Re: SRX300 Active/Backup
Hi Shailesh, my switches are connected by a trunk (1gbps), if I setup a reth0 as you said: {primary:node0}[edit]user@host# set interfaces ge-0/0/0 gigether-options redundant-parent reth0user@host# set...
View ArticleRe: Site To Site
this is the syntax error i get when im trying to set the policy for the ipsec root@Globalogik# set security ipsec policy ipsec-policy-cfgr proposal-set userDefined ^syntax error, expecting <data>.
View ArticleRe: Site To Site
Hi Avino, You are facing and issue when configuring the following :- set security ipsec policy ipsec-policy-cfgr proposal-set userDefined The issue here is :- "userDefined" is not present in your...
View ArticleRe: advertise OSPF static routes into stub/t-stub
Hello, Andrewmiller wrote: also # 3 would work im sure I'm assuming i would have to write a policy for it to work ? like this ? set policy-options policy-statement exportstatic1 term exportstatic1...
View ArticleRe: Security log flow time zone not same with syslog time zone in SRX58000?
Hi All, Just to update my issue due to hit PR. Need to upgrade to ver D75 if not then using temporary workaround as per PR https://prsearch.juniper.net/InfoCenter/index?page=prcontent&id=PR1203833
View ArticleClik here to view.
Route-lookup for x.x.x.x yielded reject NH
Hi all, I'm having some issues with traffic through an SRX3600 cluster. The traffic is between Active Directory servers in two different zones on directly connected subnets. Looking through a...
View ArticleJweb does not work on SRX 340
We have SRX 340 running on 15.1X49-D60.7 and the jweb does not work. Firefox,chrome,IE,Edge all browser timeout due to multiple redirects. , Clearing the cookies does reset the certificate but...
View ArticleRe: srx340 as a switch and gateway router
i have been expierencing similar issues using a config i copied and modified from a srx210 ( i made the interfaces match up) for a srx 345. the 345 is running 15.1x49-D75.5all we are trying to do is...
View Article[Q] SRX-100H Custom ports
We need to make our SRX-100's so the st0.0 has all ports and protocols blocked, except a list of about 22 ports, and 7 protocols. I did not see any where that would allow for custom port numbers....
View ArticleRe: [Q] SRX-100H Custom ports
Hi, You need to create an application to use custom ports. See https://www.juniper.net/documentation/en_US/junos12.1x46/topics/example/security-custom-application-configuring.html Tim
View ArticleClik here to view.
Re: Site To Site
If you have defined th policy then you would use "propsals" if you use "proposal-set" then you ould use one of the predefined system proposal set# set security ipsec policy ipsec-pol proposal-set...
View ArticleRe: cisco asa to juniper srx vpn site to site not working !!!!
Can you chek if the ASA is using IKEv2 because Juniper is at IKEv1; and also ensure they are using ESP foir IPSec.
View ArticleRe: Jweb does not work on SRX 340
Hi, Please try restarting the web management to make sure that the service is working as expected :- >restart web-managementRegards,Sahil...
View ArticleSRX100 - Routing/Policy issue pinging IP past gateway in different Zone
I have a SRX100 configured with several Zones, each with it's own IP range.for this situation the following is important to know:- Zone11 --> vlan11 --> Juniper IP 10.0.2.239 Gateway 10.0.2.250...
View ArticleRe: Jweb does not work on SRX 340
Already did that, when i allow https by default without any specific interface it works.
View ArticleRe: [S2S VPN] SRX DynamicIP Cisco IOS DynamicIP
Hello again,I have went trough some troubleshooting and fine tuning of the configuration and now it's somewhat better.Cisco side seems to work as expected. It is creating ike aggressive mode requests...
View Article[JSRX 210] How to completly remove/delete destination NAT?
Recently I configured my JSRX210 with the following destination NAT rules: edit security set zones security-zone trust address-book address companyserver1 y.y.y.y/32 exit edit security policies...
View ArticleRe: SRX firewall routing configuration
Hi SSN, i thought down 1 to 4 routing-options, will not function at all, as the next hop is not part of 10.80.90.0/27, which is defined at the routing-instances , asset routing-instances Main-VR...
View ArticleRe: SRX firewall routing configuration
Hi vMicroMe, In your reply,“All those traffic that will arrive to srx interface other then reth0.0 use global defination.” Where to find this global definition
View ArticleRe: [JSRX 210] How to completly remove/delete destination NAT?
tk2 wrote:I know I can simply rollback to prevoius config, but the thing is, I haven't saved it.What does this mean? Your config is saved when you commit. You can do a rollback 4 and commit. Otherwise...
View Article