the process "pagezero" is so high in SRX650
Hi, Juniper experts, Since last week, we found the system processes "pagezero" and "flowd_octeon_hm" were so high that caused CPU utilization (CPU Kernal) was so high as below: root@SRX650-A> show...
View ArticleClik here to view.
vLAB IPsec VPN - Policy-based clarification request.
Hello, I am working on vLAB IPsec VPN - Policy-based and found a configuration part I do not understand. The topology is very simple: All working as expected, but the following is unclear to me: Each...
View ArticleRPM probes and IP-monitoring
I'm having a problem with RPM probes and IP-monitoring. I have 2 ISPs and one is primary and one is my backup (separate interfaces) Next hop of primary ISP: 37.66.21.3Next hop of secondary ISP:...
View ArticleSRX 210 - 340
It has been decided that we should be moving from our old srx 210 (sw 12.1x44-D30.4) to our new SRX 340 (sw 19.4R1.10) Being new to Juniper myself, previous experience mainly on Sonicwalls. I'm...
View ArticleIs it safe to delete OS from /var/tmp after upgrade and created a snaptshot?
Hi, Is it safe to delete OS from /var/tmp after upgrade and created a snaptshot? Thank you.
View Articlewhat is command to check the last down time of the deviec( not last booted...
Hi, Please help to find the device last down time not the last booted or up time. Thanks in advance. Regards ..Umesh Sharma | 90077443324
View ArticleHelp with SRX 210 Security rules
Hey AllI'm learning my self JunoOS, and I'm setting up an SRX210I have my laptop connected in fe-0/0/5 and uplink (another router) on ge-0/0/1From my laptop, I can ping/ssh the SRX but I cannot get any...
View ArticleVPN IPsec not ping other segment ip
I am having trouble with VPN IPsec Juniper SRX 300, VPN IPsec was successfully created but cannot ping other segments' ip, how to solve it?
View ArticleSRX WAN interface bandwidth limitation
Hi, We have SRX210HE with Junos 11.4R10 version.We have connected 50 Mbps WAN Link on fe-0/0/6 interface but total interface bandwidthmax 10 Mbps. Their is no limitation configuraed on interface....
View ArticleSRX 240 Dynamic VPN works sometimes and only on certain IPs
Hi, I was able to get Dynamic VPN to work on an SRX240 running 12.1 but I had it replaced with an H2 running 12.3X48-D75.4 and I'm finding something odd. I suppose it was behaving similar before...
View ArticleClik here to view.
Dynamic VPN IPsec not ping other segment ip
I am having trouble with Dynamic VPN IPsec Juniper SRX , Dynamic VPN IPsec was successfully created but cannot ping other segments' ip, how to solve it? can't ping segments on the vpn dynamic client...
View Articleenhanced Web Filtering with a scheduler
Hello Guys, I need your help.I have made enhanced Web Filtering with a scheduler for access but it does not work, what configuration I have missed.thanks. The following configuration that I made...
View ArticleJuniper SRX cluster tagging issue
Dear Friends, I have aproblem with juniper SRX 650 cluister issue(PFA) - "Control port disabled"Since my primary node was node0 and some hardware failure happened and its switched to node1.we replaced...
View ArticleCannot use Netflix from internal zone interface vlan.0, but Youtube is...
Hello everyone My host is a smart tv. Netflix is working from ge-0/0/1.0 interface (internal zone). I am trying to use the spare switch ports on my SRX 240 to extend wired network capabilities. I have...
View ArticleHelp with source NAT for home SRX
I'm trying to set up an SRX for a home ISP connection. I'm able to ping out from the SRX and can ping devices within the LAN but can't get out from devices on the LAN. I'm pretty sure it's an issue...
View Articlepacket loss and high response time for some computers through vpn tunnel...
We are experiencing a strange behavior for a VPN tunnel between srx100 and Palo alto firewall. SRX firewall is in branch and Paloalto firewall in HO. Some users behind Srx are complaining of packet...
View Article[SRX550, 12.1X44] issue when test failover
Hello,i think i encounter some issue when doing failover test.My 1st scenario is to shutdown/disable interface 3/1/3 in CS-A.The result of "show chassis cluster status" is as expected, but ping to...
View ArticleIs virtual channel bandwidth shared among interfaces?
If I apply the same VC group (virtual-channel-groups) to multiple interfaces, does they share shaper bandwidth? Or maybe shaper quotas are separate for every one of the interfaces? Or maybe this is...
View ArticleUnique dhcp-attributes on SRX using JDHCP (new daemon) Server
Folks, I have an older SRX that uses the old style DHCP configuration under system->services->dhcp and it works great. I have some static bindings that have a unique DNS server required for my...
View ArticleUse non-standard port for Dynamic VPN?
When I was having trouble with accessing my protected resources using the Pulse Client I decided to try Pulse Secure's Pulse Connect Secure. It works but I have to choose between PCS or Dynamic VPN. I...
View Article