I can't do ping between two interfaces fxp in SRX in mode Cluster
Hi Guys, I can't do ping between two interfaces fxp in SRX in mode Cluster, the interfaces are UP... I don' know what happen,, maybe do you know any suggestion? Thanks {primary:node0}version...
View ArticleRe: Upstream Router ARP Problem
Hello, -----original packet----- 00:c0:89:1b:04:c3 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 60: arp who-has 109.3.4.88 tell 217.2.1.81Your upstream router uses sender protocol address...
View ArticleClik here to view.
Re: Upstream Router ARP Problem
Hi Alex, Thanks for the reply. I tjhought I already had configured proxy arp? proxy-arp { interface reth0.0 { address { 109.3.4.88/32; } } } I tried the command to make it restricted but the copmmand...
View ArticleRe: SRX1500 Cluster - Possible bug with reth interfaces
I'm having sima issues in D50. THE symptoms I see are present when I manually fail rd0 to node 1. I don't have any interfaces down but I lost icmp over the data plane. Control and fabric remain up and...
View Articlesecure-access-port not available on SRX300
Hi. On the SRX100 with image version 12.1x44-d45.2, I could use the following command, to make sure, that only one computer could connect to an interface, by allowing the mac address:...
View ArticleRe: Upstream Router ARP Problem
Hello, M_a_r_k_T_ wrote: If you can point me at an RFC that says that it is OK to not reply to ARP requests if the source if from a different subnet, that would be good because I can take that to the...
View ArticleRe: Route-based VPN on SRX3600 mysteriously drops packets
Omg... SRX330 cluster here on 15.1X49-D45 commenting out the vpn alone with commit didn't work, so I went shotgun approach...maybe a full config wipe would have worked but the devices are across the...
View ArticleRe: Upstream Router ARP Problem
Cheers Alex. Unfortunately, that's not going to cut it with the upstream guys (I know what they're like!): the RFC says "should" and not "must". As per https://www.ietf.org/rfc/rfc2119.txt, "should"...
View ArticleRe: secure-access-port not available on SRX300
set interfaces ge-0/0/x gigether-options source-address-filter <macaddress>...
View ArticleRe: How to set 802.1p Cos
Hi all,I have a similar question : marking with the same value all traffic going out from a particluar interface on my SRX550, so that QoS is handeled on transport network conencted to my SRX....
View ArticleRe: secure-access-port not available on SRX300
Hi, I've uploaded to this reply a PDF document ..See if it helps you regarding SRX3XX series..See page 4 (Limitations in the 15.1X49-D50 version)
View ArticleRe: Upstream Router ARP Problem
Hello,The is no "should" in the RFC quote I posted.RFC quote specifcally says "should NOT" and in Your upstream guys parlance that is supposed to mean "NOT recommended", correct? So the SRX is duly...
View ArticleRe: I can't do ping between two interfaces fxp in SRX in mode Cluster
Hi, Thats because the secondary node routing subsystem is not running... the backup-router configuration statement canbe used. set system backup-router <gateway_ip> destination...
View ArticleRe: Juniper srx nat issue
How are you looking for the traffic? I assume you have a security policy to permit the traffic that will be using the NAT address. Is this policy showing usage? During the NAT usage can you look at...
View ArticleConfig of basic 802.1p CoS marking
Hi all, I have a pair of SRX500 and I need to set the 802.1p CoS bits to 000 on ALL out-going packets on a certain vlan ( vlanid 51).(so that QoS is handeled on transport network conencted to my...
View ArticleRe: Help configuring VLANs
Hi Abed, Thanks. I got the VLANs working and figured out policies to get them talking to the internet zone on the router. I still have some questions about the static routes. Does each vlan need its...
View ArticleRe: Config of basic 802.1p CoS marking
Hi, If there's traffic matching EF & AF forwarding-classes then those should also be included in the rewrite-rule. Cheers,Ashvin
View ArticleRe: Dynamic VPN on a SRX650 chassis cluster with 12.3x48
Thanks for updating the 12.3x48 documentation and the links. I have a couple of thoughts. It really seems like if chassis cluster is NOT supported, as it would imply by your comments, in the early...
View Article