Re: Send Logins and config-Changes to Syslog (CLI and J-Web)
Hi Chris, doing this syslog configuration provides some example log output as shown below. This should solve most of your issues. Config: jh@fw> show configuration system syslog file...
View ArticleRe: Destination NAT, JSRX210, rule-set rs1 and rule-set rs2 have same...
You almost have it. There is only one rule set per context for zone to zone transit. Within the rule set you can have multiple rules. Change your additions as follows:set rule-set rs1 rule r3 match...
View ArticleRe: Replacing SRX Appliance
Layer 2 services on the SRX300 series are all using the new ELS (enhanced layer 2 services). Likely your older SRX220 has the original layer 2 configuration. You can run your current configuration...
View ArticleRe: how to import dhcp (default-)route into other routing-table ?
Instance-import works for me :regress@cspsol16-vsrx# run show route table wan0 wan0.inet.0: 5 destinations, 8 routes (5 active, 0 holddown, 0 hidden)+ = Active Route, - = Last Active, * = Both0.0.0.0/0...
View ArticleRe: Active-directory-integration
Hi ,I think , we can only fetch Users and Group information from the Active Directory . In the security policy match condition(source-identity) , we can have User/Group details only as of now . It...
View ArticleRe: Replacing SRX Appliance
Thank you for this advice.I shall try to run our configuration through the ELS translator, and give you a feed back________________________________Ce message et toutes les pi?ces jointes (ci-apr?s le...
View ArticleBranches can't reach cloud
Hello, I added one circuit IPVPN router Cisco for branches. My current network is working through one circuit for cloud and other circuit for internet. We requested new IPVPN circuit to connect...
View ArticleClik here to view.
Re: Site to Site VPN between a SRX w/dynamic IP to SRX w/static IP
We need to know if the oppisite traffic direction towards the PC beind the SRX300 is working And verifing icmp/ssh to other locations is not an indication ...Does the ISP router dialing the internet or...
View ArticleRe: Send Logins and config-Changes to Syslog (CLI and J-Web)
jonashauge Thanks! That's how it is configured on our MX device: [edit system syslog]file User-Commands { interactive-commands any; archive size 5m files 100 no-world-readable; [edit system...
View ArticleRe: Replacing SRX Appliance
According to the ESL Translator 99.9% of the current configuration is compatible.This seems to be a good bases to migrate to the new appliance.
View ArticleNew config for SRX240
Hi to all, I'm trying to configure my SRX240 as follows ... I want to split the 16 interfaces in 2 seperate logical switches, both with different vlan.Linked to the security zones Internal and...
View ArticleRe: SRX firewall routing configuration
Thanks Spuluka, Much appreciating your reply and clarification, I got the show route results, and am reviewing one by one, Q, do those definitions in global configuration, defined as...
View ArticleRe: Branches can't reach cloud
Hello , Can you confirm if the VPN is UP ie the secondary VPN connection is UP .
View ArticleRe: Replacing SRX Appliance
Should be an relatively easy transition then. If you have any questions or run in to errors just ask.
View ArticleRe: SRX firewall routing configuration
Q, do those definitions in global configuration, defined as routing-options static routeInteract with Zones or Security Policies? Or is it only for the basic functionality related to the...
View ArticleRe: New config for SRX240
What is the purpose of the eight ports on the internet vlan? Will all devices on that vlan get dhcp from the provider? If not then you can simply NAT traffic from vlan 3 out ge-0/0/0.
View ArticleRe: Site to Site VPN between a SRX w/dynamic IP to SRX w/static IP
Hi, Can you check the following:- both routers have "host inbound traffic system services ike" on the declared external interfaces- enable nat traversal on both ends, the dynamic IP side might go...
View ArticlevSRX in vSphere 6.5
Hi,I have tried both d70 and d75 but after deploying the .OVA it is not possible to customize the settings. Either the .ova is broken for 6.5 or there is something else seriously wrong. Anyone...
View ArticleRe: SRX5400
MTBF is published on the spec sheet for branch SRX http://www.juniper.net/assets/us/en/local/pdf/datasheets/1000281-en.pdf But not on the Data Center...
View Article