SRX VPN and NAT
We are starting to provide preconfigured SRX100s to our clients to securely connect to our hosted datacenter over IPSEC.We would like to isolate the networks on both sides from IP conflicts. We would...
View ArticleSimultaneous DHCP client & server on SRX
Hey folks, In many use cases, people want to be running a DHCP client on a WAN interface & act as a DHCP server on the LAN. JunOS config terminology can be confusing on this, so to clear things...
View ArticleEnhanced Web Filtering (EWF) statistics via SNMP?
Hi, Trying to figureout how to the the statistics that is accessible via CLI:show security utm web-filtering statistics -------------------------------------------------------------------------- UTM...
View ArticleSRX5400 Host 0 Boot from alternate media
I have an SRX5400 that has a minor error syaing "Host 0 Boot from alternate media" usually i'd just run "request system snapshot media internal slice alternate partition "however on the SRX5400 I get:...
View ArticleSRX1400 - SRX1K-SYSIO-XGE - Interfaces won't come up/"device not found"/FPC...
Hello,I have an SRX1400 with SRX1K-RE-12-10, SRX1K-SYSIO-XGE, an SRX3K-NPC and an SRX3k-SPC in it. I'm having a strange issue where the only interface on the SRX1K-SYSIO-XGE that will come up is the...
View Articlenvram: Invalid CRC on Saved Environment
Dear Juniper Team, I have a problem with my SRX100H which is appear error message as below during issue the command commit:=============# commit nvram: Invalid CRC on Saved Environment============...
View Article2 isp and nat
Hello! I have new ISP and want to test it, so I configured routing instance and additional security zone. Everything seems fine so far, but I cant switch nat to second isp.Security zone for second ISP...
View ArticlePPPoE connecting, but no browsing (ping ok)
Hi everyone, I'm trying to configure my SRX210 to connect with PPPoE.. I went through the wizard and i see the connection being established. i can ping a website, however i cannot browse to the same...
View Articleconversion from SSG config to SRX : p2-proposal with no-pfs
Given that the conversion tool ignores this completely, I am having trouble deciphering how to translate this line from my SSG. basically I have this set ike p2-proposal "nopfs-esp-aes256-sha" no-pfs...
View Articlesrx
hello guys,i'm having difficultis getting support fee on srx5800...is it in end of support? it is a very "young" firewall... it seems strange,thanks a lot,andrea
View ArticleProblem with SRX 5800
Hi everyone,I am having a problem with a SRX 5800, we had a energy issue on site and now my cluster show OK but i cant see the status of one routing-engine... show me this error; error: error...
View ArticleSRX Power Button
Hi,Is it possible to disble the power button at all branch models (SRX 100, 210, 220, 240)?Thanks
View Articlesd-syslog timestamp format
Hi, I'm struggling with timestamp on sd-syslog message. It seems they are using ISO8601 timestamp format but the timezone indication is missing. I have timestamp like this : 2016-03-24T14:41:24.806...
View Articleglobal multi-zone policy to junos-host doesn't match
Hello everybody, I'm merging policies using the multi-zone feature of 12.1X47. This allows a global policy to bind to several zones. So I made the following policy. This should replace the firewall on...
View ArticleTrouble with firewall filters
Hello everyone Hoping someone could point me in the right direction. I want to implement some firewall filters to restrict management access to our SRXs. I have followed a number of guides to include...
View Articlefabric physical up ,but Fabric link status: Down . why
show chassis cluster interfaces Control link status: Up Control interfaces: Index Interface Status 0 em0 Up 1 em1 Up Fabric link status: Down Fabric interfaces: Name Child-interface Status...
View ArticleClustering
Hi, I have a SRX650 already running and I bought a new identical SRX650 to do clusturing. What is the process for doing so? Do I need to have down time, or can we configure the new one while the old...
View Articlehow to read total policy on device srx3400
hai all i have device srx3400, i config many zone and policy. but dont know, how see total policy on srx3400. The deviceModel: srx3400JUNOS Software Release [10.4R10.7] Thanks,
View ArticleIDP Direction on SRX
Hi, My understanding says it is more worth to apply IDP only from Untrust to all zones direction as this is direction from where most attacks come from and decrease the amount of traffic processed by...
View ArticleFilesystem full when trying add software on SRX5800
Hello, I am trying to upgrade my SRX5800 chassis's but am getting an error that my /cf filesystem is low of disk sace. This is the eact error: /cf filesystem is low on free disk space. This...
View Article