Betreff: srx210 connect to IP camera auto disconnect after 3 mins
Hi, this looks good. Can you provide the complete Ruleset from-zone trust to-zone untrust-hkbn? I think there is apolicy above IPCamer-test that already matches and therefore making IPCamer-test...
View ArticleBetreff: srx210 connect to IP camera auto disconnect after 3 mins
from-zone trust to-zone untrust-hkbn { policy IPCamer-test { match { source-address staff_192.168.0.55; destination-address any; application IPCamera; } then { permit; } } inactive: policy...
View ArticleSRX source based routing through VPN
Hello, i have this topology and i need to seperate all traffic from site A and B to different ISP. All site A traffic must go to ISP1 and site B traffic must go to ISP2. All traffic from sites go to...
View ArticleRe: SRX to SSG site to site VPN (multiple remote subnets)
Hello, One policy pair will be from Trust to Untrust & untrust to trust with single source & destination subnets in it.Other policy pair should be from DMZ to untrust & untrust to DMZ with...
View ArticleClik here to view.
Re: SRX to SSG site to site VPN (multiple remote subnets)
Hello, I tried to configure, but hit this error. I configure both policies under Ipsec VPN with Pair Policy Am I misconfiguring somewhere? Thanks
View ArticleRe: SRX to SSG site to site VPN (multiple remote subnets)
Hi, Do you have 2 policies with the same name in the same zone context? Regards,Anand
View ArticleClik here to view.
Re: SRX to SSG site to site VPN (multiple remote subnets)
Half-way to Goal. I tried to ping from 192.168.96.0/24 & 172.16.0.x devices to 192.168.193.1.It works. However, devices from 192.168.193.1 firewall or other deviecs cannot ping to 192.168.96.0/24...
View ArticleRe: SRX source based routing through VPN
rtilak wrote:Hello, You have two ISPs so I am assuming you have one IPSec VPN to peer per ISP. Is that correct?If so you can put one tunnel interface(for one VPN) and ISP1 facing interface in one...
View ArticleClik here to view.
Re: SRX to SSG site to site VPN (multiple remote subnets)
Hello, I have configured below no source NAT and only a default route pointing to gateway Thanks
View ArticleRe: SRX source based routing through VPN
Hello, So VPN is not terminated on SRX is it? And is SRX just a passthrough for the encrypted traffic (ESP or UDP4500)? Regards, Rushi
View ArticleRe: SRX source based routing through VPN
So VPN is not terminated on SRX is it? And is SRX just a passthrough for the encrypted traffic (ESP or UDP4500)? No, VPN is terminated on SRX. (UDP 500) VPN is made between SRX 100 and draytek Vigor...
View ArticleRe: SRX source based routing through VPN
Hello, So site A traffic will be encrypted by same tunnel as Site B traffic?And you want to make sure that encrypted traffic from Site A takes ISP1 to reach peer while encrypted traffic from Site B...
View ArticleClik here to view.
Re: security section on MX-80 MIC card for ipsec
Hi aarseniev, I recently upgraded software to by isuing file jinstall-ppc-15.1F2.8-export-signed.tgz, so I have: admin@MX-80-2-Feve3-Rack-21# run show versionHostname: MX-80-2-Feve3-Rack-21Model:...
View ArticleRe: SRX source based routing through VPN
So site A traffic will be encrypted by same tunnel as Site B traffic?And you want to make sure that encrypted traffic from Site A takes ISP1 to reach peer while encrypted traffic from Site B trakes...
View ArticleBetreff: srx210 connect to IP camera auto disconnect after 3 mins
As discuss with IPCAM vendor,he said IPCAM software use p2p protocol connect.How to check p2p traffic?
View ArticleRe: SRX source based routing through VPN
Hello, Then I think it is not possible because when Site A & Site B traffic gets encrypted into ESP, its source is local Public IP & destination is VPN peer public IP so the differentiating...
View ArticleRe: SRX240H2 static route works only one way
Thanks for the network diagram, this is much clearer now. Is your default gateway the FW or the cisco router for the devices in the site? Ideally, you do NOT want to have two routers in the same LAN as...
View ArticleClik here to view.
Re: security section on MX-80 MIC card for ipsec
Thanks aarseniev - you are good expert. You halped me not the thirst time Upgrade went fine and after MIC card came online, I see vpn serices supported: admin@MX-80-1-Feve3-Rack-21# run show...
View ArticleSRX-100 and Vonage, no audio
We have wonderful Vonage in one of our remote sites, and the inbound audio is not heard. Can someone show me the commands for the following from Vonage; Set UDP-ANY timeout to 10 minutes, disable UDP...
View ArticleSRX1500 IPS failure
Hi All, I'm already apply license IPS for SRX1500 and follow this url https://kb.juniper.net/InfoCenter/index?page=content&id=KB16489&actp=search but the issue now as per below:...
View Article