Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
ON THIS PAGE
 

Access the J-Web User Interface

Prerequisites for Using J-Web

To access the J-Web interface for all SRX Series Firewalls, your management device requires the following software:

  • Supported browsers—Mozilla Firefox and Google Chrome.

    Note:

    By default, you establish a J-Web session through an HTTPS-enabled Web browser.

    Microsoft ended Internet Explorer support in June 2022. Therefore, starting with Junos OS Release 22.4R1 or later, J-Web UI is not supported in Internet Explorer.

  • Language support— English-version browsers.

Log in to J-Web

Note:

This document assumes that you are accessing the device to launch J-Web for the first time using a factory default configuration. If your SRX Series Firewall is already configured with a management IP address, you simply point your browser to the device's management address to access J-Web.

The factory default settings vary between SRX Series Firewalls. In addition, some SRX Series Firewalls have interface while others use a revenue (network interface) port for Ethernet based management. When running a factory default configuration SRX 300 and 500 Series devices typically provide DHCP services on specific network interface ports that are enabled for host management access.

On SRX Series Firewalls with a dedicated management interface, DHCP services may or may not be present in the factory default. Some devices provide DHCP server functions on the dedicated management interface (fxp0). When using a device that does not offer DHCP services, for example an SRX5400, you must ensure the management device has a compatible IP address. This address can be manually assigned or be allocated by an external DHCP server on the management network.

Table 1 provides the factory defaults relating to J-Web access for SRX Series Firewalls. If your SRX Series Firewall is not listed, refer to the corresponding hardware guide for details on the factory defaults.

Table 1: SRX Series Firewall Factory Defaults Relating to J-Web Access

SRX Series Firewall

Management Interface

DHCP Server Ports

DHCP Subnet

J-Web Server IP

SRX300, SRX320

ge-0/0/1 through ge-0/0/6

ge-0/0/1 through ge-0/0/6

192.168.1.0/24

192.168.1.1

SRX340, SRX345

MGMT/fxp0

fxp0

192.168.1.0/24

192.168.1.1

ge-0/0/1 through ge-0/0/14

192.168.2.0/24

192.168.2.1

SRX380

MGMT/fxp0

fxp0

192.168.1.0/24

192.168.1.1

ge-0/0/1 through ge-0/0/18

192.168.2.0/24

192.168.2.1

SRX550 HM

ge-0/0/1 through ge-0/0/5

ge-0/0/1 through ge-0/0/5

192.168.1.0/24 through 192.168.5.0/24

192.168.1.1 through 192.168.5.1

SRX1500

MGMT/fxp0

ge-0/0/1

192.168.2.0/24

192.168.1.1 192.168.2.1, 192.168.3.1, or 192.168.4.1

SRX1600

MGMT/fxp0

ge-0/0/1

192.168.2.0/24

192.168.1.1 or 192.168.2.1
SRX2300, SRX4300

MGMT/fxp0

 mge-0/0/1 192.168.2.0/24

192.168.1.1 or 192.168.2.1

SRX4100, SRX4200

MGMT/fxp0

NA

NA

192.168.1.1

SRX4600

MGMT/fxp0

xe-1/1/1

 NA (no DHCP address pool in the default configuration)

192.168.1.1

SRX5400, SRX5600, SRX5800

MGMT/fxp0

NA

NA

192.168.1.1

vSRX Virtual Firewall

fxp0

NA

NA

NA

To log into the J-Web interface on a new device:

  1. Connect the appropriate Ethernet network port on your device to the Ethernet port on the management device (laptop or PC), using an RJ-45 cable. See Table 1.
  2. If you are using an SRX Series Firewall that provides DHCP services for the management device, confirm that the management device successfully acquires an IP address from the SRX Series Firewall. When using an SRX Series Firewall that does not provide DHCP services for the management device, you must manually configure the management device with a compatible IP address. See Table 1.
  3. Open a browser and enter https://<IP address> in the address bar.

    Where, <IP address> is the IP address of the SRX Series Firewall.

    Note:

    In a factory default configuration, a self-signed certificate is used to support the HTTPS connection. You can safely accept the security exception to perform initial configuration.

    As the device is running a factory default configuration, the J-Web Setup Wizard screen opens. See Figure 1.

    Figure 1: J-Web Setup Wizard Page J-Web Setup Wizard Page

    Two examples are given to better illustrate the use of the information in Table 1:

    1. You have an SRX380 device:

      1. You connect your management PC, which is configured for DHCP address assignment, to the fxp0 port, or to port ge-0/0/1 through ge-0/0/18.

      2. If connected to the fxp0 port, you access J-Web at https://192.168.1.1.

      3. If connected to ge-0/0/1 through ge-0/0/18, you access J-Web at https://192.168.2.1.

    2. You have an SRX5400 device:

      1. You connect your management PC, which is statically configured with an IP address from 192.168.1.0/24 subnet, to the fxp0 port.

        Note:

        The static IP address assignment cannot use 192.168.1.1 for fxp0 on the management subnet as the SRX Series Firewall uses this IP address.

      2. You access J-Web at https://192.168.1.1.

        After a successful user login, J-Web opens the Basic settings page.

  4. Optional. If you do not want to perform the initial configuration, then:

    1. Click Skip Setup.

      The J-Web Device Password screen appears. See Figure 2.

      Figure 2: Device Password Device Password

    2. Enter the root password.

    3. Click OK.

      The password is committed to the device and the J-Web login page appears.

    4. Enter the username and password again and click Log In.

      The J-Web application window appears.

      Note:

      You can choose Device Administration > Reset Configuration through the J-Web menu to reset and reconfigure the SRX Series Firewall.

Congratulations! Now that you have access to the J-Web interface, you are ready to use J-Web to configure, manage, and monitor your SRX device.