SRX Services Gateway
Highlighted
SRX Services Gateway

SRX 340 CONSOLE PORT

‎07-16-2019 01:09 AM

Hi all,

 

On SRX340 front panel, there are two console ports, i.e Serial Port (Ethernet) + Mini USB.

I would like to disable the Mini USB without disable the Serial Port.

Is it possible?

Kindly share the command to do so.

 

I only manage to find the command to disable CONSOLE, instead of disable CONSOLE port seperately.

 

Thank you.

6 REPLIES 6
SRX Services Gateway

Re: SRX 340 CONSOLE PORT

‎07-16-2019 03:00 AM

I don't have a srx300 series to test but there is a command to set the console port type when both the usb and rj45 are on a device.

 

https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/console-port-type-ex-ser...

 

But it does seem like it might be expecting the reverse of what you want enabling usb not rj45.

 

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
SRX Services Gateway

Re: SRX 340 CONSOLE PORT

‎07-16-2019 05:19 AM

Hi dt1987,

 

If above command isn't working on your SRX, try this, however know this might disable the generic USB storage port too.

set system processes usb-control disable

https://www.juniper.net/documentation/en_US/junos/topics/reference/configuration-statement/usb-contr...

 

Hope this helps.

Regards,
-r.

--------------------------------------------------

If this solves your problem, please mark this post as "Accepted Solution."
Kudos are always appreciated Smiley Happy.

SRX Services Gateway

Re: SRX 340 CONSOLE PORT

‎07-16-2019 02:10 PM

You can also look for the following document for securing console port Access, This might help you to solve the required purpose without disabling the port.

 

https://www.juniper.net/documentation/en_US/junos/topics/task/configuration/security-securing-consol...

 

 

SRX Services Gateway

Re: SRX 340 CONSOLE PORT

‎07-17-2019 01:03 AM

Hi,

 

Is it on MX240 we still can disable the USB port on RE?

 

Thanks

 

SRX Services Gateway

Re: SRX 340 CONSOLE PORT

‎07-17-2019 02:32 AM

Did a quick test on an mx240 and the hierarchy system processes is there hidden but usb-control is not a valid option.

 

Steve Puluka BSEET - Juniper Ambassador
IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
http://puluka.com/home
SRX Services Gateway

Re: SRX 340 CONSOLE PORT

2 weeks ago

Hi,

 

You can disable Mini-USB ports on the SRX Series Services Gateway to block users from connecting a USB mass storage device to the services gateway or services router. When you disables the device, any transactions in progress on the USB device are aborted.

set chassis usb storage disable

 

Enabling the same back:-

delete chassis usb storage disable

 

Checking the status:-

show chassis usb storage

 

Note:- Juniper Techpub Documentation for the same is under process.

 

Regards,

Rahul

Regards,
Rahul