Quantcast
Channel: All SRX Services Gateway posts
Browsing all 17645 articles
Browse latest View live

Re: ipsec vpn config on MX80 MIC card

Hi aarseniev,  I set following:  set remote-id fqdn K9143116144.nokiasiemensnetworks.comand this is a result:  ipsec-ike_log Sep 21 08:21:53 [10.42.131.81 <-> 10.42.147.32] ike_get_sa: Invalid...

View Article


Re: BT Infinity and PPPoE Configuration

thank you @Junspert it solves my issues  with a BT HUB 3 provide ADSL2, I set mss to 1452 and I can reach all the website. only one thing I can't work it out if I ping google.com from the Juniper it...

View Article


Re: default Mode of SRX

HI Suraj, Thanks for explanation.  But I route mode to mix mode switching when set access vlan to interface and try to commit check, it prompts message following . So SRX is  route mode before to  set...

View Article

Image may be NSFW.
Clik here to view.

SYN Cookie Protection Always On

As far as i read on : http://www.jnpr.net/techpubs/en_US/junos12.3x48/topics/example/denial-of-service-firewall-syn-ack-ack-proxy-flood-attack-protecting-cli.html It say : In this example, you enable...

View Article

Re: SRX300 series VLAN interface

Any timeline to fix it ??? It is really big issue. The same feature is not in new prduct line which replace the EOL  products.

View Article


static routing not working in srx245

Hi, I set default route to wan interface peering IP and some static route to lan interface peering IP. I can see routing for connected and deault route but not  for static  route in routing table. Is...

View Article

Image may be NSFW.
Clik here to view.

Re: SYN Cookie Protection Always On

Screen rules : security { log { mode event; event-rate 1500; } alg { ftp disable; msrpc disable; sunrpc disable; rsh disable; sip; sql disable; talk disable; tftp disable; pptp disable; ike-esp-nat {...

View Article

Re: static routing not working in srx245

You don't need a license for routing.  Can you provide the routing table?

View Article


Re: static routing not working in srx245

you dont need licence,

View Article


Re: static routing not working in srx245

Here is the config and Routing table info. My scenario is in HA. HA is ok and passing trasit traffic #show routeinet.0: 5 destinations, 5 routes (5 active, 0 holddown, 0 hidden)+ = Active Route, - =...

View Article

Re: static routing not working in srx245

Which device is primary?  Can you provide the output of "show chassis cluster status".

View Article

Re: static routing not working in srx245

#show chassis cluster statusCluster ID: 1Node Priority Status Preempt Manual Monitor-failuresRedundancy group: 0 , Failover count: 1node0 100 secondary no no Nonenode1 1 primary no no NoneRedundancy...

View Article

Re: static routing not working in srx245

You have RG0 on one node and RG1 on the other node.  Is reth.14 part of RG1?  If so, you should see the route on the node1, not node0.

View Article


Re: static routing not working in srx245

Both wan and lan interface are part of RG1 and  you may also know that RG0 is device primay seconday group. Another point is HA is in A/P senario, in this case only active device maintain the routing...

View Article

Re: static routing not working in srx245

The RE is always on RG0, which is on node1 per the output.  Your transit is via RG1, which is on node0.

View Article


Re: static routing not working in srx245

Hi, I believe the routing table will always be present on the node on which RG0 is active, even in Active/Active mode.Could you give a try using next-hop resolve for those routes:route 10.10.18.0/24...

View Article

Re: SRX Syn problem

Hello, So if I understand correctly, you have following thing setup is, is that correct? set security flow syn-flood-protection-mode syn-cookie. Regards, Rushi 

View Article


Re: SRX Syn problem

Correct  , it does not accept new request but the olders which has session still able to connect. it seems like syn-cookie not working correctly and dropping all packets or it passes the cookie mode...

View Article

SRX320 - VDSL session drops when doing a commit

Hi All I have configured an SRX320 with a 1x VDSL2 mPIM (RoHS) card to connect to FTTC VDSL connections but when performing a commit the VDSL session drops for 2-3mins before the session is...

View Article

Re: BT Infinity and PPPoE Configuration

I found the ping4 solution here https://kb.juniper.net/InfoCenter/index?page=content&id=KB25265&act=RATE&newguid=0248022066475a7a01574c2353c4007627&actp=search

View Article
Browsing all 17645 articles
Browse latest View live