Hi Forum,
I am new to Junos and the SRX...I am having a difficult time configuringn my first SRX using J-web and hopefully someone can take a look at the attached configuration and see what I am doing wrong? I have changed the actuall outside address for illustration on here but the rest should be self explanatory. Here is the general requirement and the problems I am having.
Requirements:
1. The SRX is connected to ISP's Cisco edge router. The provider does not offer DHCP for the interface nor do they DHCP DNS servers. The gateway address for the ISP's port is 14.125.127.225. I have a /27 subnet available to me and statically assigned.
2. I have an internal web server on 10.10.1.32:8080 that needs to be exposed to the Internet zone and listen from the outside world on any protocol.
3. I have an internal RDP server at 10.10.1.30 that needs to be exposed to the Internet zone and listen to the outside world on any protocol. The port it needs to listen to is 3389.
4. The ISP interface on the SRX is 14.125.127.226 GE0.0.0
5. The Dest NAT and interface for the web server is 14.125.127.227:8080 to 10.10.1.32:8080 GE0.0.2-GE0.0.7
6. The Dest NAT and interface for the RDP server is 14.125.127.227:3389 to 10.10.1.30:3389 GE0.0.2-GE0.0.7
7. I am reserving GE0.0.1 for a Juniper EX3400 switch which I have on order.
Problems I am having:
1. I have tried multiple configs to get the outside world to see these inside servers in the 10.10.1.X internal zone with no luck. Even gone as far as applying any to any statements in any direction and zones and rules as you can see.
2. The management port is on 192.168.1.5 and while I can "see" the internet from the 10.10.X.X. space, the management interface or the SRX cannot see the device to download the authorization keys for the various security services.
Can someone please take a look and provide any and all assistacne to get this SRX to operate and my servers to be seen from the outside world? Thank you in advance...!