Re: SRX100 VPN problem
At a glance everything looks good. Are you saying the client cannot ping any of the resources in the 192.168.0.0/24 network i.e. 192.168.0.13 & 192.168.0.1? As mentioned by Suraj, you would not...
View ArticleRe: Interface Zero in Jflow
Hi Thanks aarsenlev and rsuraj!Just waiting for the firewall team to get back to me on these configuration options.Will post back as soon as i get any new info
View ArticleRe: SRX100 VPN problem
The VPN client 192.168.0.34 or 32 with in the pool can not ping anything but it's self. When I was connected with the VPN the srx could not ping the address pool.Sent from my iPhone.
View ArticleRe: SRX100 VPN problem
Here is what I found when I am connected to the SRX with in the VPN pool. . C:\Users\rob>ipconfigWindows IP ConfigurationEthernet adapter Local Area Connection:Connection-specific DNS Suffix . :...
View ArticleRe: SRX100 VPN problem
Here is another test when I connected to the VPN C:\Users\rob>ipconfigWindows IP ConfigurationEthernet adapter Local Area Connection:Connection-specific DNS Suffix . : Link-local IPv6 Address . . ....
View ArticleRe: SRX100 VPN problem
This will not work. You cannot ping the client from SRX, that’s as per design of Dynamic VPN feature
View ArticleRe: SRX100 VPN problem
Can you check if this is matching with your testing? https://kb.juniper.net/InfoCenter/index?page=content&id=KB21800&actp=search&viewlocale=en_US
View ArticleRe: Unable to access J-web on SRX550
Had the same issue with a SRX220, this help me out a lot! thanks
View ArticleRe: SRX100 VPN problem
So if I am understanding this right from the doc that you sent. The client VPN can see the network resources but the network resources will not see the VPN users?All I want to do is VPN into a network...
View ArticleRe: SRX100 VPN problem
Any specific reason not to use rstp instead of stp?I noticed you defined:dynamic-vpn { access-profile remote_access_profile; clients { startup_rvpn_group { remote-protected-resources { 0.0.0.0/0;I...
View ArticleRe: Public subnet behind SRX
Thanks for your response. How would you advertise the subnet through the SRX? Thanks,David
View ArticleRe: Public subnet behind SRX
Thanks for your response Alexander. I am looking to use our older SRX220h, I am unfortunately I'm not very skilled with Juniper as our network guy who did is no longer with the company, what is the...
View ArticleRe: Rate-limiting not working
PK, I added the term else accept to the filter. The vlan.0 was no longer going down, I tested a large file download on Chrome and at first it was working, speeds dropped to about 120KB/s but...
View ArticleDHCP Relay and PXE Boot
Hi there, Just after some advice regarding help with PXE boot. I have the following set up set forwarding-options dhcp-relay server-group DHCP-servers 10.64.40.104set forwarding-options dhcp-relay...
View ArticleRe: Juniper SRX "New Sessions/Second" - Limits
I haven't had experience with Huawei but Customer says that it works.Have you had any experience with the Eudemon?
View ArticleRe: SRX100 VPN problem
I entered these commands set security dynamic-vpn clients all remote-protected-resources 10.0.0.0/24set security dynamic-vpn clients all remote-exceptions 0.0.0.0/0set security dynamic-vpn clients all...
View ArticleRe: SRX100 VPN problem
Remember : set security dynamic-vpn clients all remote-protected-resources 10.0.0.0/2410/24 represents the protected resources where the controls are located. Add more or change it if it is not part of...
View ArticleRe: SRX100 VPN problem
Here is the testing the VPN when connected Verify the IKE Phase 1 established.>show security ike security-associationsroot@Gtown-VPN02> show security ike security-associationsIndex State...
View ArticleRe: IPsec working only "one way"
Sorry for the confustion, yes the second example. You create three complete policies one for each set of proxy-id. local address on the SRX the same for each and one policy for each remote subnet...
View Article