Re: SRX240 cluster at 2 sites
The virtual routers are doing the right job. When i'm connected to the reth0 network the default route flows via VR1 and ISP site A. When i connect a cable to reth1 the default route flows via VR2 and...
View ArticleRe: SRX210 Booting from backup image 10.0R3.10
Hi! You should be able to upgrade directly to 11.4, please have a closer look at:...
View ArticleSimple migraiton SRX240 to SRX240H2
Can anyone shed some light on how to do this? is it just a simple config backup and restore? They kink here are the nailed up site-to-site tunnels that I need to be sure I capture the pre-share keys...
View ArticleRe: SRX210 Booting from backup image 10.0R3.10
Wow, simple, concise and accurate instructions. Thanks it all worked a treat! I had no idea i could use Filezilla as a method to transfer files to my Juniper. I now have a Hot Spare ready to put into...
View ArticleRe: SRX-100 and USB Cellular modem, not working
I upgraded the firmware on the USB Telus, but still not turning on the USB cell. Must be some way to activate the USB cell device.
View ArticleRe: SRX-100 and USB Cellular modem, not working
Have you followed the first link I provided you ?
View ArticleRe: Simple migraiton SRX240 to SRX240H2
Hi sjbellan, Yup it is a simple backup and restore. Or you can just log in by cli and do "show | display set| no-more" on the SRX 240 and copy the config from the screen ( select all copy ) then on...
View ArticleRe: Simple migraiton SRX240 to SRX240H2
Sorry you should use "load override terminal" since it is ta otally new config. Also, you don't need to remember the pre-share keys copy+pasting them with the whole config works.
View ArticleRe: SRX240 cluster at 2 sites
May be usuing non clustered FW is better solution ? Main purpouse of clustering is to provides hardware redundancy for SRX-s. In you case if one of SRX dies one site will be dead in the water anyway.
View ArticleDHCP issue with SRX
Folks, I am using PPPOE on SRX-100 port FE7 and connecting Port 6 to an AP that I have two SSID defined on VLAN 8 and VLAN 9. Somehow my laptop cannot get an IP on when I am trying to connect to either...
View ArticleRe: SRX- 650 || Policy Based VPN || Communication Issue
The triggering point for the IPSec traffic is the policy "From zone: DMZ, To zone: untrust", which is the transit traffic, When you ping from SRX itself it is a self generated traffic and wont hit...
View ArticleRe: How to change the timeout for telnet/ssh/web services for accessing the SRX
Hi, You can also set the idle timeout for ssh & telnet by executing operational mode commandBelow command will set the idle timeout to 5 minutes.By default it is disabled. set cli idle-timeout 5...
View ArticleRe: SRX240 cluster at 2 sites
As I have mentioned in my first reply if you running dynamic protocol like BGP you can tune it to support failover of ISP else RPM is also an option if you're running static routing.
View ArticleCant commit in SRX 240 cluster
Hello all,i have a problem, that i cant commit in srx240 cluster. Then i commit on node0 it stuck and after some time write to me:error: timeout waiting for response from node1. commit details...
View ArticleRe: Cant commit in SRX 240 cluster
Try thisLogout users connected to secondary nodeExit from config mode on secondary nodeExecute "commit synchronize force" from Primary Node
View ArticleRe: Cant commit in SRX 240 cluster
showed to me:admin@******_node0# commit synchronize forcenode0:commit complete then commiting over parameters it shows me the same massage: 2016-03-02 12:29:12 EET: obtaining db lock on node1
View ArticleRe: Cant commit in SRX 240 cluster
Problem solved. some redundancy groups node was transfered primary to secondary. i manualy transfered it back, and wait i while, after some time cluster starts working fine.Sorry for me english.
View ArticleRe: Simple migraiton SRX240 to SRX240H2
Hi, Does this mean to copy secret data on one SRX will be automatically de-crypted on other site? I have not tried it if it is possible then it is a pretty cool feature. Thanks,MYN
View ArticleRe: SRX cluster, dual ISP's in use all times
Regarding ISP failover, you can achieve it using BGP. About sending traffic to particular ISP, you can define RG groups and keep the priority high for the node from which you want to exit the traffic....
View Article