SRX300 HA with dual ISP problem
Hi I have two SRX300. I can now configure them in HA mode with dual ISP. However, i dont know how to configure them into auto fail over when BOTH ISP link are down. Please help RegardsAnthony
View ArticleDoes reordering of address-book entries trigger service interruption?
Hi all, during some tests with our SRX devices i could oberserve that sometimes a change of just one line in the address-book could cause something of a reordering of address-book elements. I wonder if...
View ArticlePrimary node should master after failover
Hi, We have 2 Juniper SRX 340 firewall. OS version is 15.1X49-D75.5 reth0 and reth1 assigned to untrust zone(ISP), reth 2 assigned to trust zone(Internal LAN) Below are the two issue observed. 1)...
View ArticleBlock outbound / inbound GRE
Hi experts,I have two cisco routers and one Juniper SRX. The topology goes as such with no nat just routing but the SRX still in security mode and everything from untrust to wan goes through the SRX...
View ArticleDHCP, SRX320 and out of my depth (SOLVED)
Hello All,I'm sure someone will look at this for about ten seconds and spot my issue. So if you're out there, I appreciate your help in advance. This is my first foray in to Junos/SRX as I'm replacing...
View ArticleDestination NAT Failing
I have two destination NAT rules into my Internal subnet for HTTPS and SMTP that are failing. I have two similar rules into my DMZ subnet for HTTP and FTP that are working. I appear to be getting...
View ArticleSRX Cluster - Dual ISP - Single VPN & Failover
Hi All Wonder if anyone has had any experience with setting up an SRX 300 series (we are using SRX300s and 320s) cluster, with dual ISP, but with a single VPN that is able to failover to 2 possible...
View ArticleSRX PBR into a routing-instance
Hi All,i have a routing-instance type virtual-router with 6 interfaces: reth0.10reth0.20reth0.30reth0.40reth0.50reth0.60 I have a lot of static routes using the reth0.60 as egress interface, but the ip...
View ArticleChanging VLAN id on SRX650
We have requirement that to change all the vlan numbers which are exists on SRX 650 firewall,Just wanted to confirm with you on below commands and would there be any other effect with this change ?...
View ArticleUnable to access some URL
Hi, Please find attached Juniper SRX BGP HA configuration.(Reth interface are in packet mode) BGP status is "Established" on both ISP link.Some internet link are accessible DNS not configured on...
View ArticleSRX320 - Can't get SNMP working
Hello,I'm having some difficulties in getting SNMP working from the untrust side.I'm trying to get PING, SSH, and SNMP working over the internet connection (at-2/0/0)What I'm trying to accomplish...
View Articleset admin manager ip in Junos
Is there any tips on how to configure set admin manager ip in Junos?
View ArticleSRX DHCP-Server "DualStack" IPv4 & IPv6
Hello, i would use the SRX 340 "JUNOS 15.1X49-D70.3 " as a DHCP-Server for v4 and v6 in a Vlan. The SRX has 1 Interface in this Vlan and i configure a Pool for v4 and v6 under "Access >...
View Articlehow do i see if a security screen has been triggered?
I got a security screen that limits sessions to 2000, how do i see if that screen is triggered? Thanks set security screen ids-option protect-by-drop limit-session source-ip-based 2000
View ArticleClik here to view.
SRX300 - Practicalities
Warning Likely To Contain Dumb QuestionsI am looking to upgrade the network hardware for my home office. I have spent my life designing, programming and implementing systems. I’ve even done my time in...
View ArticlePersistent NAT fail
woud someone please explain why this lab isnot working when i ping i find persistent NAT is not working [edit security policies]root# show from-zone public to-zone local { policy 1 { match {...
View ArticleDNS set to 0.0.0.0
I'm in the process of upgrading SSG to a SRX and reviewing the confguration there is a seconndary dns as set host dns3 0.0.0.0 and a backp ntp server set ntp server backup1 "0.0.0.0". I need some...
View ArticleDNS and NTP
I'm in the process of upgrading SSG to a SRX and reviewing the confguration there is a seconndary dns as set host dns3 0.0.0.0 and a backp ntp server set ntp server backup1 "0.0.0.0". I need some...
View ArticleSecondary internet line config
Hi guys, we have two srx 550s set up with vrrp for failover, we have a main internet line and its taken a while for the business to order the second one. So now i have to get the two working, i think i...
View ArticleQos Issues
Hi Everyone,I am new to the QOS world, so I want to ask all of you for some help with a current Issue I am having with a Customer (Work in a SP), we currently are having issues with a specific...
View Article