SRX

Hi all,

I just power on SRX1500 with upgraded junos using 18.4R1. But unfortunately jweb cannot open. On the host-inbound rule i already put permit all. I already restart jweb service but still same. It's look like certificate issue. Is it any specific  browser or PR related to this junos version?

test@srx1500-node0> show configuration system services
ssh {
root-login deny;
}
xnm-clear-text;
netconf {
ssh;
}
dhcp-local-server {
group jdhcp-group {
interface ge-0/0/1.0;
}
}
web-management {
https {
system-generated-certificate;
interface fxp0.0;
}
}

Thanks and appreciate any feedback

Hi,

Have you been able to enable web-management http to check if it works on http and is not a certificate issue?

If http also does not work, I would try to soft-reset the web-management process.

> restart web-management

Regards,

Vikas

Hi kronicklez,

• Is there any specific reason why you suspect a cert issue?
• Can you take a pcap on your PC while connecting to the SRX in order to confirm is the problem is related to TCP or SSL?
• Can you try to connect via an interface different than the fxp0 and/or via http?
• Try deleting the web-management configuration, then try "commit full". The re-add the configuration and try again "commit full".

Hi epaniagua,

I'm already try using fxp and also normal interface. But still failed. Also try delete and add back then do commit full but still failed.

Thanks

Please share the screenshot of the web page you are getting while trying to access jweb

Hi Nellika,

As per requested:

Hi,

Do you have any proxy set in the browser? If yes, can you try without it?

Regards,

Vikas

Please disable phone-home feature if it is enabled:

delete system phone-home

The solution suggested by Nellikka fixed it for me.

• Can you connect from a different PC?
• Try removing the interface specific command so that you can connect over any interface:

# delete system services web-management https interface fxp0.0

• Please confirm if the access works over http only.
• Can you clear the cookies in your browser and try a different browser as well.

Can you check/share "httpd.log" (> show log httpd.log) and see if there are any errors?

Can you also try changing the port number as below.

set system services web-management http port 8080
set system services web-management https port 4443
set system services web-management https system-generated-certificate

commit

then access jweb on these ports?

Hi rsuraj,

Your method is work !!! ... Thanks

Great, can you mark the suggestion as accepted solution please. I guess you marked your comment as solution.