Static Nat Return traffic not Nat'ing
Hi all, I have an issue / question that I was hoping the community could assist with. I have logged it with JTAC already and they are saying "hmmm it should work, we need to investigate further" but I...
View ArticleNAT and VPN
I have this huge confusion that i need to clear for sure. 1)in policy base vpn. we have policies that describe the proxy-ids. all went well, policy match and it went through the tunnell.Now reverse...
View ArticleUTM Firewall - One-Arm deployment
Hi, I want to transfer all HTTP traffic to another UTM-firewall running UTM licenses. -Core-firewall is conencted to internet. -All HTTP traffic originated from trust is to be scanned before...
View Article6in4 Flow-Based Tunnel in Junos 12.1
I've got an SRX100 at home running 12.1X46-D40.2. I'm trying to setup a flow-based 6in4 tunnel to HurricaneElectric. However, I'm unable to ping across to the IPv6 server which is my IPv6 next-hop. I...
View ArticleDSPC Re-Write on Some But Not Others
I am looking for a method to re-write DSPC values on an interface, but not to re-write other packets. My testing experience has been that it is re-write all or none. Can some one provide some...
View ArticleDoes 10G XFP of SRX supports 10G SPF+ of QFX
hey hi, My question is .. i have inserted 10G xfp to SRX3K-2XGE-XFP and have inserted 10G sfp to QFX4300. Connection of both the device is done with fiber cable. so does 10G xfp of SRX supports 10G...
View ArticleAdding public ip to relay server
Hi, How to add public ip to my relay server? where should i configure?
View ArticleSRX with loadbalacling and RPM failover
HiHope someone can share their experience. I have a single SRX with two ECMP routes to two ISP's. One ISP public interface is in the default inet table and the other ISP-2 in its own RI. Interface...
View ArticleIDP Configuration
Hello, I am in the process of configuring a firewall with IDP, I have installed the licence key but now looking at the other steps but there are a few questions I have. The firewall is running in...
View ArticleUnable to pass IPv6 through SRX 210
Hello all. We have a dual stack network, i.e. both IPv4 and IPv6.The SRX sits as a perimeter firewall, between Internet and LAN.I can pass IPv4 traffic through it just fine.But cannot pass IPv6 traffic...
View ArticleRandom Timeout for 10 seconds - SRX240H
We have a clustered SRX 240H setup and something seems to be happening once a week. The Juniper devices stops responding. We are unable to ping or SSH to it whilst in this state. The device is not...
View ArticleDestination NAT Problem
I use a SRX 210. A server is mapped into a public IP by destination NAT. But we holp we can connect this server's public IP from inside, how should I configure? Thanks.
View ArticleDnat with policy based vpn
Hi al, this particular config is bothering me alot. set security policies from-zone untrust to-zone DMZ policy test-in match source-address x.x.242.48/32 set security policies from-zone untrust...
View ArticleSRX 5600 Junos OS 64bit?
Hi, Some body can tell me if I can install a SRX 5600 FW with Junos OS 64 bit ?
View ArticleSRX 1400 Chassis Cluster
Hi experts, For the SRX1400 chassis cluster, is there any limiting conditions that the port quantity of the control link and fabric link. eg. Is allowed we have ge-0/0/10 and ge-0/0/11 used as control...
View ArticleSRX 220 HA requirement ?
Hi everyone, How are you doing? I have one question relate to upgrade SRX standalone to become Chasis Cluster.my issue is i am not clear relate to "license key". in the requirement, both device must be...
View ArticleClik here to view.
SRX210 & PPPoE - works on some lines but not on customer's line
I've been setting up an SRX210 for a client, and in the office I've had it hooked up to our BT OPenReach VDSL2 modem - PPPoE working fine.When we went ot the customer's premises (BT ADSL2+), I used a...
View Articleset up SRX 550 cluster as DHCP server
I'm having some issues setting up an SRX 550 cluster as a dhcp server and I was hoping someone can fill me in on what I am missing? Many thanks in advance {primary:node0}root@srx-550-fw1> show...
View ArticleHow do I configure DHCP option 43 byte-stream with the new JDHCP service
Hi, I've used DHCP option 43 in the past on an SRX to send a vendor specific string as a byte-stream. Here is an example. set system services dhcp option 43 byte-stream "105 100 58 105 112 112 104 111...
View ArticleSRX 240 Dynamic VPN
--- JUNOS 12.1X47-D30.4 built 2015-11-13 14:16:02 UTCfailed to receive http response 1454 I once had this working and then I believe the juniper pulse split happened and I have not been able to connect...
View Article