HTTP and SSH Issue
Hi, Sorry for disturbing you guys again with what may be an easily resolved issue.... I have checked everything I can with regards to this issue and am now at a loss (with no ability to wireshark):As I...
View ArticleSource-based routing configuration issue
Hi guys, I'm not able to configure a source-based routing and it's driving me crazy!Scenario: I have 2 IPSec tunnels, st0.1 and st0.2, the remote local address on both ends is the same, 10.70.78.0/23I...
View Articlehttps stopped working on my SRX240 Cluster
Hi All, A few years back I had setup https for my SRX 240 cluster of 2 nodes by the following commands # Enable https/http/sshset system services sshset security zones security-zone untrust interfaces...
View ArticleSRX300 ISP JDHCP PROBLEME.
We have a srx300 trying to get a DHCP IP address from a modem. The problem is that we get a local IP address in our interface when we force the DHCP Renew. EX: 192.168.100.2 We tried to make a clear:...
View ArticleCan't make bgp advertisement to work on srx320
hi,not sure what is happing here, it is working on srx220 even without the accept at the end.Model: srx320Junos: 15.1X49-D75.5JUNOS Software Release [15.1X49-D75.5] i'm trying to advertise my ebgp...
View ArticleManagement access through fxp
Hi, We have SRX340 in cluster. Please find below configuration and suggest best practice for management insterface(available on the chassis)set version 15.1X49-D120.3set groups node0 system host-name...
View ArticleHA Failover for SRX 1500 Not Working with Ungraceful Shutdown
Hello, We have two SRX 1500's (node 0 and node 1) in an HA configuration.We recently expereinced an issue where the primary node, node 0, was powered down ungracefully (power failure) and Node 0 never...
View ArticleWhat interface should I apply CoS config to - pp0 or underlaying ethernet...
With current CoS implementation on SRX300 15.1X49-D120, what interface should I apply CoS config to - pp0 or underlaying ethernet interface (ge-)? Common configuration for both scenarios:ge-0/0/3 {...
View ArticleAsymmetric route in same zone are blocked
Hi,I have two SRX 220 and 320 setups in VRRP and VPN to another remote location with DPD and failover.so in the remote location, there is one VPN set with two IP of both SRX1 and SRX2 and DPD that...
View ArticleClik here to view.
SRX1400 - large number of hosts, SNAT allocation failure, TCP retransmission
I'm kind new here, however I'm been studying SRX JunOS for about 6 months, and sometimes I find some caveats and this forum still being my support, and I'm thankful for that and the effort of the...
View ArticleConfusion on SSH and PAM in SRX
Hi Folks, I've spent a fair bit of yesterday and today playing around with this. Have reached some confusing conclusions. Here the snippet from SRX cli, Using keyboard-interactive...
View ArticleRegarding troubleshooting command for SRX
Hi, Can any one let me know what does below command means ? "op find-security-zone ip 1.1.1.1 | grep ABC " (where ABC is the zone name). Thnaks in advance
View Article"How to Set Up Your SRX320 Services Gateway" bears no resemblance to reality?
I have a brand new SRX320. I pulled it out, assembled it, plugged it in, and attempted to follow the "How to Set Up Your SRX320 Services Gateway". I got a 192.168.1.2 address on port 5--which is *NOT*...
View ArticlesFlow and NetFlow impacts on juniperSRX3400
I intend to deploy sFlow or NetFlow impact on my juniperSRX3400.Can you tell me the impact of sFlow and NetFlow on my device performance like : CPU, RAM...Which one should I choose?Thank you!
View Articlehow to check routing-instance forwarding type?
Hi there, i would like to ask. Since SRX able to make Policy Based Routing (they call it as Forwarding Based Filter), it is able to forward traffic through routing table that has be set up at...
View ArticleStatic routes randomly stop working via VPN IPSec tunnel
Hi, We have a VPN tunnel between two of our offices and one of the SRX's is playing up.On one side we have an SRX240H running 12.1X46-D67 and on the other side is a SRX210HE running 12.1X46-D40.2. The...
View ArticleBUY FAKE PASSPORT (superiorfalsodocs017@gmail.com),COUNTERFEIT...
BUY FAKE PASSPORT (superiorfalsodocs017@gmail.com),COUNTERFEIT MONEY,HOLOGRAMS,FALSE DRIVING LICENSE, FALSE ID CARD.We are a team of professionals with many years of experience in producing COUNTERFEIT...
View ArticleAccess between Security Zones
Dear Forum I get nuts with my problem. Maybe you can give me some hints.We use a SRX 340 (15.1X49-D120.3)There are the Internal Security Zone (irb.10) and the Wlan Security Zone (irb.20).From Wlan...
View ArticleClik here to view.
SRX HA Design
Hello Experts, I am newbie to Juniper world. I have a question about setting up a HA parir SRX cluster.I have planning to do a setup like this. First thing I wanted to know is whether this is a valid...
View ArticleJuniper SRX1500 SSL Proxy capture decrypted traffic
Hi, I've go Juniper SRX1500 with SSL Proxy up and running. I've imported the sertificate to my OS and I can see that my srx1500 signs the certificates and everything works. Also works URL filtering...
View Article