JWEB on SRX1500 using junos 18.4 cannot open?

[#1]

Hi all,

I just power on SRX1500 with upgraded junos using 18.4R1. But unfortunately jweb cannot open. On the host-inbound rule i already put permit all. I already restart jweb service but still same. It's look like certificate issue. Is it any specific  browser or PR related to this junos version?

test@srx1500-node0> show configuration system services
ssh {
root-login deny;
}
xnm-clear-text;
netconf {
ssh;
}
dhcp-local-server {
group jdhcp-group {
interface ge-0/0/1.0;
}
}
web-management {
https {
system-generated-certificate;
interface fxp0.0;
}
}

Thanks and appreciate any feedback

[#2]

Hi,

Have you been able to enable web-management http to check if it works on http and is not a certificate issue?

If http also does not work, I would try to soft-reset the web-management process.

> restart web-management

Regards,

Vikas

[#3]

Hi kronicklez,

• Is there any specific reason why you suspect a cert issue?
• Can you take a pcap on your PC while connecting to the SRX in order to confirm is the problem is related to TCP or SSL?
• Can you try to connect via an interface different than the fxp0 and/or via http?
• Try deleting the web-management configuration, then try "commit full". The re-add the configuration and try again "commit full".

[#4]

Hi epaniagua,

I'm already try using fxp and also normal interface. But still failed. Also try delete and add back then do commit full but still failed.

Thanks

[#5]

Please share the screenshot of the web page you are getting while trying to access jweb

[#6]

Hi Nellika,

As per requested:

[#7]

Hi,

Do you have any proxy set in the browser? If yes, can you try without it?

Regards,

Vikas

[#8]

Please disable phone-home feature if it is enabled:

delete system phone-home

[#9]

• Can you connect from a different PC?
• Try removing the interface specific command so that you can connect over any interface:

# delete system services web-management https interface fxp0.0

• Please confirm if the access works over http only.
• Can you clear the cookies in your browser and try a different browser as well.

[#10]

Can you check/share "httpd.log" (> show log httpd.log) and see if there are any errors?

Can you also try changing the port number as below.

set system services web-management http port 8080
set system services web-management https port 4443
set system services web-management https system-generated-certificate

commit

then access jweb on these ports?

[#11 · Accepted solution]

Hi rsuraj,

Your method is work !!! ... Thanks

[#12]

Great, can you mark the suggestion as accepted solution please. I guess you marked your comment as solution.