Quantcast
Channel: All SRX Services Gateway posts
Browsing all 17645 articles
Browse latest View live

Re: SRX 240 cluster nflow problem

Hi As far as i know it is not possible to apply sampling on interface that is part of redundant interface andthe input/output traffic rates are very high also on vlan interfaces that are not redundant. 

View Article


Re: Transparent mode support SRX340 or not

With the SRX300 series there are changes in how transparent mode is done that are outlined in this kb. https://kb.juniper.net/InfoCenter/index?page=content&id=KB31147

View Article


Re: SRX110 connectivity

Any site I try to visit, I receive a time out error. I can ping any internet address succesfully. I'm using DNS of my internet provider.

View Article

Re: Transparent mode support SRX340 or not

Hi Spuluka, Thanks for the information, but still not getting it right. Command i used to convert it in Transparent mode is: root# set protocols l2-learning global-mode transparent-bridge Then to check...

View Article

Re: How to solve that several VR can access the same reth0 vlan for untrust

Hi, Thanks for the reply.I was thinking of that as well but im not quite sure about how the routing will work with that setup. VR1-VPN (has internet/default-route)VR2-Other-VPN Leaking the default...

View Article


Re: Transparent mode support SRX340 or not

Did you do the system reboot after commit? And what Junos version is running on the device?

View Article

Re: How to solve that several VR can access the same reth0 vlan for untrust

Well, if the traffic needs to be isolated from the two VR then you will likely need a 3rd one.  Moving the internet up to this and then leaking the default route down to both the other two.

View Article

Re: SRX110 connectivity

Just wanted to confirm that your DNS resolution is working, so if you can ping and interent name and it replies that would verify this. ping www.microsoft.com Another possiblilty is lowing the maximum...

View Article


Image may be NSFW.
Clik here to view.

ipsec VPN is up, but not passing data

Hello!ipsec VPN is up, but not passing data KB 10093 but no luck.Ipsec SA listed on both devices:no:run show security ipsec security-associations Total active tunnels: 2 ID Algorithm SPI Life:sec/kb...

View Article


Re: routing instance and ospf

Hello , Can you try : > show ospf neighbor instance all If that fetch you some details . Also please provide the JUNOS version that you are running .

View Article

Re: BGP neighborship delay after flap

Hello , Can you share the configuration from both SRX and MX . Also the following outputs : show bgp summaryshow bgp neighbor show bgp neighbor <neighbor IP> extensive

View Article

Re: SRX routing with redundant connections

Hello , I that case the best options  will be to have the SRX in cluster  and have the 2 next hope from the SRX cluster  and to filter based forwarding in duel ISP failover setup . Use the B which I...

View Article

Re: routing instance and ospf

Thank you for your reply, here it is:show ospf neighbor instance all Instance: cifra1Btw, adjacent srx device shows (it hast routing instances:show ospf neighbor Address Interface State ID Pri Dead...

View Article


Re: routing instance and ospf

Hello , Thanks for the output . As per the output the OSPF is stuck in init . So kindly check : 1) Do we have IP on the st0 interfaces2) Are the interfaces in a zone and protocols OSPF allowed ? Can...

View Article

Re: routing instance and ospf

Can you share the "show route" for the OSPF neighbors? 

View Article


Re: VPN failed with SRX300 and SRX100

Hello,  I can ping between the gateway. The SRX300 external interface " ge-0/0/0" is allowed only host inbound as all but still not working. Br,THE-O

View Article

Re: SRX routing with redundant connections

Any specific reason for not using clustering on SRX550?

View Article


Re: BGP neighborship delay after flap

Can you disable BFD for testing and check the behavior? Thanks,Suraj

View Article

Re: routing instance and ospf

1. No there is no IP's on st0 interfaces2. Yes, they are in trust zone. device with routing instance: http://pastebin.com/VQZLshnddevice without routing instance: http://pastebin.com/eMdJ1KBQ > Can...

View Article

Re: ipsec VPN is up, but not passing data

on tco site, is the external interface and st0 in different routing instance?If so you may need to add a route for 192.168.18.0/24 on the routing instance pointing to the inet table. Note: If the...

View Article
Browsing all 17645 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>