Re: New install - Testing worked, implementation broke

Hi,

you should just configure both external IPs with the /29 instead of /32 - if you use the /32 mask, then next-hop for you comcast connection isn't reachable.

Your interface should look something similar to this. The preferred option is to define which IP the SRX itself will initiate connections from.

interfaces {
    ge-0/0/0 {
        unit 0 {
            family inet {
                address x.x.x.148/29;
                address x.x.x.145/29 preferred;
            }
        }
    }

On a side note, this could also be solved by utilizing proxy-arp to avoid configuring multiple IP's on the interface. Example-configuration of proxy-arp: https://kb.juniper.net/InfoCenter/index?page=content&id=KB21785