Re: Same subnet on two interfaces
You cannot configure 2 interfaces with same subnet. You can find more details on https://kb.juniper.net/KB24928Even though this KB is for M/T, same applies for SRX and below given is a sample log from...
View ArticleRe: GRE over IPSEC to a cisco
This configuration looks good and many customers use similar setup (GRE over IPSec). Let me know if you are worried/suspecious about any specific part of the configuration and need clarification.
View ArticleRe: Same subnet on two interfaces
You may create VRs to use same subnet IP on multiple interfaces.
View ArticleRe: Same subnet on two interfaces
Hi ! as you have a branch-SRX, they can do ether-switching and routing as well so why not defining the 2 interfaces towards your ISP as layer 2 and defining irb with the neded layer3- address for the...
View ArticleSRX upgrade from 11.4 to 12.3 possible?
Quick Question, can we upgrade SRX running JUNOS 11.4R7.5 directly to junos-12.3X48-D40.5 Need urgent reply please. Thanks
View ArticleRe: SRX upgrade from 11.4 to 12.3 possible?
Yes, This is possible.You can directly upgrade from 11.4 version to 12.3 version for security products.However, it would be recommended to go to 12.1X44 and then proceed to 12.3 version.
View ArticleRe: SRX upgrade from 11.4 to 12.3 possible?
Hi, Yes you can definitely go from 11.4 directly to 12.3 as both are EEOL junos version, but recommend to go to 12.1X44 and then move to 12.3 as there are few security checks implemented from 12.1X44...
View ArticleRe: SRX upgrade from 11.4 to 12.3 possible?
Hi, Can you please also let me know the devise that you are trying to upgrade from 11.4 to 12.3.update the output of the comand "show version"Some devise cannot be upgraded to 12.3 Devise at all and...
View ArticleRe: Same subnet on two interfaces
Alexander, I thought I read somewhere you can't do IPsec on IRB interfaces, but I can't find that documentation anymore. Anyway, I tried that too but was unable to get the .1q tags setup correctly,...
View ArticleSRX branch - is it possible to disable auto-power-on?
Hi,I'm about to create a SRX cluster with 2 SRX240 over a switched network.A potential scenario I've heard about is when there is a power-cut, one site goes down, fine.But when the power returns the...
View ArticleClik here to view.
Help with a vpn configuration
i have this configuration:  I need to do this configuration on my srx firewall, the newvpn name in this configuration is Site2Site_uni this is my configuration: ATTACHED and i have this error to...
View ArticleRe: Same subnet on two interfaces
The following config excerpt almost works: interfaces { ge-0/0/14 { vlan-tagging; unit 0 { arp-resp unrestricted; proxy-arp unrestricted; vlan-id 6; family inet { address 10.0.0.6/31; } } } ge-0/0/15 {...
View ArticleRe: Same subnet on two interfaces
Fixed with an additional security policy from-zone untrust to-zone untrust. I had from-zone untrust to-zone junos-host before, not sure why that was not sufficient.
View ArticleRe: DIP configuration in Junos
Thank you for this information. If I have a policy with dst ip would I have to do double nat here with a destination pool? Example: set policy id 123 from "BLAN" to "SLAN" "X" "Y" "TCP/6004" nat src...
View ArticleRe: DIP configuration in Junos
Yes, you could use double NAT just as your ScreenOS is configured. The destination example is on page 23 of the document. The other possibility is to convert the double NAT into a static NAT instead....
View Articlethe issue with pbr on SRX
Hi,everybody. why i can't apply pbr binding a st.0 interface on Juniper SRX ? but ssg can(such as tunnel interface). the SRX st0 interface do not support it . My Lab have a SSG550M set up many...
View ArticleRe: the issue with pbr on SRX
Firewall filters on ST0 is not supported. You can put st0 on virtual-routing instances
View Article