have follwed this KB article KB26928 to install and configure j-web on one of our MX-960s.

 

Code is 13.3R9.13. Package installed both the REs and web-management has been enabled. But J-web service is not running on the box.

 

We checked both HTTP/HTTPS. No luck!

 

We see that httpd-gk is running on the box when web-management is enabled. Do we need httpd process also to up the j-web service?

 

Please help.

6 REPLIES 6
Highlighted
Junos

Re: J-web on MX

‎01-12-2017 12:51 PM

Hi Supun,

Please let me know what errors you are getting.

 

Please refer to below document for all SSL/certificate/Browser requirement. Please refer the other sections given in it.

 

Installing the J-Web Software

 

Let me know if still you see any issue.

 

[KUDOS PLEASE! If you think I earned it!

If this solution worked for you please flag my post as an "Accepted Solution" so others can benefit..]

Highlighted
Junos

Re: J-web on MX

‎01-12-2017 04:01 PM
Hi adwivedi,

Thanks for the response.

The link you have provided and KB26928 are same.

The only issue is I'm not getting GUI of j-web. Httpd is not running on the box. Browser is showing "refused to connect"

I did not get any error when installing the j-web to the box.

I verified using a filter that http requests are hitting the box.
Highlighted
Junos

Re: J-web on MX

‎01-17-2017 07:35 PM

Hi,

 

Can you please check if you see "httpd" and "httpd-gk" processes running on the router? Also can you please make sure there are no firewall filters which are blocking http traffic to/fro from the router? If above things are fine, can you please restart the web-management process using "restart web-management" and check if that helps?

 

Thanks

Hope this helps

--------------------------------------------------------------------------------------------------------
If this post was helpful, please mark this post as an "Accepted Solution".
Kudos are always appreciated!
--------------------------------------------------------------------------------------------------------
Highlighted
Junos

Re: J-web on MX

[ Edited ]
‎01-17-2017 07:52 PM

Hi

 

 

 

 

 

 

 

 

 

 

Highlighted
Junos

Re: J-web on MX

‎01-17-2017 11:27 PM

Hi Folks,

That is true.. httpd is required to complete the jweb

 

I did a quick test in my DUT and could find the below observation,

 

  • By default we don’t have the daemon http and httpd-gk running in the box
  • Post installing the jweb and only post doing the commit changes of adding service web we do find the box signaling 'Web management gatekeeper process' and adding the web-management http cli

 

box% ps -aux |grep http

root    60613  0.0  0.4  5952  2796  ??  I    11:17AM   0:00.06 /usr/sbin/httpd-gk -N

nobody  60623  0.0  0.4  5760  3228  ??  I    11:17AM   0:00.07 /packages/mnt/jcrypto/usr/sbin/httpd --config /jail/var/etc/httpd.conf

 

  • I have captured the J-web traffic post enabling and it’s as below, [This is expected traffic and should be allowed in the loopback filter]

 

labroot@M10i-2004> monitor traffic interface fxp0.0 size 2000 matching "host 10.222.1.152"

 

11:01:53.032265 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 935338885:935339128(243) ack 3245016427 win 33350

11:01:53.087262  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 243 win 259

11:01:54.047711 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 243:628(385) ack 1 win 33350

11:01:54.103724  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 628 win 257

11:01:55.046681 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 628:811(183) ack 1 win 33350

11:01:55.104577  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 811 win 257

11:01:56.046507 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 811:994(183) ack 1 win 33350

11:01:56.105625  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 994 win 256

11:01:57.046356 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 994:1177(183) ack 1 win 33350

11:01:57.106609  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 1177 win 255

11:01:58.046208 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 1177:1362(185) ack 1 win 33350

11:01:58.107593  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 1362 win 255

11:01:59.046046 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 1362:1548(186) ack 1 win 33350

11:01:59.108286  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 1548 win 260

11:02:00.045899 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 1548:1734(186) ack 1 win 33350

11:02:00.097436  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 1734 win 259

11:02:01.045745 Out IP 10.219.37.200.telnet > 10.222.1.152.51900: P 1734:1920(186) ack 1 win 33350

11:02:01.110034  In IP 10.222.1.152.51900 > 10.219.37.200.telnet: . ack 1920 win 259

 

Next Action Plan

----------------

  • We can try un-installing the jweb package and add it
-Python JNCIE 3X [SP|DC|ENT] JNCIP-SEC JNCDS 3X [ WAN | DC|SEC] JNCIS-Cloud JNCIS-DevOps CCIP ITIL
#Please mark my solution as accepted if it helped, Kudos are appreciated as well.
Highlighted
Junos
Solution
Accepted by topic author Smartm
‎01-22-2017 08:33 PM

Re: J-web on MX

[ Edited ]
‎01-22-2017 09:16 AM

Hi Folks,

Solution

--------

The issue was isolated to be the Export version of Junos in the box. You are running JunOS Worldwide, which does not support encryption and has limited/no support for certain features.

We could figure out this works with only Junos [domestic] version since and  it observed  that httpd process is not running because its having a dependency for  SSL Library.

 

We would suggest to upgrade the box with domestic image to enable this utility.

 

-Python JNCIE 3X [SP|DC|ENT] JNCIP-SEC JNCDS 3X [ WAN | DC|SEC] JNCIS-Cloud JNCIS-DevOps CCIP ITIL
#Please mark my solution as accepted if it helped, Kudos are appreciated as well.
Feedback