Re: Qos in test shows high ping times
Hello there,Where is the ping source? If it's SRX itself, Your pings go into Queue 0 which is normally "best-effort"/BE, and intermixes there with Your generator BE...
View ArticleRe: SOHO practicality
Thanks Steve for your throughtful comments. I had realised that Juniper was moving out of the Wi-Fi AP business. I was hoping for some software that gave me an overview of the network, as whole, and...
View ArticleRe: Qos in test shows high ping times
The ping is from a computer on the lan ex2200 to srx to mplsI can see the af 21 counter going up with pings so I know it's hitting the proper que
View ArticleRe: Qos in test shows high ping times
The client is not setting the dscp a mf classifier is
View ArticleRe: Qos in test shows high ping times
Take a look at this article:https://kb.juniper.net/InfoCenter/index?page=content&id=KB28157&actp=search ICMP messages are considered low priority within Junos OS, so the routing platform will...
View ArticleRe: Upgrade SRX210H from 10.4r3.4
If you have access to the current version of the software you wish to install, put it on a USB and install from the USB. It will format and create the dual root partition without any problems.
View ArticleRe: How to configure multiple hw-addresses on one interface
That is not possible. The mac address can be set for the interface but it is done at the physical interface level and it will only accept 1 mac address.proxy arp on the other had will allow the srx to...
View ArticleRe: Qos in test shows high ping times
I'm not pinging the router I'm pinging through the router. Does this still apply? And this would apply no matter what que it's in?
View ArticleRe: cisco asa to juniper srx vpn site to site not working !!!!
dear all i connect the other company that have cisco asa and give me thair configuration VPN Parameters Peer Device / IOS:Cisco-ASA Authentication:Pre-shared KeysWill be exchanged through SMS Or...
View ArticleSRX factory default
Hi all, Is there any way you can find out when the last time a factory default command was issued on the SRX firewall appliances? Thanks for you help
View ArticleRe: How to configure multiple hw-addresses on one interface
Hello,As other forum member said, this is impossible. You could trick the SRX into accepting Ethernet frames destined to several dst MAC addresses (with VRRP) but You cannot force SRX use different...
View ArticleRe: SOHO practicality
Welcome to enterprise networking vendors, unlike server or workstation OS, firmware updates are generally bundled as part of a support contract. The practice is pretty universal and old in the...
View ArticleRe: [S2S VPN] SRX DynamicIP Cisco IOS DynamicIP
Just for the record, I finally got this setup working. The issue with no ike packets seen on the SRX was trivial...user@SRX# show | compare [edit security zones security-zone Internet] -...
View ArticleRe: SRX factory default
Hi ,I think, if we have the historic logs (at least messages file),we can look for the following - root@vSRX10> show log messages | match factory Jan 24 23:53:51 vSRX10 mgd[2805]:...
View ArticleRe: issue dynamic vpn
Hi , to better understand the problem , we might need the complete config . How is the routing done currently ?
View ArticleRe: cisco asa to juniper srx vpn site to site not working !!!!
Try this command. The ASA is using ike v2, so you should configure Juniper for using same.#set security ike gateway bbb-visa-gw version v2-only
View ArticleRe: issue dynamic vpn
In addition to a routing issue, you might also need some securty policies setup depending on how the zones are done between the two ISP links. What you know is that there is a difference between them,...
View ArticleRe: cisco asa to juniper srx vpn site to site not working !!!!
I also notice that the ASA notes include ports on the "interesting traffic" filter. This is the filter we need to match with traffic selectors as it generates the proxy-id for the connection. I am...
View ArticleRe: New config for SRX240
Hey, thanks smicker !!! I'll try this setup this evening. Seems logic ;-)
View Article