SSG140 Web, telnet, ssh unreachable, only console enabled

Recently made a network change, found that SSG140 through the web/telnet/ssh can not access, but SNMP monitoring and ping are normal, internal Internet access to a variety of applications are no exception, only can not access the Administration page. The fault has been dealt with today.

1. Failure of various management methods, try to connect ssg140 with console

2. Once the login is successful, first back up the configuration file

Get config > tftp 192.168.1.1 ssg140cfg.txt

3. Check the management configuration information

Get admin get admin manage-ip get int eth0/0

Check that the WEB/TELNET/SSH configuration is correct, the port settings are OK, and the access source address control is not enabled.

4. Try to grab the bag

A. Set the capture filter to record only the required data set Ffilter Src-ip 192.168.1.1

B. Clear the cache record clear db

C. Enable the following debugging functions separately,

Debug Web All/debug admin all/debug Flow All

D. Open the Firewall Web Administration page on the management host

E. Record grab output get db str > TFTP 192.168.1.1 web.log

5. Analysis of Packet capture records

Debug_admin_all (no valid information)

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" image "border=" 0 "alt=" image "src=" http://s3.51cto.com/wyfs02/M00/71/4B/ Wkiom1xktdkgr7tsaaciy4clyg4544.jpg "" 409 "height="/>

Debug_flow_all (no valid information)

650) this.width=650; "Style=" background-image:none; border-bottom:0px; border-left:0px; padding-left:0px; padding-right:0px; border-top:0px; border-right:0px; padding-top:0px "title=" image "border=" 0 "alt=" image "src=" http://s3.51cto.com/wyfs02/M01/71/4B/ Wkiom1xktdyzuckfaad2n58pwc4429.jpg "" 418 "height=" 225 "/>

At this point still did not find the cause of the failure, had to help the network (rip off Google is really better than rowing, many problems boating can not find, Google will not be disappointed), the search found the following connection:

http://www.juniperforum.com/index.php?topic=7884.0

The brother of the article also encountered the same situation, but his version is V6.0.R1, I here is the version of V6.1R2, follow the way to deal with the problem is still.

This is the third encounter, I think the OS version of the problem caused, should be a fixed bug, check the next version of release note estimates will have an answer. Too lazy to check. Because you are rushing to make a change, back up the configuration file again, and then manually restart the firewall command as follows:

Reset Save-config Yes

PS: The firewall restart or fast, about 1 minutes after the completion of the restart and load configuration files, like.

Attach official steps to address this issue

Reference Link: http://kb.juniper.net/InfoCenter/index?page=content&id=KB11363

SSG140 Web, telnet, ssh unreachable, only console enabled