Re: 2 vlans, 2 dhcp server, cannot get them both to work at same time
once I added irb.10 and irb.20 to security zone trust it work. Problem is, do not want both of these to be in the trust zone.One is for guest Wi-Fi and I do not want them able to see our network....
View ArticleRe: Recovery issue, help using u-boot
Can you please elaborate setups for sending loader-crc file through serail connection? Thanks
View ArticleClik here to view.
Completely spoofed traffic
if SRX 3600 face with an attack that sends spoof ip addresses that never hit second time and if you need the real syn packets how should you overcome this issue ? Test script :...
View Articlepublic subnet routing woes - SRX320
Hi all Hoping someone can take pitty on me and help me out of a bind. Been struggling to get this working for some time now and the boss is getting a bit snarky now so really need to get it resolved...
View ArticleRe: 2 vlans, 2 dhcp server, cannot get them both to work at same time
Have yuu tried Rsurana solution? # set security zones security-zone internal interfaces irb.10 host-inbound-traffic system-services dhcp # set security zones security-zone guest interfaces irb.20...
View ArticleRe: public subnet routing woes - SRX320
So if the second subnet is routed to your first subnet interface, I think your best solution is to place this on another interface directly and have your tenant connect to that. Internet ---- WAN...
View ArticleSRX4100/4200
Has anyone gotten their hands on an SRX4100 or 4200 and can share experiences, good or bad? --Paul
View ArticleRe: Recovery issue, help using u-boot
hi guys, I'm afraid I don't remember... It has been more than 3 years since I did it once. Maybe something changed? I don't really recall any blocking issues except having no active ethernet interfaces...
View ArticleRe: Interface Zero in Jflow
Hi Alex We are using a static route with "next-table" nexthop
View ArticleRe: Interface Zero in Jflow
Hey Suraj, The j-flow filter was already applied in the output direction since the inital configuration Cheers javabeen
View ArticleRe: Interface Zero in Jflow
Hello, javabeen wrote: We are using a static route with "next-table" nexthopThen it's expected that OIF for packets being forwarded along this static route is 0.Jflow can handle only one table lookup...
View ArticleRe: Interface Zero in Jflow
Hey Aarsenlev Many thanks for the response - i really appreciate it! One question (for my understanding) ....Does this basically mean that any traffic that follows a static route will be assigned to...
View ArticleRe: Interface Zero in Jflow
Also,.. is this something that is fixed in jFlow8(i've tried to find info on this but its pretty sparse... can't use v9 due to clustering)...
View ArticleVPN Passthrough SRX
Hi there, I need to allow some of our users who work for another company access to their VPN server from our office LAN. Reading up it seems I need to disable port translation, i have done the...
View ArticleClik here to view.
Clik here to view.
Re: public subnet routing woes - SRX320
Many, many thanks for your reply spuluka! I'm sure I'd tried that before, but obviously had other things very wrong elsewhere at the time! Now it's routing the *.*.138.218 IP inbound traffic to the...
View ArticleSite-to-Site VPN with Inline Transparent Web Filter
I have two brand new SRX340's. Currently I have a Site-to-Site VPN working between an SRX220 and a Sophos UTM 320. All the internal networks can talk amongst themselves via 'traffic-selector's in the...
View ArticleRe: Interface Zero in Jflow
Hello,AFAIK, this limitation exists in every Jflow version, from v5 to v10/IPFIX.HTHThxAlex
View ArticleRe: SRX routing with redundant connections
To respond to your points:1. Only if it's applicable to your connection with your ISP (e.g. routed IP address block).2. I'm not suggesting that any more.3. I never suggested that. You will now have a...
View ArticleRe: SRX routing with redundant connections
I was actually going to add redundant links between the SRX and ISP managed router for a full mesh setup. Each firewall can easily handle the full traffic load. What I am trying to achieve is load...
View Article