Quantcast
Channel: All SRX Services Gateway posts
Browsing all 17645 articles
Browse latest View live

I can't do ping between two interfaces fxp in SRX in mode Cluster

Hi Guys, I can't do ping between two interfaces fxp in SRX in mode Cluster, the interfaces are UP... I don' know what happen,, maybe do you know any suggestion? Thanks  {primary:node0}version...

View Article


Re: Upstream Router ARP Problem

Hello, -----original packet----- 00:c0:89:1b:04:c3 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: arp who-has 109.3.4.88 tell 217.2.1.81Your upstream router uses sender protocol address...

View Article


Image may be NSFW.
Clik here to view.

Re: Upstream Router ARP Problem

Hi Alex, Thanks for the reply. I tjhought I already had configured proxy arp?  proxy-arp { interface reth0.0 { address { 109.3.4.88/32; } } }  I tried the command to make it restricted but the copmmand...

View Article

Re: SRX1500 Cluster - Possible bug with reth interfaces

I'm having sima issues in D50. THE symptoms I see are present when I manually fail rd0 to node 1. I don't have any interfaces down but I lost icmp over the data plane. Control and fabric remain up and...

View Article

secure-access-port not available on SRX300

Hi. On the SRX100 with image version 12.1x44-d45.2, I could use the following command, to make sure, that only one computer could connect to an interface, by allowing the mac address:...

View Article


Re: Upstream Router ARP Problem

Hello, M_a_r_k_T_ wrote: If you can point me at an RFC that says that it is OK to not reply to ARP requests if the source if from a different subnet, that would be good because I can take that to the...

View Article

Re: Route-based VPN on SRX3600 mysteriously drops packets

Omg...  SRX330 cluster here on 15.1X49-D45 commenting out the vpn alone with commit didn't work, so I went shotgun approach...maybe a full config wipe would have worked but the devices are across the...

View Article

Re: Upstream Router ARP Problem

Cheers Alex. Unfortunately, that's not going to cut it with the upstream guys (I know what they're like!): the RFC says "should" and not "must". As per https://www.ietf.org/rfc/rfc2119.txt, "should"...

View Article


Re: secure-access-port not available on SRX300

set interfaces ge-0/0/x gigether-options source-address-filter <macaddress>...

View Article


Re: How to set 802.1p Cos

Hi all,I have a similar question : marking with the same value all traffic going out from a particluar interface on my SRX550, so that QoS is handeled on transport network conencted to my SRX....

View Article

Re: secure-access-port not available on SRX300

Hi, I've uploaded to this reply a PDF document ..See if it helps you regarding SRX3XX series..See page 4 (Limitations in the 15.1X49-D50 version)   

View Article

Re: Upstream Router ARP Problem

Hello,The is no "should" in the RFC quote I posted.RFC quote specifcally says "should NOT" and in Your upstream guys parlance that is supposed to mean "NOT recommended", correct? So the SRX is duly...

View Article

Re: I can't do ping between two interfaces fxp in SRX in mode Cluster

Hi, Thats because the secondary node routing subsystem is not running... the backup-router configuration statement canbe used. set system backup-router <gateway_ip> destination...

View Article


Re: Juniper srx nat issue

How are you looking for the traffic? I assume you have a security policy to permit the traffic that will be using the NAT address.  Is this policy showing usage? During the NAT usage can you look at...

View Article

Config of basic 802.1p CoS marking

Hi all, I have a pair of SRX500 and I need to set the 802.1p CoS bits to 000 on ALL out-going packets on a certain vlan ( vlanid 51).(so that QoS is handeled on transport network conencted to my...

View Article


Re: Help configuring VLANs

Hi Abed, Thanks. I got the VLANs working and figured out policies to get them talking to the internet zone on the router. I still have some questions about the static routes. Does each vlan need its...

View Article

Re: Custom user permissions

Thank you it worked!

View Article


Re: config IDP on SRX cluster failed

...............................................

View Article

Re: Config of basic 802.1p CoS marking

Hi, If  there's traffic matching EF & AF forwarding-classes then those should also be included in the rewrite-rule. Cheers,Ashvin

View Article

Re: Dynamic VPN on a SRX650 chassis cluster with 12.3x48

Thanks for updating the 12.3x48 documentation and the links.  I have a couple of thoughts. It really seems like if chassis cluster is NOT supported, as it would imply by your comments, in the early...

View Article
Browsing all 17645 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>