SRX

After upgrading an SRX100 router to 12.1X46-D86 i cannot log into it through web gui. I can ssh to it with same accounts though.  I installed it because its currently a jtac recommended version.

Hi,

Kill the httpd process and try to access the device again via web gui.

Eg:

{primary:node0}
root@E_HHA02_EXT_FW01> show system processes extensive | match http     
 1749 nobody      1  96    0  8148K  3604K select   0:00  0.00% httpd
 1741 root        1 106    0  7652K  3008K select   0:00  0.00% httpd-gk

{primary:node0}
root@E_HHA02_EXT_FW01> start shell user root
root@E_HHA02_EXT_FW01% kill -9 1749
root@E_HHA02_EXT_FW01% cli

If it still doesn't work, please let me know the version on the device prior to the upgrade.

Thanks and Regards,

Pradeep Kumar M.

Technically i did as i restarted the router to see if it would fix it.

Tried your suggestion, didn't work.

Hi,

I missed the point that same accounts work for SSH and that you can get to the login page but the credentials just don't work.

Just checked and found the below thread with similar issue which confirms this is a known issue on this specific version without any workarounds.

https://forums.juniper.net/t5/SRX-Services-Gateway/Jweb-Incorrect-user-password-after-Junos-upgrade-on-SRX/td-p/462703

Hope this helps.

Thanks,
Pradeep
Please Mark My Solution Accepted if it Helped, Kudos are Appreciated too!!!

So why is it JTAC recommended software

As the product SRX100B/H is End of Life and End of Support, I doubt if the recommended version will be further updated.

Regards,

Pradeep Kumar M

So this is your excuse for stiffing me with bad firmware?  More encouragement to go to a different vendor for my network equipment in the very near future.

Well, every vendor stops pushing updates at one point. In this case the SRX100B and SRX100H has not been sold since May 2014, more than 5 years ago. Providing software updates after 5 years is usual in this market.

Yes, Juniper apparantly broke J-web in the last maintenance release before the Junos 12.1X46 software train went EoL after 6-7 years but I expect they also fixed other stuff. You can still fully manage your SRX100B/SRX100H via cli why this is seen as a minor bug and not a priority.

So basically my point being: Other vendors are doing exactly the same in regards to EOL and decline bugfixing EOL'ed software.

some of us can manage via cli, some cannot.  I'm just wondering why we are accepting bad firmware from Juniper.  Windows 7 is eol but Microsoft still occasionally patches it.

Post 12.1X46-D66, it has been an Extended support for SRX100B/H series devices which eventually ended with 12.1X46-D86 on 10th May 2019.

FYI, similar end of extended support for Microsoft is Jan 14, 2020.

If J-web is the priority, this issue is not seen on 12.1X46-D82 which is the version prior to 12.1X46-D86. However, before you try 12.1X46-D82, please read through the release notes for the features, functionality, fixes and any known outstanding issues will apply to your specific network and applications.