Junos OS

All,

I recently upgraded my SRX320 to Junos15.1X49-D130 from 15.1X49-D70 .. I then factory reset the device using the pinhole (previous config was not working and wanted to start from scratch). Now the device displays a message "DEVICE CANNOT CONNECT" even though it hands out the IP address (192.168.1.1 GW)

Thanks for the reply Rahul! Initially it does ask for a password to be configured. I enter a password .. then wait on the screen "Skipping to JWEB .. Please refresh the page after some time". It eventually goes to a login screen where I enter the username 'root' and the password I created previously & access is denied. ;\ Is the admin username different than 'root' now?

After a full reset I would use the console port with the user root and no password to access the device.

Once in here you can set the root password and get in by other methods.

set system root-authentication plain-text-password

Steve,

I SSH into the device using putty after a reset. Username 'root' & no password "access denied".

Any other ideas?

Update to this .. I eventually got into the device. My password had a $ symbol in it ... after changing to strictly alpha numeric password it worked ... *face meet palm* 8-) .

I just ran into this today with a brand-new SRX320 only three days old. Maybe the difference is I also noticed the message "Device record not found (ERROR 701)" and "Device connecting (INFO 801)".

This was very much like the initial user said; ronjonp. I wanted to start from scratch so I factory defaulted it with the exception I did mine through the CLI. I was able to get back into the J-Web after clicking the skip and entering the password. However, it looks like this is a phone home process that's really annoying.

Is there a way to shut this off?

Also, I even had to reinstall the software because for some reason it became corrupted. I turned the device off by the button for the night. Turned it back on the next morning and presto! Corruption.

I'm using version 15.1X49-D140.2

Respectfully.

I'd be curious to know an answer to SRXNEWGUY question, any one?

you can deactivate phone-home and autoinstallation by removing the system autoinstallation and system phone-home stanza's via cli:

configure
delete system phone-home
delete system autoinstallation
commit and-quit

Regarding fule system corruption; The SRX300 series have two root partitions in case one breaks due to improper shutdown or similar. The guideline states that you preferable should power down the device and not just remove the power plug.

But: If you have the same software on both partitions it should just boot on the alternate one and you can then sync the software via the command 'request system snapshot slice alternate' and verify status via 'show system snapshot media internal';

user@fw> show system snapshot media internal
Information for snapshot on       internal (/dev/da0s1a) (primary)
Creation date: Jul 27 16:37:37 2018
JUNOS version on snapshot:
  junos  : 18.2R1.9
Information for snapshot on       internal (/dev/da0s2a) (backup)
Creation date: Aug 12 10:50:18 2018
JUNOS version on snapshot:
  junos  : 18.2R1.9

More about dual root on SRX devices can be found here:

https://www.juniper.net/documentation/en_US/junos/topics/concept/security-dual-root-partitioning-scheme-overview.html

I hope this clarifies.

delete system phone-home

configuredelete system phone-homedelete system autoinstallationcommit and-quit

user@fw> show system snapshot media internalInformation for snapshot on       internal (/dev/da0s1a) (primary)Creation date: Jul 27 16:37:37 2018JUNOS version on snapshot:  junos  : 18.2R1.9Information for snapshot on       internal (/dev/da0s2a) (backup)Creation date: Aug 12 10:50:18 2018JUNOS version on snapshot:  junos  : 18.2R1.9