1. are you able to ping gateway .125 from SRX?
2. are you able to ping 4.2.2.2 from SRX
3. can you see proper arp entries on srx "show arp"
4. "show security flow session status" and make sure ipv4 is not drop
5. try "commit full" and check the behavior
2. are you able to ping 4.2.2.2 from SRX
3. can you see proper arp entries on srx "show arp"
4. "show security flow session status" and make sure ipv4 is not drop
5. try "commit full" and check the behavior