SRX

Hello? Everyone

I've upgarded srx210 to [JUNOS 9.6R2.11] from JUNOS 9.5 via http.

I configrued ge-0/0/0.0 unit 0 family inet address 192.168.1.1/24 for web management between my computer.

After rebooting and i configured "load factory-default" and set system root password. And then it showed as the below after comming check.

==================================================

[edit]
root# load factory-default
warning: activating factory configuration

[edit]
root# set system root-authentication plain-text-password
New password:
Retype new password:

[edit]
root# commit check
[edit security policies from-zone trust to-zone]
  'trust'
    Security zone must be defined
[edit security policies from-zone trust to-zone trust to-zone]
  'to-zone trust'
    Security zone must be defined
[edit security policies from-zone trust to-zone untrust]
  'trust'
    Security zone must be defined
[edit security policies from-zone trust to-zone untrust to-zone]
  'to-zone untrust'
    Security zone must be defined
[edit security policies from-zone untrust to-zone trust]
  'untrust'
    Security zone must be defined
[edit security policies from-zone untrust to-zone trust to-zone]
  'to-zone trust'
    Security zone must be defined
error: configuration check-out failed: (statements constraint check failed)

[edit]
root#

==================================================

I just have practiced SRX device and not much knowledge now. I hope you let me know what i should do it

Thank you

Best Regards

Jeff D. LEE

Post your whole config. Seems strange that you activate factory default and get these errors.

Regards,

Dominik

Hi~ Dominik

I am Jeff LEE

I attached the files that you request.

Thank you for your help

Jeff D. LEE

Attachment(s)

configuration_and_infos.txt   6 KB 1 version

Hi Jeff,

at a brief look, your config seems right. It must confess, I haven't seen such an error before that one can't commit a factory default config where SRX complains about missing zone definitions that are still present.

One thing that might play a role is that 9.6 is a pretty old release that might have had a bug. It could be worth upgrading. Also of course, you could try what happens if you reset the device by pressing the config button for 15 seconds. That should also restore factory default.

Another, but more brutal method, would be deleting the config files from the /config directory by using the shell. But it doesn't change anything that this is, as you already mentioned in your previous post, a strange behavior...

Regards,

Dominik

Hello? Dominik

Thank you for your sincere answers and attitute.

That situation did not occur after i upgrade software to 10.0 version

Thank you again

Jeff LEE

hi guys,

I have a similar problem with the same device (SRX210-hm) from the web interface.

It turns out that when trying to delete a rule in "security-policy elements-address book"system throws me the following error:

Delivery Configuration status: Failed
Click on 'Details' for more information

There Were error (s) Delivering the configuration.

Error (s):
'Pruebas_internas'

1) Must Be referenced address address-book defined under
2) commit failed (check constraint statements failed)

In short, I can not delete my rules, I can add and edit, but to eliminate sending me the above error.

Appreciate any assistance.

Ronald

hi sir can you help me with this please, i attached my current config sir, and still im having this error.