Re: Accidental Power Loss - Juniper SRX 100H
Thank you Spuluka for all your help and solution. And thanks to all who left help comments, I'm sure they all would have worked as well but with my limited knowledge right now, this was my best solution.
View ArticleRe: Accidental Power Loss - Juniper SRX 100H
It's all happy now. Chassis warning light also out now after autorecover repair.
View ArticleRe: SRX port forwarding
also have a problem with dst nat to 443, do you fix it?destination { pool dst-nat-site-ssl { address 10.1.1.241/32 port 443; }}zones { security-zone trust { address-book { address site-ssl...
View ArticlevSRX Not Allowing IPv6 Packets 2001:db8::
Hi, I am new to IPv6 and currently I have to do a little configuration but incurred a problem. I have vSRX(12.1) and Ubunutu connected directly to each other. when I assign 2001:db8:: IP addresses they...
View ArticleRe: vSRX Not Allowing IPv6 Packets 2001:db8::
Hello,There is a well-known place to find out if Your chosen IPv6 address is forwardable or not:http://www.iana.org/assignments/iana-ipv6-special-registry/iana-ipv6-special-registry.xhtml...
View ArticleRe: vSRX Not Allowing IPv6 Packets 2001:db8::
Hi Juniper in Junos call such address MARTIANS and they are not forwarded shoiw route martians table inet6.0... shows the addresses blocked but if you want to use them, then you can delete such address...
View ArticleRe: vSRX Not Allowing IPv6 Packets 2001:db8::
Hi Alexander, Thanks for sharing the commands to allow this address but still am having issue. I allowed the address in inet6.0 rib [edit routing-options rib inet6.0]root@srx-2# showmartians {...
View ArticleSRX100H2 SRX100H2 Dynamic VPN - Configuration Order
Site-to-Site VPN between pair of SRXs where on one side the IP is dynamically assigned by ISP, but it changes from time to time. So of course this means dynamic VPN using aggressive mode. I'm seeing...
View ArticleRe: Active Router Advertissement IPV6 SRX : repond ping: sendmsg: No route to...
thank you , but my problem was resolved my gateway is found on a network above the give / 64 I had change now the problem is resolved thank you anyway
View ArticleRe: Dual ISP, Redundant VPN, and FBF -- working, but tunnels dropping every...
Hi, are you able to provide a summary of what you did to achieve the dual ipsec tunnels handling different traffic at the same time. I have been able to get vpn failover working with separate routed...
View ArticleRe: vSRX 15.1X49-D15.4 on VMWARE Workstation 12 PRO no CONSOLE output sent to...
Hi, As per vSRX installation guide VMWARE ESXi is supported, did you try on this software? Table 3: Specifications for vSRX Component Specification Hypervisor support VMware ESXi 5.1, 5.5 or 6.0...
View ArticleRe: SRX100H2 SRX100H2 Dynamic VPN - Configuration Order
Hello,Speaking of experience :1/ the SRX behind NAT _MUST_ have "establish-tunnels immediately" configured.2/ the SRX with public IP should NOT have "establish-tunnels immediately" configured,...
View ArticleRe: SRX240 Dynamic Vpn with LDAP
Hi Gourami, Sorry for not replying earlier, LDAP would be similar . Also you can use the "Network Policy Service" on Microsoft windows active directory to provide a radius interface which is easier to...
View ArticleRe: SRX100H2 SRX100H2 Dynamic VPN - Configuration Order
Thank you. its plausable explanation and certainly something I will try !! Kind regards
View ArticleClik here to view.
Integrated User Firewall Issues
Hello All, I am trying to get integrated userfirewall working. As you can see i have a user test, which is the member of test-group Following is the configuration that I'm doing on my firwall...
View ArticleRe: Integrated User Firewall Issues
Hi vMicroMe, What does the log file "AD" say ? >show log file AD
View ArticleRe: Integrated User Firewall Issues
Here you go.Mar 14 12:20:11 userid_auth_update_age_time :change state from 1 to 1 Mar 14 12:20:11 userid_add_record_to_dc_timestamp_tbl: dc 10.10.10.3 bdb timestamp updated, 20160314041820.955631-000...
View ArticleRe: SRX firewall routing configuration
Hi Arouba Routing lookup will be perfromed based on the souce interface. if the source interface is bind to a user defined routing-instance, the defination mention in those routing instance will be...
View ArticleRe: SRX- 650 || Policy Based VPN || Communication Issue
Yes do remember that NAT and policy Base VPn on same SRX is big NO NO!
View Article