Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: Issue trying to make some zones communicate with Internet

$
0
0

do a show route table <instance-name>.inet0 0.0.0.0/0 extensive for the default route, to see if it is active and working, and if not what is the reason for it.

also look for the next-hop in the default route . Is it on a directly connected network, if not you need to add the resolve keyword to the static route definition.

 

as you still need the next-hop address in the routing table you should update the following with the new and correct next-hop address.

#show policy-options policy-statement TO-PRA
term 1 {
    from {
        instance master;
        protocol direct;
        route-filter YYY.YYY.YYY.YYY/YYY exact; ##this is an old public IP address no longer in use
    }
    then accept;
}
term 2 {
    then reject;
}

regards

 

alexander

 

 

 


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>