Re: Accidental Power Loss - Juniper SRX 100H
Until I rebooted to the USB I had web access but no longer do. I can SSH into the system but being new to this device its a bit much for me at the moment. I have had an email form one of our VPN users...
View ArticleRe: why i cannot see latest commit with runn show system commit on chassis...
Hi caulfiedd, Was there any change that you made before that commit?Also, after how much time did you check the system commit ? There should be some change for the commit to be sen under system...
View ArticleRe: OSPF of IPSEC between vSRX and SRX
ospf is a protocol, not a sys services: so this line:set security zones security-zone VPN interfaces st0.2 host-inbound-traffic system-services all is not enough. You also need set security zones...
View ArticleRe: Multiple vpns asymmetric routing issue
Hi Wolter, It seems like your case match the following schenario:http://rtoodtoo.net/how-to-avoid-flow-asymmetry-on-srx/ Check it out. (this blog is written by a former SRX Advanced JTAC, there is lot...
View ArticleRe: SRX240 Dynamic Vpn with LDAP
Hi elkadiki, Can you tell me where I can access these logs? I tried Event Viewer under Windows Log > Security but I was unable to find logs for my test users logging in. I also enabled LDAP...
View ArticleRe: OSPF of IPSEC between vSRX and SRX
Balls you right.Most probably the issue. Will let you know the outcome.
View ArticleExcldue multiple strings from syslog messages
I'd like to exclude multiple strings from syslog messages. I know how to do this for a single string: user@SRX_FW# show system syslog host 10.1.0.40any notice;match "!(.*WEBFILTER_URL_BLOCKED.*)";My...
View ArticleRe: Excldue multiple strings from syslog messages
At a guess try:match "!(.*foo.*)|!(.*bar.*)";Sorry if it's wrong, it's just a guess. Regards,Andy
View ArticleHow to monitor interface traffic with Cacti, PRTG or MRTG
Hi all, Is there a way to monitor traffic on all ports with Cacti, PRTG, MRTG or something with SRX3400 ? If there is a way, how can do the configuration ? Thanks
View ArticleRe: Is it possible to use no-ip for Dynamic DNS?
Hey Aaron, You are no newbie! This is working great for me, thank you. Found this easier than having to add a script to the file system. For free no-ip.com accounts the DNS records are cleaned up after...
View ArticleSRX junos-http's ALG function and junos-http timeout
Hi everybodyI'm looking for information about SRX's junos-http ALG!I can't find any default ALG option for HTTP,---------------------------------------------------------------user@host> show...
View ArticleDHCP server on interface vlan tagging (sub-interface)
Hi, Has any body tried to config DHCP server on interface vlan tagging?Set static ip on laptop is working but dhcp is not working. [SRX220] <------>[ex2200]--------->laptop ge-0/0/1 {...
View ArticleRe: Is it possible to use no-ip for Dynamic DNS?
Hi there, I think you worked it out as you were typing the message . The easiest thing to do would be to do as you say, an event triggered evey 2 weeks to just update the connection with its IP...
View ArticleDIP Nat screenos to Junos
Hi, I just need to understand so if someone can explain will appriciate. set interface aggregate1.109 dip 6 41.79.xxx.xxx 41.79.xxx.xxx VS.set interface aggregate1.109 ext ip 41.79.xxx.xxx...
View Articlepolicy based VPN with Cisco
Hi all! I have a very strange problem.I set up the policy based VPN with SRX 210B and Cisco 881and I see a ctrange picture.sometime after the SRX reboot everything is working fine. but sometime traffic...
View ArticleSRX240H2 cluter and BGP with 2 internal peers
Hi, I've got a situation, where I've got: On my home site the 2xSRX240H2 in cluster, on the POP1 MX80 and on the POP2 another MX80.ge-0/0/1 and ge-0/0/2 on both routers are connected as control and...
View ArticleRe: 3G USB modem on SRX devices
Hello Sariwati,I have an SRX100 running 12.1X46 D45 and a sierra optus Aircard 320U but the cl-0/0/8 interface remains administrativiely down no matter what i do. can you help? i have pasted the config...
View ArticleRe: CoS prioritized Citrix/ICA through VPN
Hi dfex, Shouldn't filter CLASSIFY-ICA include ' then forwarding-class ...'? And I'd like to know what assigns a DSCP value to the MF classified traffic.Also, what loss-priority would be used here,...
View ArticleRe: Is it possible to use no-ip for Dynamic DNS?
Hey Aaron, Thanks for the reply, I think I got it!I have tested and seems to be all good with both event triggers working together. I now have an OR statement to kick off the update "[...
View ArticleSRX240 HA CPU(Control) 100% after reboot and no conf changes
SRX240 HA CPU(Control) 100% after reboot and no conf changes Model: srx240h2JUNOS Software Release [12.1X46-D35.1] Pls help.
View Article