Re: routing instance and ospf
YOu need IP address on St0 interfaces to run OSPF or any dynamic routing protocols
View ArticleRe: VPN failed with SRX300 and SRX100
Hello , Can you enable traces and provide us the output : # set security ike traceoptions file ike-trace# set security ike traceoptions flag all# set security ipsec traceoptions flag all# commit # run...
View ArticleRe: routing instance and ospf
Hello , You need IP adress in ST interface to run any dynamic protocols . Can you configure the same and let us know the outcome .
View ArticleRe: VPN failed with SRX300 and SRX100
Dears, I tried to change the ext ip but still not working.... The attach have the SRX300 log. Br,THE-O
View ArticleRe: BGP neighborship delay after flap
Hi The debug log shows a timer being run Nov 18 10:32:51.601286 task_timer_ucreate: created timer BGP_MYAS.x.x.x.x_Connect flags <>Nov 18 10:32:51.601516 task_timer_uset: timer...
View ArticleRe: VPN failed with SRX300 and SRX100
Hello , As per your configuration , you have selected multiple proposals for the IKE/IPSEc policies . So kindly remove and copnfigure a single proposal for each IKE/IPSEC policy which is matching and...
View ArticleRe: Bug ? Sometime the dhcp IP is wrong for the client when I move a client...
@joses thank you for your replybut my software is 12.3X48-D30,it should not include all the resolve issues of the 12.3X48-D25 ?
View ArticleRe: Bug ? Sometime the dhcp IP is wrong for the client when I move a client...
Hello , Your understanding is correct , ideally the fix should be in place for the subsequent versions . But if you are seeing the same issue , I hope we need to open a JTAC case to investigate this...
View ArticleRe: ipsec VPN is up, but not passing data
Tnank you for your replys.It started to work by itself somehow.May be isp blocked some traffic? Dunno.
View ArticleRe: error: Could not connect to node1 : No route to host - after power failure
Thank you for your guidance in this thread.We had a juniper expert on site on the 11th and he could not find fault with tye config I was running or create a config that would work on these firewalls,...
View ArticleWhich contract service do I need for SRX, if any?
Hi - I am about to order some SRX340 (hardware + software licence) but there is one information that I am not able to get. Do I need a contract service and if any what's the minimal one is necessary in...
View ArticleRe: Recovery issue, help using u-boot
Do you remember how to load the loader_crc using serial line?I do it using kermit, but still no elf at address 0x00100000
View ArticleAdd DMZ on single IP
Hi, i'm trying to add a dmz zone on lan port 2, local ip 192.168.5.180. Here it is my test: version 12.1X46-D55.3;system { host-name JuniperSRX210; time-zone Europe/Rome; root-authentication {...
View ArticleRe: Which contract service do I need for SRX, if any?
When you buy a SRX340 (HW+SW SKU) you are entitled to get the latest version of the software within 15 days. On top you will get 1 year warranty on the hardware (read hardware + software part of...
View ArticleRe: Which contract service do I need for SRX, if any?
This are the information I was looking for, definitely. Thank you so much @jonashauge, I appreciate it! PS : french sellers, feel free to send me a quote for 3 x (SRX340 HW + SRX340-JSB +...
View ArticleRe: Bug ? Sometime the dhcp IP is wrong for the client when I move a client...
Why don't you separate the dhcp-local-server interfaces into two groups, and explicitly specify the pool. Like this: [system services] dhcp-local-server { group VLAN14 { interface vlan.14; overrides {...
View ArticleRe: SRX110 connectivity
If I connect a pc directly to router with the same DNS works fine.Which is the range (min/max) for the maximum segment size usually?
View ArticleRe: Add DMZ on single IP
Hello,Not commenting on validity of Your config, just syntax - You are missing a closing bracket for "security {".Namely: pp0.0 { host-inbound-traffic { system-services { all; } protocols { all; } } }...
View ArticleRe: SRX110 connectivity
Sorry for the confustion. I wanted you to do the DNS name ping test while behind the firewall in order to verify that both the DNS resolution will work and that you can successfully connect to that...
View Article